HealthTech January 20, 2026
Some healthcare providers already meet potential new HIPAA security requirements, but others may face significant challenges.
As federal regulators consider more stringent HIPAA security requirements, Kern Medical Chief Technology Officer Craig Witmer believes his 222-bed hospital in Bakersfield, Calif., is already ahead of the curve.
Kern County spun off the hospital as an independent entity in 2016, but the county IT department continued to handle some operations, including security, during the transition. When Witmer took over in 2018, he rebuilt the IT infrastructure from scratch, investing in security and deploying a new data backup and recovery solution.
Today, Witmer continuously strengthens Kern Medical’s cybersecurity posture because of market forces. Healthcare is a major cyberattack target, so cyber insurance companies often...







