The threat involved malicious actors using Trickbot malware to compromise information technology systems, including by engaging in ransomware attacks, data theft, and the disruption of health care services.

The Office of the National Coordinator for Health Information Technology has pushed back the starting date for compliance with information blocking provisions from Nov. 2, 2020, to April 5, 2021.

The Centers for Medicare & Medicaid Services and Office of the National Coordinator for Health Information Technology have released final rules intended to advance interoperability of health information technology and improve patients’ access to their health information.

The rules, intended to increase interoperability and improve patients’ access to their health information, finalize provisions related to the MyHealthEData initiative and implement provisions of the 21st Century Cures Act.

The report, mandated by the 21st Century Cures Act, highlights issues and challenges pertaining to the use of health information technology and electronic health records (EHRs) in four categories: clinical documentation; usability and the user experience; EHR reporting; and public health reporting.

The agency reports that cybercriminals could send "phishing" emails purporting to include infection prevention information related to the new coronavirus (2019-nCOV) outbreak.

The issues are related to the validation process for Windows Elliptic Curve Cryptography certificates and the Windows remote desktop client. The Department of Health and Human Services is urging health care providers to install patches to minimize their risk.

External actors can exploit cybersecurity vulnerabilities in medical devices to assume control of a device and change or prevent its intended function.

America’s Essential Hospitals urged the Centers for Medicare & Medicaid Services to reduce administrative burden regarding clinical documentation, health information technology, and public health reporting.

In June 3 letters, America's Essential Hospitals encouraged the Centers for Medicare & Medicaid Services and the Office of the National Coordinator for Health Information Technology to consider the regulatory burden that new interoperability requirements would place on essential hospitals.

The Office for Civil Rights updated its website with new guidance related to health information technology access rights under the Health Insurance Portability and Accountability Act. The guidance is particularly relevant given the push for increased patient access through third-party applications.

The Centers for Medicare & Medicaid Services and the Office of the National Coordinator for Health Information Technology extended to June 3 the deadlines for commenting on two proposed rules related to interoperability, patient access to health information, and information blocking.

The agency in April will randomly select nine Health Insurance Portability and Accountability Act–covered entities, including health plans and clearinghouses, for compliance reviews.

Hospitals now have until March 14 to submit data for the Medicare Promoting Interoperability and Hospital Inpatient Quality Reporting (IQR) programs.

The Centers for Medicare & Medicaid Services updated the Promoting Interoperability Programs website with new resources for the 2019 program year. The agency also announced two calls on the recently released interoperability and patient access proposed rule.

The proposals aim to increase interoperability and improve patients’ access to their health information, while reducing regulatory burden on hospitals.

In response to a request for information, America's Essential Hospitals urges the Department of Health and Human Services to ensure enforcement of the Health Insurance Portability and Accountability Act encourages care coordination and reduces regulatory burden on essential hospitals.

The report, by America’s Essential Hospitals and six other national hospital associations, highlights the importance of interoperability and outlines six pathways to ensure health information technology systems can seamlessly communicate.

The new report, released by a public-private task force led by the Department of Health and Human Services, outlines common cybersecurity threats to health care organizations and best practices to counter such risks.

America’s Essential Hospitals and six other hospital groups urged Health and Human Services Secretary Alex Azar to refrain from adding health information exchange requirements to the Medicare and Medicaid Conditions of Participation.

New resources from the Department of Health and Human Services’ Healthcare Cybersecurity and Communications Integration Center outline new hacking and malware threats and prevention techniques.

An informational bulletin outlines the role of Medicaid in the care of infants born with neonatal abstinence syndrome, while a letter to state Medicaid directors offers guidance on funding Medicaid technology to combat the opioid crisis.

House and Senate committees this week will mark up legislation to combat the opioid epidemic with the hope of passing a bipartisan bill by Memorial Day.

Researchers discovered two techniques, known as Meltdown and Spectre, that can circumvent data protections and potentially expose data on many computers purchased over the past decade.

In response to the request for information, the association encouraged flexibility and a focus on hospitals treating high numbers of complex patients.

The committees were convened at the direction of the Department of Health and Human Services and include representatives from members of America’s Essential Hospitals.

Merit-based Incentive Payment System–eligible clinicians and groups may apply for hardship exceptions due to connectivity issues or extreme circumstances, such as disasters.

Nearly half of U.S. health care breaches in July were caused by hacking, marking the first time this year that hacking incidents outnumbered insider breaches in both frequency and number of affected patient records.

The change aims to simplify data reporting for hospitals, as most already use the QualityNet portal for communications and quality data exchange.

Exceptions are available for Merit-based Incentive Payment System eligible clinicians and groups that experienced insufficient internet connectivity, uncontrollable circumstances, or other issues; applications are due Oct. 1.

The update calls for improvements to federal network cybersecurity, protection of critical infrastructure, and an international engagement strategy.

America’s Essential Hospitals has established this page of cybersecurity resources on preventing and responding to information technology attacks.

A new strain of ransomware, known as Petya, could affect the health care sector and is unique because the virus is capable of self-replication.

Two new reports warn about the same vulnerabilities that allowed the WannaCry virus to spread worldwide earlier this year.

New Medicare cards will include a randomly generated Medicare beneficiary identifier instead of the Social Security-based health insurance claim number.

The resources, designed for Health Insurance Portability and Accountability Act-covered entities or their associates, include a checklist and infographic.

The Health Care Industry Cybersecurity Task Force outlines resources and the importance of cybersecurity to patient safety and continuity of operations.

The updates include guidance on reporting ransomware and note how Health Insurance Portability and Accountability Act compliance can protect from an attack.

Ransomware, a type of malware that infects computers and restricts access to files until a ransom is paid, has hit health care organizations in the United Kingdom.

Several leadership posts — including FDA commissioner, National Coordinator for Health IT, AHRQ director, and HRSA administrator — have been filled.

The update for the 2018 performance year aligns electronic clinical quality measure specifications with current clinical guidelines and code systems.

Eligible hospitals and professionals now have until March 13 to attest to the Medicare Electronic Health Record (EHR) Incentive Program.

Hospitals now have until March 13 — instead of Feb. 28 — to submit electronic clinical quality measure data from 2016 to CMS.

The bill is a step toward expanding Project ECHO, an innovative “hub and spoke” education model created at association member University of New Mexico Health Sciences Center.

Under the rule, the Office of the National Coordinator for Health Information Technology now can conduct direct surveillance of certified health information technology.

The National Health Information Sharing and Analysis Center received the funding to educate health care sector stakeholders, partners on cybersecurity.

Hospitals and eligible professionals now can register to submit National Health Care Survey data in 2017.

The Medicare Access and CHIP Reauthorization Act of 2015 requires CMS to remove Social Security numbers from beneficiaries’ Medicare cards by April 2019.

ONC has released a web-based resource that gives providers comprehensive, easy-to-understand information about applying health information technology.

ONC is requesting feedback particularly on interoperability as it relates to social determinants of health and collection of gender identity data.

The new guidance reinforces the importance of compliance with HIPAA to prevent and recover from cyber threats.

Providers have until July 1 to apply for a hardship exception to avoid a penalty for the Medicare EHR Incentive Program.

Updated guidance clarifies that covered entities may use and disclose protected health information for treatment or for quality and other health care operations.

Hospitals, providers can claim exclusions for public health meaningful use measures to avoid inadvertent penalties from the 2015 EHR Incentive Program final rule.

Agency's decision to extend deadline to July 1 gives eligible hospitals an additional three months to file for an exception.

Telehealth Network Grant Program will award up to 20 grants for a maximum of $300,000 annually to expand services; applications are due April 8.

Eligible hospitals now have until March 11 to show meaningful use of EHR technology or face a Medicare payment adjustment in 2017.

New, streamlined process requires less information from hospitals for application; deadline to apply is April 1.

CMS now able to grant categorical exceptions to essential providers and hospitals that did not meet 2015 requirements; hospital applications due April 1.

CMS website includes information on changes to Medicare and Medicaid EHR Incentive Programs in recent final rule.

In three FAQs, agency provides guidance on how to attest to health information exchange and patient electronic access measures, as well as objectives that require patient action.

In an FAQ, CMS offers alternate exclusions for newly finalized measures in the public health reporting objective that were not previously required or are unfeasible to implement in 2015.

Just added: CMS contacts for provider questions. Explore fact sheets, videos, other information available to help ease Oct. 1 transition to new coding system

CMS released a new resource clarifying when ICD-9 and ICD-10 codes are required. Claims submitted on Oct. 1 or later but with dates of service prior to Oct. 1 require ICD-9 codes, not ICD-10.

Key provisions in the final rule include calendar year reporting, 90-day reporting period in 2015, and details for stage 3 meaningful use requirements.

In its Shared Nationwide Interoperability Roadmap, ONC presents an action plan that will move the health care system toward the free exchange of health information to improve the provision of health care.

The rule finalizes proposals from the stage 3 proposed rule and the proposed rule modifying the programs from 2015 to 2017. Changes include a 90-day reporting period, fewer hospital objectives, and a lower threshold for patient electronic access.

Updates cover exclusions for submitting electronic immunization data and applicability of submitting summary of care documents for transferring patients.

CMS has tested its systems and is prepared to assist providers as problems arise. Providers should first contact their MAC for Medicare claims questions or subsequently email the ICD-10 Coordination Center or the ICD-10 ombudsman.

Providers may be exempt from a payment adjustment for the Medicare and Medicaid EHR Incentive Programs if they switch certified EHR technology vendors or their vendor is decertified during the program year.

The Federal Health IT Strategic Plan: 2015–2020, aims to improve health IT infrastructure, transform health care delivery, and improve individual and community health.

Planned Parenthood controversy continues to influence federal funding negotiations. Health insurer and hospital mergers are reviewed. Plus, committees consider abortion, Medicaid, HIT, and biosimilar drugs.

New materials from CMS and the association's list of resources will help providers as they transition to ICD-10 diagnosis and procedure codes on Oct. 1.

Panelists from across the membership asked Congress to ensure the sustainability of telehealth through payment parity for telehealth services.

Essential hospitals meet their commitment to vulnerable patients across regions and states with innovative technology.

The guide outlines the critical activities needed for a successful ICD-10 launch on October 1. Also included are instructions for accessing ICD-10 codes and links to training and testing resources.

The House will vote to repeal two major ACA provisions this week - medical device tax and the IPAB - and consider four Medicare Advantage bills. Health committees are reviewing mental health and HIT.

The House could vote on 21st Century Cures legislation as early as next week, health committees focus on 9/11 compensation and health information exchange.

In comments on the agency’s proposals for stage 3 of the EHR Incentive Programs, the association called on CMS to delay finalizing the proposed rule and to provide much-needed flexibility for providers in the program.

The agency will grant funding to 10 community organizations, government agencies, or community groups to spread health information to community partners.

Congress must pass a homeland security spending bill this week, and health insurance marketplaces are under scrutiny as oral arguments in the King v. Burwell Supreme Court case begin.

There is particular interest in mechanisms for greater comprehensiveness in care delivery, care for complex patients, care coordination, and value-driven reimbursement.

The funding aims to improve health care delivery through health information interoperability, training, and shared learning resources.

Hospitals must prove meaningful use in 2014 to receive a 2014 incentive payment and avoid a 1 percent payment adjustment in 2016.

CMS clarifies that for measure 2 of the summary of care objective, transitions of care involving a third party can be used when certain requirements are met.

Webinar will be held Thursday, Oct. 2, 1 – 2 pm ET. Registration is required.

The association joined a letter to HHS asking for a 90-day EHR reporting period for FY 2015.

The webinar, to be held, Sept. 16, 2:30 - 3:30 pm ET, will include the CMS 2014 CEHRT flexibility final rule and the ONC 2014 edition certification criteria final rule.

ONC issued a final rule including 10 optional criteria and 2 revised criteria for the 2014 edition EHR certification criteria. The goal is to reduce regulatory burden, increase flexibility, and enhance EHR interoperability and information exchange.

CMS and ONC finalize extension of stage 2 meaningful use requirements and give providers flexibility for reporting via 2011 or 2014 certified EHR technology.

The tool helps providers determine their potential options for implementing the 2014 edition of certified electronic health record technology (CEHRT).

CMS has released a call for feedback on the June 10 draft quality reporting document architecture guide for eligible professionals and hospitals to use for 2015 clinical quality measure reporting. Feedback is due June 27.

Health IT Policy Committee Meaningful Use Workgroup seeks input from users on meaningful use experiences to help optimize stage 3 requirements. The group is accepting comments on a recent blog post.

The Centers for Medicare & Medicaid Services and the Office of the National Coordinator for Health Information Technology released a proposed rule May 20 delaying stage 2 meaningful use implementation and adding flexibility for Medicare and Medicaid Electronic Health Record Incentive Programs.

As part of the meaningful use program, participating hospitals must report data for eCQMs that cover three of six National Quality Strategy domains. The original eCQM specifications were released in 2012 and are updated annually.

A new FAQ is available on the patient electronic access objective. Updated FAQs provide information on the summary of care objective and AIU attestation.

Beginning Oct. 1, hospitals to face fiscal year 2015 penalties for failing to demonstrate meaningful use of electronic health records by July 1, 2014. Hospitals encountering obstacles beyond their control may apply for a hardship exception.

The Centers for Medicare & Medicaid Services has made available resources to help providers prepare for and transition to International Classification of Diseases, 10th Edition (ICD-10) diagnosis and procedure codes by Oct. 1, 2014. Resources include fact sheets, frequently asked question, webinars, and an offer to participate in end-to-end testing.

Health IT Policy Committee will use panel's input for national HIT framework