IAPP Privacy. Security. Risk. + AI Governance Global 2026

SEATTLE

6-9 October

Back to conference agenda

Building Trust at Scale: Privacy and Security for the Health Data Ecosystem

Friday, 9 Oct.

14:15 - 15:15 EDT

Intermediate level

BREAKOUT SESSIONPRIVACYFRAMEWORKS AND STANDARDSIDENTITY AND VERIFICATIONREGULATORY GUIDANCEU.S. FEDERAL REGULATIONU.S. STATE REGULATIONTECHNOLOGYHEALTH CARE

As federal policymakers push to implement the Make America Healthy Again agenda, nationwide health data interoperability has shifted from aspiration to operating reality. CMS APIs, TEFCA-enabled exchange, private investment in AI-driven platforms and consumer-facing health tools are rapidly expanding access to claims and clinical data at unprecedented scale. 

This panel brings together providers, health plans and technology stakeholders to examine how privacy, security and risk governance must evolve to support this next-generation consumer health ecosystem. Panelists will explore real-world challenges emerging from TEFCA participation, CMS-aligned networks, and HIE connectivity, including identity assurance, purpose-based access and monitoring at volume. 

The discussion will also address the growing tension between HIPAA’s assumptions and expanding state consumer health privacy laws, and what privacy by design means when national health goals depend on trusted data flow. Attendees will leave with a practical framework for enabling interoperability that strengthens, rather than undermines, public trust.

What you will learn:

  • How the MAHA agenda is reshaping health data governance through CMS interoperability, TEFCA expansion and AI‑enabled consumer health platforms driving prevention and outcomes. 
  • Where privacy and security risks now scale, from exchange onboarding and identity verification to secondary use, AI training and platform accountability. 
  • How to align HIPAA, TEFCA and state consumer health privacy laws into a coherent, defensible model that enables innovation without eroding trust. 

Moderator and speakers

headshot of Joseph Ashkouti

Joseph Ashkouti

CIPP/E, CIPP/US, CIPM, FIP, PLS

Chief Legal Officer

Modernizing Medicine

headshot of Deanna DiCarlantonio

Deanna DiCarlantonio

CIPP/E, CIPP/US

Chief Privacy Officer

Exact Sciences

headshot of Mitchell W. Granberg

Mitchell W. Granberg

CIPP/US

Deputy Privacy Officer

CVS Health

headshot of Scott Loughlin

Scott Loughlin

Partner and Global Co-lead, Privacy and Cybersecurity Practice

Hogan Lovells