WEDI National Pre-Conference on Privacy, Security, & Trust

Explore the evolving privacy, security, and cybersecurity challenges facing health care 

WEDI National Conference Registrants- the pre-conference is included in your registration- you do not have to register 

Health care organizations are navigating an increasingly complex environment where evolving cyber threats, privacy and security risks, data exchange, and artificial intelligence are reshaping what it means to protect patients and build trust. 

This pre-conference brings together government, industry, technology, and patient perspectives to examine the current threat landscape, practical approaches to security risk assessment, lessons for strengthening organizational security, the role of trust and consent in health data exchange, and emerging approaches to AI governance. 

Attendees will gain practical insights to help their organizations prepare for evolving threats, protect patient information, strengthen security and privacy practices, and build trust across the health care ecosystem.

Event Agenda

Cybersecurity Threat Landscape: An FBI Perspective, SA Jonathan Lund, FBI

Cyber threats facing the health care industry continue to evolve in scale, sophistication, and impact. In this session, WEDI welcome Special Agent Jonathan Lund from the FBI will provide an inside look at current threat trends and emerging risks, including the growing impact of artificial intelligence, while sharing lessons learned, practical recommendations and resources to help organizations strengthen their cybersecurity posture. The discussion will also examine what the FBI expects to see in the threat landscape going forward and what health care organizations should be doing now to prepare.

From Assessment to Action: Using OCR’s Security Risk Assessment Tool, Nicholas Heesters, OCR

This session will provide a practical look at how health care organizations can use OCR’s Security Risk Assessment Tool to identify and prioritize security risks and strengthen their HIPAA Security Rule compliance efforts. OCR will also share insights from the tool’s use across the health care industry, including common risk areas, recent developments, and what organizations should know about the tool’s future.

From Threats to Trust: An Industry Perspective on Healthcare Security, Lesley Berkeyheiser (DirectTrust,

WEDI Privacy & Security WG), Thanh-Thien Nguyen (WEDI Privacy & Security WG), Mari Savickis

(CHIME), Bezawit Sumner (CRISP)

Following perspectives from the FBI on the evolving health care threat landscape and OCR on practical approaches to security risk assessment, industry leaders will reflect on what these developments mean for health care organizations and the broader ecosystem. The discussion will explore how organizations can translate emerging threats and risk assessment into action while balancing privacy, security, data sharing, and the trust needed to support a connected health care system.

Beyond Connectivity: Building Trust in the Health Data Ecosystem, Duncan Weatherston (FAST, Smile

Digital Health), Emma Andelson (AMA, WEDI Patient Experience WG)

We have made tremendous progress connecting the health care ecosystem, but the ability to exchange data

raises a bigger question: can we trust that the data will be shared appropriately and that a patient's choices will be

respected? This session brings together HL7 FAST leaders, a patient advocate, and industry stakeholders to

explore how computable consent can turn patient preferences into actionable, enforceable requirements—and

what organizations need to do to make trusted data exchange a reality.

Securing the AI-Enabled Health System: Governance, Privacy, Security & Trust. Bill Reid (HSCC, Google),

Ed Gaudet (HSCC, Censinet)

As AI becomes increasingly embedded in healthcare, organizations need practical approaches for managing the

cybersecurity, privacy and trust risks that accompany its adoption. Drawing on the HSCC’s AI Cyber Governance

Framework Implementation Guide, this session will explore how healthcare organizations can put AI governance

into practice—from risk assessment and accountability to vendor and supply-chain risks, emerging AI capabilities,

incident response and patient trust.