In 2017, an article in the policy journal Milbank Quarterly criticized the FDA for its failure to safeguard electronic health records and other device software from hacking and other cybersecurity threats, stating “current regulations are necessary but not sufficient for ensuring patient safety by identifying and eliminating dangerous defects in software currently on the market”.[42] They added that legislative changes resulting from the law entitled the 21st Century Cures Act “will further deregulate health IT, reducing safeguards that facilitate the reporting and timely recall of flawed medical software that could harm patients".