Healthcare has been the number one targeted industry for cyberattacks for 13 consecutive years. Now, the federal government is finally overhauling the rules – and the penalties for non-compliance are steeper than ever.

In this Q1 2026 HIPAA update, Texas Health Law breaks down the massive regulatory shifts hitting the healthcare industry right now.

Texas Health Law covers the newly proposed HIPAA Security Rule that eliminates “optional” IT controls, the February 2026 Notice of Privacy Practices deadline that most clinics have already missed, and the exploding legal risks surrounding Artificial Intelligence in healthcare. From staff members putting PHI into public ChatGPT servers to class-action wiretapping lawsuits over AI medical scribes, the compliance landscape has completely changed.