ACHC, joint commission, CLSI for laboratory, are groups that outline some very basic frameworks of how facilities should be operated. Less than half of facilities can meet even these extremely low bar standards for operations. It is difficult for me to see how many patients have been harmed by ransomware impacting hospital opertions, this is entirely preventable and no one on the hospital side has been meaningfully held accountable so very little will change.
A counter example is the pricing transparency regulations. Failure to meet those is resulting in multi-million dollar a year fines which is resulting in change. It is happening slower than people like or had really conceived of but it is causing some real meaningful change.
99,000 americans a year die from hospital acquired infections that are entirely preventable using procedures and operations (not surgeries) that are known and evidentially proven. It's just really hard to get all of the parts of the orchestra to play the same tune so those people die needlessly.