Healthcare IT Security Is Difficult, But Not Impossible

The U.S. Food and Drug Administration has released a discussion paper outlining its initial framework for regulating generative AI-enabled medical devices, proposing a two-axis risk assessment approach and a novel competency-based premarket evaluation system. With public comments due by October 19, 2026, this represents a critical opportunity for device manufacturers and stakeholders to shape the regulatory landscape for this transformative technology.

Over the past year, industry has had a front row seat as the Food and Drug Administration (“FDA” or the “Agency”) decides just how much leeway it wants to afford the manufacture, marketing, and sale of peptide products, and just where it wants to draw the line. Despite the recent decision of FDA’s Pharmacy Compounding Advisory Committee (“PCAC”) to recommend a number of peptides for inclusion on the 503A bulks list process — a move that represents a potentially more permissive stance toward peptide regulation, at least in terms of what can and cannot be compounded under 503A...

As previously reported, the FDA’s Pharmacy Compounding Advisory Committee (PCAC) recently voted in favor of adding six peptides—BPC-157, KPV, TB-500...

On Friday, California Office of Health Care Affordability (“OHCA”) published proposed final regulations that implement a 2026 law that significantly expanded OHCA’s review authority over health care transactions involving private equity (“PE”) groups, hedge funds, and management services organizations (“MSOs”). Stakeholders involved in California health care transactions should re-assess whether their ongoing or contemplated transactions are implicated by these regulations, because newly covered transactions will need to comply with the 90-day advance notice requirement established in the original OHCA regulations.

The FDA, in collaboration with federal partners, held a landmark public hearing on September 14, 2026, to gather input on the future therapeutic use of psychedelic drugs, drawing over 18,000 registered attendees. This hearing represents one of the earliest implementations of Executive Order 14401, which directs federal agencies to expedite research, review, and approval of psychedelic drugs for serious mental health conditions.

The FDA has escalated enforcement against online peptide sellers through warning letters and criminal prosecution, while state medical boards impose stricter standards on prescribers. Recent actions reveal how research-use-only disclaimers fail when evidence shows intended human use, and one case resulted in a 70-month prison sentence combined with $5 million forfeiture.

On November 17, 2022, FDA posted warning letters to 7 companies for selling different dietary supplements with claims that caused the products to be "drugs" in violation..

The Trump administration's most-favored-nation pricing initiative has expanded to include nine additional mid-sized pharmaceutical manufacturers, bringing the total coverage to 89% of the brand drug market. These new agreements focus on Medicaid pricing discounts aligned with international rates, while manufacturers commit billions to U.S. manufacturing and research in exchange for exemptions from future pricing mandates and potential tariffs.

For those that have been awaiting the federal government’s issuance of the final rules modifying the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security regulations...

The healthcare mergers and acquisitions (M&A) market began 2025 with a slower start than expected given the easing headwinds and building momentum at the end of last year...