Artificial Intelligence (AI) is rapidly transforming healthcare, offering new opportunities to improve care delivery, streamline operations, and enhance resident engagement. From predictive analytics that anticipate resident care needs to automation that eases the burden of documentation, AI promises efficiency and innovation, but it also introduces many new, unobvious challenges that healthcare leaders cannot afford to ignore.

While the benefits of AI are easy to spot, the vulnerabilities are often hidden. AI systems require massive amounts of data to function, making them a prime target for cyber threats. Furthermore, the regulatory environment is shifting. HIPAA compliance remains the gold standard, but how does it apply when an AI algorithm is processing protected health information (PHI)?

Innovation rarely arrives without risk. Cybersecurity threats are escalating as healthcare organizations adopt AI-driven tools, and the legal implications of these technologies are complex and evolving.

At the upcoming AHHC 2026 Annual Convention & Expo in Raleigh this April, JohnDiMaggio, managing director of CloudWave and former CEO and co-founder of BlueOrange Compliance, will present AI, Cybersecurity and the Law – What You Need to Know.” The session, which will be held on Monday, April 20, from 11:00 am-12:00 pm, will share practical strategies for mitigating cybersecurity risks associated with AI adoption, including safeguarding sensitive protected health information and ensuring compliance with HIPAA and other regulatory frameworks. With decades of experience as a CIO and a healthcare security leader, John will share practical, real-world strategies and outline how to build a roadmap that balances the drive for innovation with the necessity of resident trust and data integrity.

Alisa Chestler, chair of the Data Protection, Privacy and Cybersecurity Team at Baker Donelson and a leading healthcare attorney, will join John to provide insights into the legal landscape, covering privacy laws, liability considerations, and contractual obligations that organizations must address when implementing AI solutions.

Through real-world examples of AI implementation done right (and wrong), attendees will learn how to evaluate AI opportunities while minimizing risk, and walk away with:

  • A framework for navigating legal, regulatory, and compliance requirements tied specifically to healthcare AI adoption.
  • A roadmap for balancing AI innovation with compliance and resident trust.
  • Actionable guidance on securing AI integrations to help mitigate healthcare cybersecurity threats.

The transition to AI-driven care is inevitable, but a cybersecurity breach or legal setback is not. By aligning innovation strategy with cybersecurity best practices, healthcare organizations can effectively develop a framework for secure and compliant AI integration.

Event Details:

  • Conference: AHHC 2026 Annual Convention & Expo
  • Location: Sheraton Imperial Raleigh/Durham
  • Dates: April 19-21, 2026
  • Session: AI, Cybersecurity and the Law – What You Need to Know, Monday, April 20, 11:00 am-12:00 pm

Interested in learning more? Contact BlueOrange Compliance today to learn how we can help you assess your current cybersecurity posture and prepare for your next technology integration.

By John DiMaggio,
Managing Director,
BlueOrange Compliance