Privacy & Security Resources

HITEQ Center, June 2025

This article uses the 2020 incident at the Family Health Center of Worcester (FHCW) to explore innovative strategies to bolster health centers' cybersecurity, including leveraging group purchasing organizations (GPOs) for discounted solutions and implementing bug bounty programs to proactively strengthen systems. Ultimately, it investigates how these approaches can protect vital community health resources from the escalating tide of cyber threats.

A use case example from the Arizona Health-e Connection and SAMHSA Consent2Share project

This is a recent presentation by the Substance Abuse and Mental Health Services Administration's Health IT effort that provides an overview of their Consent2Share project. Consent2Share is a tool for consent management and data segmentation that is designed to integrate within existing electronic health record (EHR) and Health Information Exchange (HIE) systems. This overview is provided to health center leadership and staff to help them better understand new practices and...

HITEQ Center, January 2025

This practical guide features key tools and principles to help health centers (HCs) develop safe documentation for intimate partner violence, human trafficking, and exploitation (IPV/HT/E) in their electronic health records (EHRs) and other technology tools.  In 2020, the Health Resources and Services Administration’s (HRSA) introduced new Uniform Data System (UDS) data elements for health centers (HCs) to report on IPV and HT/E. With the evolving landscape of data use in medical...

HITEQ Center and Feldesman Tucker Leifer Fidell LLP, September 2023

The Office of the National Coordinator for Health Information Technology’s (ONC) 21st Century Cures Act Information Blocking Rule (Info Blocking Rule) prohibits covered actors – including health care providers, health IT developers of certified health IT, and health information exchanges/health information networks– from engaging in practices likely to interfere with, prevent, or materially discourage access, exchange, or use of electronic health information (EHI). The Info...

Virtual Learning Collaborative

In this session participants learned about the data privacy laws as they relate to digital health. Attendees had a better understanding about HIPAA, data privacy laws, telehealth regulations and more.

Guidance and Resources for Health Centers

General cybersecurity guidance would suggest that Health IT breach should not be considered a matter of “if”, but rather a matter of “when”. How Health Centers prepare and respond to an episode of a breach is just as important as defending itself from the breach.

A Case Study of the Family Health Center of Worcester’s Ransomware Incident, February 2024

The use of ransomware — malicious software that restricts access to computer systems with financial demands — has escalated, targeting health centers and putting countless lives at risk. This dire reality came to the forefront during the alarming ransomware attack on the Family Health Center of Worcester, Inc. (FHCW), where the personal health information and care continuity for thousands of patients were compromised. This resource uses FHCW's experience as a case study to demonstrate the...

Highlighted Resources & Events

Need Assistance?

Would you like more assistance regarding Privacy & Security strategies or support in using any of the include resource sets?

  Request Support

The Quadruple Aim

Quadruple Aim

A Conceptual Framework

Improving the U.S. health care system requires four aims: improving the experience of care, improving the health of populations, reducing per capita costs and improving care team well-being. HITEQ Center resources seek to provide content and direction aligned with the goals of the Quadruple Aim

Learn More

Quick Feedback Request

Acknowledgements

This resource collection was cultivated and developed by the HITEQ team with valuable suggestions and contributions from HITEQ Project collaborators.

Looking for something different or have something you think could assist?

HITEQ works to provide top quality resources, but know your needs can be specific. If you are just not finding the right resource or have a highly explicit need then please use the Request a Resource button below so that we can try to better understand your requirements.

If on the other hand you know of a great resource already or have one that you have developed then please get in touch with us by clicking on the Share a Resource button below. We are always on the hunt for tools that can better server Health Centers.

REQUEST A RESOURCE  SHARE A RESOURCE