Healthcare IT Grew Up Last Week
The HIPAA Privacy Rule went enforceable on April 14, and healthcare IT is a different job than it was on April 13. The providers I work with are good people who treated patient data like office paperwork for thirty years — if you could reach the cabinet, you could read the chart. That is over now, legally. Honestly, it should have been over a while ago.
What it means in my day: access control on everything, audit trails that can answer who saw which record and when, and security designed in at the architecture stage instead of stapled on at go-live. It makes projects slower and more expensive. It also makes them right.
Consulting note, because this is the part clients fight: compliance is the floor, not the ceiling. The systems built past the audit — built to actually protect people — are the ones still quietly running a decade later.
Bet: every industry gets its own version of this inside ten years. Money got regulated first, then health data. The rest of the data economy is borrowing time.