Last week, members of the Senate HELP Committee issued a draft of upcoming bipartisan legislation on health information technology (health IT), including changes to the HITECH Act.  The legislation calls for a framework for governance of health information exchange and supplements patient access requirements under HITECH.  Other focus areas include information blocking, interoperability, and transparency

On Monday, the HHS Office of Civil Rights (OCR) released its third resolution and settlement agreement in as many weeks.  The $750,000 settlement with the University of Washington Medicine (“UWM”) is yet another citing the alleged failure to conduct an enterprise-wide risk analysis as required by the HIPAA Security Rule.  As part of the settlement,