76% of healthcare practices say they are not ready for the proposed 2026 HIPAA Security Rule.

60% of healthcare leaders have self-attested to HIPAA compliance despite known, unpatched vulnerabilities.

HIPAA (43%), the NIST AI Risk Management Framework (37%), and SOC 2 or ISO 27001 (34%) are the frameworks that most influence enterprises' AI agent governance.

41% of healthcare IT and compliance leaders feel confident they could detect improper AI use before a HIPAA violation occurs.

39% of organizations adhere to HIPAA for API development and deployment.

13 S&P 500 companies warn of sensitive exposure under the General Data Protection Regulation, Health Insurance Portability and Accountability Act, and California privacy laws (CCPA/CPRA) related to privacy.

More than 80% of small healthcare practices expressed confidence in their current HIPAA compliance posture.

64% of small healthcare practices believe patient portals are required for HIPAA compliance.

98% of small healthcare organisations falsely believe they are HIPAA compliant.

73% of rural healthcare organisations struggle to maintain HIPAA compliance due to staffing and funding gaps.

88% of rural healthcare leaders lack confidence that their current email platform is fully HIPAA compliant out of the box.

Only 22% of all AI applications are in adherence to one or more compliance certifications such as HIPAA, PCI, ISO, FISMA, and FedRAMP.

HIPAA fines exceeding $9 million were issued due to email security failures.