July 31, 2023

ACR achieves HITRUST risk-based, 2-year certification demonstrating the highest level of information protection assurance

HITRUST Risk-based, 2-year (r2) Certification validates the American College of Radiology’s strong cybersecurity commitment to protect sensitive data


The American College of Radiology® (ACR®) today announced the ACRedit Plus and the National Radiology Data Registry (NRDR®) have earned certified status by HITRUST for information security.

HITRUST’s risk-based, 2-year (r2) certification demonstrates that the College’s ACRedit Plus and the NRDR have met demanding regulatory compliance and industry-defined requirements and are appropriately managing risk. This achievement places ACR in an elite group of organizations worldwide that have earned the certification. By including federal and state regulations, standards, and frameworks, and incorporating a risk-based approach, the HITRUST Assurance Program helps organizations address security and data protection challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

“The ACR is the nation’s oldest and most widely recognized medical imaging accrediting body and a pioneer in the radiology data registry field,” said William T. Thorwarth Jr., MD, FACR, CEO of the ACR. “Achieving the HITRUST certification for our ACRedit Plus and NRDR systems is the latest demonstration of our ongoing commitment to strong cybersecurity and privacy controls to protect sensitive data as we empower facilities and physicians to provide ever-higher quality care.”

Since 1987, ACR has accredited more than 39,000 facilities and over 60,000 units in 8 imaging modalities, 3 designation programs and 1 Center of Excellence program. ACR accreditation is recognized as the gold standard in medical imaging.

“HITRUST Certification is globally recognized as validation that information security and privacy controls are effective and compliant with various regulations. HITRUST Certification is considered the gold standard because of the comprehensiveness and applicability of the control requirements, depth of the assurance process, and level of oversight that ensures accuracy,” said Jeremy Huval, Chief Innovation Officer, HITRUST. “Individually, each element exceeds most other programs, and collectively they make HITRUST Certification the most comprehensive, transparent, consistent, and highest quality assessment available.”

To arrange an interview with an ACR spokesperson, contact Shawn Farley or Kevin R. Walter at PR@acr.org.