Blog Post

Keeping Current in 2026 With a Changing Regulatory Environment

Richard P. Kusserow | March 2026

Healthcare could face a wave of regulatory change throughout 2026. Leaders who don’t proactively monitor evolving requirements risk slow or inadequate responses, but the volume of information can be difficult to sift through. 

 Regulations are shifting on multiple fronts, including: 

  • Cybersecurity and data privacy
  • Accelerated adoption of artificial intelligence (AI)
  • Interoperability requirements from the CMS 
  • Changing payer rules
  • Increased federal and state oversight 

Leaders should also expect complex multi-jurisdiction compliance, as states such as California and New York continue to introduce unique regulatory requirements that impact the implementation of services and tools.

The overall message is clear: you need robust systems to track policy activity and adapt your compliance measures. 

This article explores three ways you can do that and a series of concrete, tactical steps to keep your organization safe in 2026.

How to Leverage Automated Monitoring Systems

Every person working in healthcare compliance should follow official government and agency updates. These include the Office of Inspector General (OIG), the Centers for Medicare & Medicaid Services (CMS), the Food and Drug Administration (FDA), and state health departments that publish rules, proposed changes, and compliance timelines.

Automated systems and intelligent tools can significantly reduce the manual burden involved here. There is now a wide range of regulatory intelligent tools tailored to healthcare, along with generic news aggregation tools that can be highly valuable. 

While there is no “correct” system, we believe most teams will benefit from at least some of the following: 

  • Use automated news feeds and email alerts to sort 
  • Invest in third-party regulatory tracking platforms
  • Build or source compliance dashboards that centralize updates
  • Leverage AI-enabled alert systems that surface relevant changes quickly, assist in managing workflows, and prioritize what is most relevant.

How to Improve Internal Communication Around Regulations

Identifying relevant regulatory changes is just the start; you also need reliable systems to communicate and address these new requirements internally. This presents multiple challenges, including cultural inertia and communication silos that make effective action difficult to coordinate.

However, these obstacles can be overcome with the right strategy. From improved communication to revised policies and procedures, organizations that build a systematic approach to regulatory change will be better equipped to respond fast and reduce risk in 2026.

We recommend every healthcare organization:

  • Establishes a compliance communication plan. This will help deliver timely alerts to your employees and leadership regarding new or revised rules and standards, along with clear guidance on required action.
  • Attends healthcare compliance conferences and webinars. These often provide updates and guidance on changing regulatory standards and enforcement trends, and subscribers to blogs and industry publications that provide updated compliance information.
  • Monitors and reflects changes to HIPAA Privacy and Security rules. Many organizations benefit from a) updating training annually, b) ensuring annual penetration testing, (c) conducting enhanced risk assessments, and (d) providing stronger vendor oversight and access controls.

How to Reinforce Internal Compliance Capacity

Staffing shortages and budget limitations are common within healthcare compliance. Leaders may worry that rapid regulatory change will place unmanageable burdens on their existing team, leaving coverage gaps or simply overwhelming their resources.

There is no magic bullet for these problems, but we believe many organizations can benefit significantly from:

  • Investing in your team and offering upskill opportunities. Encourage staff to obtain professional certifications through organizations such as the Health Care Compliance Association (HCCA) and other recognized organizations.
  • Developing a cross-functional team that includes Compliance, Legal, IT/Security, Clinical, and Operations staff to ensure regulatory changes are implemented promptly and effectively.

Want to Stay Ahead of Regulators in 2026?

The steps outlined above will help you monitor regulatory change and reduce risk. However, many organizations will struggle to build these systems alone, especially if they face staffing shortages or resource limitations.

Partnering with a trusted third-party can help you navigate these challenges with confidence. From developing new policies to evaluating your existing Compliance Program, external support can significantly reduce the burden of regulatory change, while helping to improve and de-risk your overall compliance posture.

Book a Consultation

For more information on this topic, contact [email protected].

About the Author

Richard P. Kusserow established Strategic Management Services, LLC, after retiring from being the DHHS Inspector General, and has assisted over 3,000 health care organizations and entities in developing, implementing and assessing compliance programs.

Subscribe to blog