
Courtesy of StoredTech
by Mark Shaw
When it comes to technology the outlook for 2025 is split between compliance and AI utilization. What do we mean by this? We mean if you are in a HIPPA (Medical Records) medical records or in any line of contracting for the federal government (CMMC) you will be impacted by some new regulations on your business. You may not even be aware of them.
For example, passed in the final hours of 2024, companies that fall under the HIPPA guidelines are now required to do two more things to protect their patient data. One they must have their computer systems scanned for vulnerabilities every quarter. This means four times a year you are expected to have a complete scan of your system to understand the current state of your IT health. Secondly you are expected to do annual penetration testing. This is where an outside firm tries to access your systems and data without being given permission. Once completed this report is shared with you and your technology provider to give a list of recommendations on how to remediate any shortcomings.
Interestingly HIPPA was created in 1995 and to date there has been very little “teeth” in the law and many practices are simply just saying “It is not for me, I’m too small, too specialized, not important enough, don’t have enough data to report on” We see this quite regularly. Medical firms are focused on their main jobs and not the technology side.
This is expected to no longer be the case. The new guidelines are letting regulators to get tougher on everyone. If you are not considering this and you have a medical practice, you should consider talking to your technology provider today to ensure you meet the requirements.
If you are in any industry touched by federal government, from a direct contractor for services, manufacturing for them or even being janitorial services with clients in the government space, you are being forced to adopt stronger guidelines and comply with the new CMMC rules.