July 31, 2026

Dear Kids Health First (KHF) Providers and Practice Administrators,

We have some important updates about payor updates, new programs, and upcoming events. There's a lot of information, and we want to keep you informed. Please read through this email carefully and let us know if you have any questions.

Important Updates

Risk Management Q&A: Do We Have to Amend a Patient's Medical Record?

Question: If a parent or patient asks our practice to amend the medical record, are we required to make the requested changes?

Answer from Brent Reece at Sterling Seacrest Pritchard:

Firstly, a patient’s right to amend their records should be addressed in your Notice of Privacy Practices (“NPP”). HIPAA requires you to display your NPP on your practice website. In short, a patient does have a right to ask for their records to be amended, but you, of course, do not have to agree. Here, I’d start by emailing the parent/patient with something like this:

“In response to your request for us to review and amend your child’s medical records, we would ask that you complete the attached form and return it to us for consideration. Please understand, however, that we are not obligated to amend the records. Nevertheless, we will respond to your amendment request as soon as practicable but no later than 60 days from receipt of same.”

If you have questions, contact Brent Reece at SSP.

Download a sample request to amend a medical record form.

Website Privacy Alert: New Lawsuits Target Website Tracking Technologies

Sterling Seacrest Pritchard is alerting practices to a growing legal trend involving website privacy and third-party tracking technologies.

According to a recent SSP client brief, a California plaintiff has filed numerous claims alleging that business websites improperly collect visitor information through tracking tools and analytics platforms. SSP reports that several Georgia clients have already received similar demands.

The allegations focus on website technologies that may collect visitor data for analytics, marketing, or advertising purposes without appropriate disclosures or consent.

What should practices do?

Take any demand letter or complaint seriously.
Contact legal counsel and your insurance carrier immediately.
Notify SSP before responding.
Review your website's privacy policies and cookie disclosures.
Confirm that your website vendor complies with applicable state privacy laws and properly manages third-party tracking technologies.

SSP notes that some cyber liability policies may provide defense coverage for these claims.

View the client brief from Sterling Seacrest Pritchard.

VFC Update: Prepare for Flu Returns and RSV Ordering

The Georgia Vaccines for Children (VFC) Program has released several important reminders for participating practices ahead of the 2026–2027 respiratory season.

View the latest VFC Newsletter for updates.

Cyclospora Cases Rising Nationwide: Resources for Practices

The CDC has expanded its outbreak tracking and educational resources in response to a significant increase in Cyclospora infections across the United States. Federal and state health officials are currently investigating multiple outbreaks, including one linked to iceberg lettuce.

Since May 1, the CDC has received reports of more than 4,100 laboratory-confirmed cases and thousands of additional suspected cases nationwide.

Symptoms of Cyclospora infection may include:

Watery diarrhea
Fatigue
Loss of appetite
Symptoms lasting several days to several weeks without treatment

The CDC recommends avoiding recalled lettuce products, thoroughly cleaning surfaces that may have come into contact with contaminated food, and encouraging patients with symptoms to seek medical care and stay hydrated.

The CDC expects cases to continue increasing through the end of August.

View the Cyclospora brief from the CDC for more details.

Cybersecurity Corner: Recognizing and Responding to Ransomware Attacks

Ransomware attacks continue to pose a serious threat to healthcare organizations of all sizes. These attacks often begin with phishing emails or fraudulent messages designed to trick employees into clicking malicious links or downloading infected files.

Ransomware can lock users out of systems or encrypt sensitive data until a ransom is paid.

Warning signs may include:

Sluggish computer performance
Files being renamed or becoming inaccessible
Unusual network activity within shared drives or cloud systems

If you suspect an attack:

Do not interact with the ransom message.
Do not attempt to recover files yourself.
Notify your IT team immediately.
Document any warning signs or suspicious activity.

Prevention remains the best defense. Practices should maintain updated security software, enable multifactor authentication, use strong passwords, and educate employees on how to identify phishing attempts.

View a helpful resource from One Digital.

Georgia Medical Board Update: New Licensing Requirements Now in Effect

The Georgia Composite Medical Board (GCMB) has released additional details regarding new physician licensing requirements that took effect on July 1, 2026.

First-time physician applicants who have never held a Georgia medical license must now complete:

A fingerprint-based criminal background check through both the Georgia Crime Information Center (GCIC) and the FBI.
A Federation Credentials Verification Service (FCVS) report through the Federation of State Medical Boards.

These requirements apply only to initial licensure and do not affect physicians renewing an existing Georgia license.

The GCMB newsletter also reminds physicians that telemedicine visits are held to the same standard of care as in-person visits and that Georgia law generally requires patients receiving telemedicine services to have an in-person examination at least annually.

Practices that recruit physicians or manage onboarding should familiarize themselves with these new requirements to avoid delays in credentialing and licensure.

View the full GCMB eNewsletter.