Hot Topics in Health Information Privacy

Regulatory change, AI adoption, and third-party risk are converging on health information privacy programs at the same time. This moderated roundtable brings together chief privacy officers and legal leaders from health systems and health technology organizations for a candid discussion of the issues shaping HIPAA compliance and health information privacy in 2026.

The session is structured as a peer conversation where our panelists will speak to how they are prioritizing competing regulatory demands, governing PHI in emerging AI use cases, negotiating business associate agreements as vendors seek broader access to protected health information, and preparing for the potential outages and upstream compromises that defined the past few years in healthcare.

Discussion topics

• Regulatory priorities in 2026. With a HIPAA overhaul underway, the 42 CFR Part 2 compliance date now passed, and state legislatures active on health information, panelists share what is commanding their attention now.
• AI governance and data strategy. As generative AI gives way to agentic use cases that outpace existing regulatory frameworks, panelists discuss how they are building governance to support AI adoption inside their organizations.
• Minimum necessary in AI use cases. Panelists address how they apply the standard to AI when data restrictions may degrade output.
• BAA negotiations in the AI era. Training data prohibitions, AI features that require PHI access, subprocessor disclosure, and de-identification carve-outs; BAAs are a new frontier for AI data use conversations.
• Third-party and vendor risk after Change Healthcare. With 2025 as the worst breach year on record, panelists discuss how their teams are preparing for critical vendors going offline and upstream data compromises.

Attendees will come away with a candid, expert-level view of how privacy and legal leaders are managing these pressures, and framing they can apply to their own programs.

AHIMA Certification

Eligibility: Both live and on-demand attendees are eligible to receive an AHIMA-accredited CEU for attending this webinar.

Requirement: Attend for a minimum of 45 minutes to qualify, live or on-demand.

‍CEU Policy & Process Notes:

• No exceptions can be made.
• CEU-eligible participants will receive an email with a link to download their CEU within one (1) business day from [email protected].
• The participant must ensure that their name and email address are entered correctly at the time of registration.
• The participant is responsible for ensuring that their organization’s email settings do not block emails from [email protected].