On September 4, 2026, the Department of Health and Human Services (HHS) announced that the Health Resources and Services Administration had awarded $11.2 million to support the development of 15 physician residency programs in rural communities across 14 states.

 

What happened

The funding was awarded through HRSA’s Rural Residency Planning and Development Program, which helps organizations establish accredited training programs in areas that have limited access to physicians. HRSA’s recipient list shows that eight awards will support family medicine programs, three will support internal medicine, two will support preventive medicine, one will support psychiatry, and one will support general surgery. Recipients include hospitals, universities, health education organizations, and a public health institute in Arizona, California, Florida, Georgia, Louisiana, Missouri, Nebraska, Ohio, Oklahoma, Tennessee, Utah, Wisconsin, West Virginia, and Wyoming.

Individual grants range from $729,537 to $750,000, and the 15 listed awards total $11,224,982. Each recipient can use the funding over three years for activities such as pursuing accreditation, developing curricula, recruiting and training faculty, and preparing to recruit residents. The organizations must also develop financing plans intended to sustain their residency programs after the federal planning period, potentially using Medicare, Medicaid, and other public funding. HHS said the new programs are intended to expand the physician workforce in rural and tribal communities by placing medical training closer to underserved populations experiencing provider shortages.

 

In the know

Healthcare organizations in rural settings grapple with workforce shortages, financial vulnerabilities, infrastructure deficits, and heightened cyber exposure. According to a review published by the National Center for Biotechnology Information (NCBI), approximately 20% of Americans reside in nonmetropolitan areas, while less than 12% of physicians practice in rural settings. Rural organizations also struggle to attract and retain healthcare workers.

Research published in the 2025 Journal of Rural Health found that 219 rural hospitals were closed or converted (to hospitals without an inpatient service) between January 2005 and May 2024. In that study, financial distress was identified as a leading factor in closures. Similarly, a study from the Health Services Research found that low patient volume can limit revenue potential and increase the cost of care, leaving rural hospitals with less to invest in staffing, facilities, and technology.

According to Paubox’s 2025 rural healthcare report, cybersecurity challenges are consequential as well. Among rural healthcare IT responding to the study, 85% said their infrastructure was incapable of supporting advanced email security; half cited budget as a top roadblock to HIPAA compliant email; and just 27% said it was very easy to maintain HIPAA compliance for email, with insufficient staff (73%) and funding (73%) making it difficult to do so.

 

Why it matters

These awards represent a targeted attempt to alleviate rural healthcare’s workforce and financial woes by incentivizing physician training programs where needed most. Assistance with accreditation fees, curriculum development, and faculty and resident recruitment covers costs associated with launching training programs that may be too large of an upfront investment for smaller, cash-strapped organizations to handle on their own.

While the focus on family medicine and internal medicine may have the greatest impact on primary and inpatient care access, psychiatry, preventive medicine, and general surgery also fill critical access gaps. Their location-based strategy may also have long-term benefits, as HRSA points to research showing doctors who train in rural locations are more likely to practice there. Mandating recipients to outline sustainable financing plans utilizing Medicare, Medicaid, and other government payouts should also help with longevity beyond the initial three years of grant funding.

That being said, these awards are not funding for general hospital operations or cybersecurity, so they will not single-handedly solve hospitals’ financial struggles, crumbling infrastructure, or email vulnerabilities outlined by Paubox. As these institutions onboard new residents, faculty, and the associated communication traffic, they will also need a secure, easily manageable messaging solution that doesn’t overburden already stretched IT departments.

See also: HIPAA Compliant Email: The Definitive Guide (2026 Update)

 

FAQs

Are rural healthcare providers subject to different HIPAA requirements?

No, rural and urban healthcare organizations must follow the same HIPAA requirements, although their safeguards can reflect their particular risks, resources, and operating environments.

 

Does HIPAA allow healthcare providers to send patient information by email?

Yes, HIPAA does not prohibit email, but providers must use reasonable safeguards to protect patient information during transmission and access.

 

Does HIPAA specifically require email encryption?

Encryption is an addressable safeguard, meaning an organization must assess whether it is reasonable and appropriate and implement it or document a suitable alternative.

 

What makes an email service suitable for healthcare providers?

Organizations should look for secure transmission, access controls, threat detection, activity logging, incident support, and a willingness to sign a business associate agreement.