Andy Lehman

The Cost of Compliance Failure in Healthcare & Other Regulated Industries Compliance isn’t paperwork. It’s risk management at executive level. When it fails, the impact is never small. Under HIPAA and General Data Protection Regulation, fines can reach millions. But the real damage is operational shutdowns, ransomware exposure, lost patient trust, and board-level scrutiny. In regulated industries, “the IT team handles it” is no longer acceptable. If your architecture doesn’t include: • Clear data ownership • Role-based access controls • Encryption & monitoring • Documented audit trails You don’t have compliance. You have liability. After 22+ years in healthcare and regulated environments, I’ve learned this: • Digital transformation without governance is reckless. • AI without data control is dangerous. The modern CIO/CTO isn’t just driving innovation. They are designing resilience. Compliance done right doesn’t slow growth. It protects it. #CIO #CTO #HealthcareIT #CyberSecurity #DataGovernance #HIPAA #GDPR

5

Hidden Pitfalls in EMR Transitions Not all EMR transitions are created equal. Watch out for these common pitfalls that can derail your project: ·        Complex data migration ·        Poor change management planning ·        Hidden costs beyond licensing ·        Workflow mismatches ·        Overbooked vendors with limited capacity The key? Plan early, ask hard questions, and partner with experienced vendors. #HealthcareIT #EMRSelection #CPSI #DigitalHealth #RevenueCycle

20

5 Comments

This statement on information blocking could disrupt EHR vendors’ plans to corner the healthcare data exchange market. Here’s some quick background: EHR vendors like Epic, eCW, and Cerner set up (or are setting up) Qualified Health Information Networks (QHINs) that connect with other QHINs to form a national data exchange network. Healthcare provider organizations must decide whether to participate in the national network, and if they do, whether to join the QHIN that their EHR vendor offers or an independent one. It would have been tempting for the EHR+QHIN vendors to strongarm their provider clients into proprietary QHINs. The EHR vendors could have said things like: 🫸 “Choose our QHIN or you will be on your own to bring data from the national network into the EHR.” 💰 “You will have to pay us so much to ingest data from a competitor QHIN that you might as well join ours.” 🏆 “Joining our QHIN may be costly, but it would help you qualify for our Super Amazing Client Program and avoid costly EHR penalties. And we’ll waive our QHIN costs for a year or two.” ⏳“You could submit a request to bring data from a competing QHIN into the EHR, but it’s not really a priority for us and could take a while. Just join our QHIN.” The section of the FAQ document pictured below says that attempts to limit their customers’ ability to select a QHIN would be considered information blocking. EHR vendors that engage in such behavior could face monetary penalties and legal consequences. I agree with this guidance from ASPT/ONC. Providers and other organizations should be able to select the QHIN that offers the best services at the lowest price - not the QHIN that has the most leverage. EHR vendors that offer QHINs already have systems to connect with other QHINs to bring data into the EHR from the national network. They should allow their provider partners to bring life-saving clinical data into the EHR without forcing them into their QHINs. I’m looking forward to seeing whether the four-sentence FAQ response from ASTP/ONC will change the direction of the market on this. Perhaps you are reading this differently. What do you think? Will the EHR+QHIN vendors still convince most providers to join their QHINs? https://lnkd.in/gwgJTSvC

35

12 Comments

Imagine healthcare with no shared transaction standards. No HIPAA. No X12. No FHIR. No common baseline. Even with modern JSON APIs, things would start to fall apart fast: • Every payer would design their APIs differently • Quality would vary wildly • Developer experience would be inconsistent at best Interoperability wouldn’t just be hard — it wouldn’t exist. In this clip, Stedi CEO Zack Kanter and Brendan Keeler, Interoperability Practice Lead at HTD Health and author of the Health API Guy Substack, talk through why standards – even if imperfect – matter. Without them, most healthcare integrations and related innovations simply wouldn’t happen.

15

1 Comment

Switching EHR vendors? If your migration plan doesn’t use open standards like FHIR, HL7v2, and C-CDA, you could be leaving critical patient data behind. Hart’s standards-based migration approach ensures you don’t miss: - Unstructured clinical notes - Historical lab and order data - Billing and financial records No black boxes. No shortcuts. Just complete, compliant data—moved and validated in just weeks. Find out how with a Hart Data Management Assessment. https://hubs.ly/Q03vkDfS0. #cio #healthcaredata #NoDataLeftBehind #HealthIT

2

Oracle (Cerner) falls even further behind Epic, and its new AI-powered EHR is only going to make things worse for them. Yesterday, a new KLAS report dropped an expected bombshell: Oracle Health lost 57 hospitals in 3 years as clients fled to other platforms (mostly to Epic). Meanwhile, Epic has surged ahead, now serving 42% of U.S. acute-care hospitals (nearly double Oracle’s 23%). Oracle is betting on a new AI-powered EHR (whatever that means) to regain ground. But here’s the reality: healthcare isn’t a bleeding-edge industry when it comes to tech adoption. Doctors and patients are cautious. At Callen-Lorde, when we rolled out Abridge’s AI scribe, we had some providers opt out, not because it didn’t work, but because they weren’t comfortable with AI in their exam rooms. Some patients and staff also voiced concerns. In an LGBTQ+ community where many have experienced trauma and are also highly informed, that skepticism is totally understandable even if I don’t fully agree with it. This isn’t just Oracle’s challenge, it’s every healthtech innovator’s. The question isn’t “Can AI do it?” but “Will patients and providers trust it enough to use it?” This Epic-versus-Oracle saga is also a litmus test for digital health innovation and trust. If a tech giant like Oracle can stumble after a $28B bet on Cerner, what does it say about the future of big tech in healthcare? https://lnkd.in/gamejC48

49

1 Comment

🩺 Behind every safe, efficient patient encounter is an informatics-led workflow—but fragmented tools and ad-hoc staffing create barriers to consistency. A single informatics partner can cut through the complexity: align EHRs with bedside practice, reduce workarounds, improve decision support, and steady patient flow. Grant Mill Healthcare Solutions builds and places the nurse, clinical, and health informatics teams that make technology serve care—so your organization can focus on outcomes, not workarounds. #HealthcareStaffing #WorkforceResilience #HospitalOperations #TalentStrategy #FutureOfCare #HealthcareAI #ClinicalInformatics #PatientFlow #HospitalManagement #DigitalHealth #NursingInformatics #DigitalStrategy #InnovationInHealthcare #HealthIT #HealthcareLeadership #AIinHealthcare

1

💸 Why “letting your legacy EHR limp along” is an expensive trap Many organizations delay archiving because “the old system still works.” But that decision often hides real and growing costs: Incremental maintenance, licensing, and support fees Security and patching exposure Loss of institutional knowledge (finding staff who understand the old system) Integration complexity as upstream/downstream systems evolve A well-designed archive is not just about preserving data—it’s about retiring the overhead. #LegacySystems #CostSavings #RiskManagement #HealthIT

2

Not necessarily a cyber role - but if Henry is handling it - I'd take a look. And it's Remote.

3

1 Comment