Data Storyteller

As privacy regulations, AI policies, and digital health technologies evolve, health centers face increasing complexity in balancing compliance with patient-centered care. Session 2: At the Record Level shifts the focus to frontline decision-making—how individual providers handle sensitive documentation, access, and legal exceptions in the EHR.

As privacy regulations, AI policies, and digital health technologies evolve, health centers face increasing complexity in balancing compliance with patient-centered care. Session 1: The Compliance Crossroads explores the broader regulatory environment—what’s in effect, what’s changing, and how policies like the HIPAA Security Rule, AI executive actions, and cybersecurity enforcement intersect.

Join our free learning collaborative designed to help health centers optimize technology to deliver care in dynamic settings. This series will focus on the unique challenges and opportunities of using EHRs and other health information technology in care settings such as mobile units, school-based health centers, street outreach programs, and correctional facilities.

In this webinar, participants learned best practices and recommendations for providing care and addressing intimate partner violence (IPV) and health technology to protect patient's privacy and safety. Attendees were able to document IPV to adhere to the CURES Act and connect patients with community-based services.

CoE-PHI resource that describes the Information Blocking Rule and explains that it does not preempt stricter privacy laws and regulations such as 42 CFR Part 2.

Key Points:

• Information blocking includes practices that would “interfere with, prevent, or materially discourage the access, exchange, or use of electronic health information.”
• Following a legal requirement to obtain patient consent for a disclosure meets the “privacy exception” in the Information Blocking Rule and is not considered information blocking.
• If a portal cannot segment Part 2-protected records or prevent a patient’s proxy from unconsented access to such records, the healthcare provider should not share Part 2-protected records on the portal.