Health Agency Eases Security and Transparency Requirements for Hospital Record Software

October 26, 2026 - 19:03

The administration has rolled back a set of security, privacy and transparency requirements that had been placed on vendors of electronic health record software used by hospitals. The change affects rules that governed how these companies handle sensitive patient data and how openly they disclose information about their products.

Under the revised approach, software vendors will face fewer mandatory safeguards regarding data protection and will have more flexibility in what they are required to reveal about their systems. Supporters of the move argue that the previous requirements created unnecessary burdens and slowed innovation, making it harder for hospitals to adopt modern tools and for smaller companies to compete in the market.

Critics, however, warn that loosening these standards could put patient information at greater risk. They point out that health records contain some of the most sensitive personal data, including diagnoses, treatments and financial details, and that weaker oversight may leave hospitals exposed to breaches or misuse. Some patient advocacy groups have also raised concerns that reduced transparency could make it harder for hospitals to evaluate whether the software they purchase meets adequate safety standards.

The rollback is part of a broader effort to reduce regulatory requirements across the health care sector. Industry observers note that the impact will depend heavily on how hospitals and vendors respond in practice, since many institutions may still choose to hold their suppliers to higher standards on their own. The coming months are expected to bring further debate over the balance between easing compliance costs and protecting patient privacy.