Policy Prism AI

Information Blocking

Federal

Information Blocking

24 provisions · Centers for Medicare & Medicaid Services

Provisions

Citable source units

45 CFR § 171.100Definitions ContextHIPAA Privacy Security

Statutory basis and purpose.

This provision establishes the statutory authority and purpose for the information blocking regulations under the Public Health Service Act.

Group

Definitions Scope Authority

Category

Definitions Context

Domain

Records

Topics

Information blocking purpose, Statutory basis for information blocking

Read provision
45 CFR § 171.1000HIPAA Privacy SecurityScope Applicability

Scope.

This provision defines the scope of the subpart regarding disincentives that may be imposed on health care providers for information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking disincentives, Provider information blocking penalties

Read provision
45 CFR § 171.1001HIPAA Privacy SecurityReimbursement Payment

Disincentives.

This provision specifies the disincentives that may be applied to hospitals, clinicians, and ACOs determined to have committed information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking disincentives, Meaningful ehr user status, Medicare shared savings program penalties

Read provision
45 CFR § 171.1002HIPAA Privacy SecurityCompliance Programs

Notice of disincentive.

This provision outlines the requirements for notifying a health care provider when a disincentive for information blocking is being imposed.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking notice, Disincentive notification process

Read provision
45 CFR § 171.101Scope ApplicabilityHIPAA Privacy Security

Applicability.

This provision defines the entities subject to the information blocking regulations and the effective date of these requirements.

Group

Definitions Scope Authority

Category

Scope Applicability

Domain

Records

Topics

Information blocking applicability, Health information exchange rules

Read provision
45 CFR § 171.102Definitions ContextHIPAA Privacy Security

Definitions.

This provision defines key terms used in the regulation of information blocking, including access, exchange, electronic health information, and health IT developer.

Group

Definitions Scope Authority

Category

Definitions Context

Domain

Records

Topics

Information blocking definitions, Electronic health information, Interoperability standards

Read provision
45 CFR § 171.103Interoperability API StandardsDefinitions Context

Information blocking.

This provision defines information blocking as practices likely to interfere with the access, exchange, or use of electronic health information when conducted by health IT developers, networks, or health care providers.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking definition, Electronic health information access, Health it interoperability

Read provision
45 CFR § 171.1100Interoperability API StandardsScope Applicability

Scope.

This section establishes the scope for posting information on the ONC public website regarding actors determined by the HHS Office of Inspector General to have committed information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking enforcement, Public disclosure of information blocking, Onc public website

Read provision
45 CFR § 171.1101Interoperability API StandardsSurvey Certification Enforcement

Posting of information for actors found to have committed information blocking.

This provision outlines the specific information the ONC will post on its public website regarding health care providers and other actors determined to have committed information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking penalties, Public reporting of information blocking, Onc enforcement actions

Read provision
45 CFR § 171.200Interoperability API StandardsDefinitions Context

Availability and effect of exceptions.

This provision states that a practice will not be considered information blocking if the actor meets all applicable requirements and conditions of an exception set forth in subpart B.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking exceptions, Interoperability compliance, Electronic health information exchange

Read provision
45 CFR § 171.201Interoperability API StandardsPatient Rights

Preventing harm exception—when will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to prevent harm n...

This provision outlines the conditions under which an actor's practice that interferes with electronic health information access to prevent harm will not be considered information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Preventing harm exception, Information blocking exceptions, Patient safety

Read provision
45 CFR § 171.202HIPAA Privacy SecurityInteroperability API Standards

Privacy exception—When will an actor's practice of not fulfilling a request to access, exchange, or use electronic health information in order to protect an individual's privacy...

This provision specifies the conditions under which an actor's practice of not fulfilling a request to access, exchange, or use electronic health information to protect privacy will not be considered information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Privacy exception, Information blocking exceptions, Hipaa privacy rule

Read provision
45 CFR § 171.203HIPAA Privacy SecurityCompliance Programs

Security exception—When will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to protect the security...

This provision outlines the conditions under which an actor's practice of interfering with electronic health information access to protect security is not considered information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking security exception, Electronic health information security, Safeguarding electronic health information

Read provision
45 CFR § 171.204HIPAA Privacy SecurityCompliance Programs

Infeasibility exception—When will an actor's practice of not fulfilling a request to access, exchange, or use electronic health information due to the infeasibility of the reque...

This provision specifies the criteria and documentation requirements for an actor to claim an infeasibility exception when unable to fulfill a request for electronic health information.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking infeasibility exception, Electronic health information access, Request fulfillment documentation

Read provision
45 CFR § 171.205HIPAA Privacy SecurityCompliance Programs

Health IT performance exception—When will an actor's practice that is implemented to maintain or improve health IT performance and that is likely to interfere with the access, e...

This provision defines the conditions under which practices implemented to maintain or improve health IT performance are not considered information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking performance exception, Health it maintenance, System performance degradation

Read provision
45 CFR § 171.206Interoperability API StandardsConfidentiality Disclosure

Protecting Care Access—When will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to reduce potential...

Defines the conditions under which an actor's practice of interfering with electronic health information access to reduce legal risk related to reproductive health care is not considered information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Reproductive health care, Electronic health information

Read provision
45 CFR § 171.300Interoperability API StandardsScope Applicability

Availability and effect of exceptions.

Establishes that a practice is not considered information blocking if the actor meets all applicable requirements and conditions of an exception.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Interoperability, Regulatory exceptions

Read provision
45 CFR § 171.301Interoperability API StandardsHealth Information Access

Manner exception—When will an actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information not be considered...

Specifies the conditions under which an actor's practice of limiting the manner of fulfilling a request for electronic health information is not considered information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Manner exception, Electronic health information

Read provision
45 CFR § 171.302Interoperability API StandardsReimbursement Payment

Fees exception—When will an actor's practice of charging fees for accessing, exchanging, or using electronic health information not be considered information blocking?

Outlines the criteria for charging fees for accessing, exchanging, or using electronic health information without violating information blocking regulations.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Fees exception, Electronic health information

Read provision
45 CFR § 171.303Interoperability API StandardsCompliance Programs

Licensing exception—When will an actor's practice to license interoperability elements in order for electronic health information to be accessed, exchanged, or used not be consi...

Specifies the conditions under which an actor's practice of licensing interoperability elements for electronic health information is not considered information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Interoperability licensing, Electronic health information

Read provision
45 CFR § 171.400Interoperability API StandardsScope Applicability

Availability and effect of exceptions.

Defines the effect of satisfying an information blocking exception, stating that a practice is not considered information blocking if all requirements are met.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Regulatory exceptions, Compliance standards

Read provision
45 CFR § 171.401Definitions ContextInteroperability API Standards

Definitions.

Provides definitions for terms used in the context of information blocking exceptions, such as Common Agreement and QHIN.

Group

Definitions Scope Authority

Category

Definitions Context

Domain

Records

Topics

Definitions, Information blocking, Tefca

Read provision
45 CFR § 171.402Source Placeholder

[Reserved]

This provision is reserved and contains no substantive content.

Group

Internal Review

Category

Source Placeholder

Domain

Not Service Specific

Topics

Reserved

Read provision
45 CFR § 171.403Interoperability API StandardsScope Applicability

TEFCA manner exception—When will an actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information to only via...

Outlines the conditions under which limiting the manner of fulfilling an EHI request to TEFCA is not considered information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Tefca, Information blocking, Electronic health information

Read provision