Prism

Ask

Information Blocking

Information Blocking

24 provisions · Centers for Medicare & Medicaid Services

Citable source units

45 CFR § 171.100Definitions ContextHIPAA Privacy Security

Statutory basis and purpose.

This provision establishes the statutory authority and purpose for the information blocking regulations under the Public Health Service Act.

Group

Definitions Scope Authority

Category

Definitions Context

Domain

Records

Topics

Information blocking purpose, Statutory basis for information blocking

Read provision
45 CFR § 171.1000HIPAA Privacy SecurityScope Applicability

Scope.

This provision defines the scope of the subpart regarding disincentives that may be imposed on health care providers for information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking disincentives, Provider information blocking penalties

Read provision
45 CFR § 171.1001HIPAA Privacy SecurityReimbursement Payment

Disincentives.

This provision specifies the disincentives that may be applied to hospitals, clinicians, and ACOs determined to have committed information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking disincentives, Meaningful ehr user status, Medicare shared savings program penalties

Read provision
45 CFR § 171.1002HIPAA Privacy SecurityCompliance Programs

Notice of disincentive.

Following referral of a determination of information blocking by OIG, an appropriate agency that imposes a disincentive or disincentives specified in § 171.1001 shall send a notice to the health care provider subject to the disincentive...

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking notice, Disincentive notification process

Read provision
45 CFR § 171.101Scope ApplicabilityHIPAA Privacy Security

Applicability.

This provision defines the entities subject to the information blocking regulations and the effective date of these requirements.

Group

Definitions Scope Authority

Category

Scope Applicability

Domain

Records

Topics

Information blocking applicability, Health information exchange rules

Read provision
45 CFR § 171.102Definitions ContextHIPAA Privacy Security

Definitions.

For purposes of this part:

Group

Definitions Scope Authority

Category

Definitions Context

Domain

Records

Topics

Information blocking definitions, Electronic health information, Interoperability standards

Read provision
45 CFR § 171.103Interoperability API StandardsDefinitions Context

Information blocking.

This provision defines information blocking as practices likely to interfere with the access, exchange, or use of electronic health information when conducted by health IT developers, networks, or health care providers.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking definition, Electronic health information access, Health it interoperability

Read provision
45 CFR § 171.1100Interoperability API StandardsScope Applicability

Scope.

This section establishes the scope for posting information on the ONC public website regarding actors determined by the HHS Office of Inspector General to have committed information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking enforcement, Public disclosure of information blocking, Onc public website

Read provision
45 CFR § 171.1101Interoperability API StandardsSurvey Certification Enforcement

Posting of information for actors found to have committed information blocking.

This provision outlines the specific information the ONC will post on its public website regarding health care providers and other actors determined to have committed information blocking.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking penalties, Public reporting of information blocking, Onc enforcement actions

Read provision
45 CFR § 171.200Interoperability API StandardsDefinitions Context

Availability and effect of exceptions.

This provision states that a practice will not be considered information blocking if the actor meets all applicable requirements and conditions of an exception set forth in subpart B.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking exceptions, Interoperability compliance, Electronic health information exchange

Read provision
45 CFR § 171.201Interoperability API StandardsPatient Rights

Preventing harm exception—when will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to prevent harm not be considered information blocking?

An actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to prevent harm will not be considered information blocking when the practice meets the conditions in paragraphs...

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Preventing harm exception, Information blocking exceptions, Patient safety

Read provision
45 CFR § 171.202HIPAA Privacy SecurityInteroperability API Standards

Privacy exception—When will an actor's practice of not fulfilling a request to access, exchange, or use electronic health information in order to protect an individual's privacy not be considered information blocking?

An actor's practice of not fulfilling a request to access, exchange, or use electronic health information in order to protect an individual's privacy will not be considered information blocking when the practice meets all of the requirem...

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Privacy exception, Information blocking exceptions, Hipaa privacy rule

Read provision
45 CFR § 171.203HIPAA Privacy SecurityCompliance Programs

Security exception—When will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to protect the security...

This provision outlines the conditions under which an actor's practice of interfering with electronic health information access to protect security is not considered information blocking.

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking security exception, Electronic health information security, Safeguarding electronic health information

Read provision
45 CFR § 171.204HIPAA Privacy SecurityCompliance Programs

Infeasibility exception—When will an actor's practice of not fulfilling a request to access, exchange, or use electronic health information due to the infeasibility of the request not be considered information blocking?

An actor's practice of not fulfilling a request to access, exchange, or use electronic health information due to the infeasibility of the request will not be considered information blocking when the practice meets one of the conditions i...

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking infeasibility exception, Electronic health information access, Request fulfillment documentation

Read provision
45 CFR § 171.205HIPAA Privacy SecurityCompliance Programs

Health IT performance exception—When will an actor's practice that is implemented to maintain or improve health IT performance and that is likely to interfere with the access, exchange, or use of electronic health information not be considered information blocking?

An actor's practice that is implemented to maintain or improve health IT performance and that is likely to interfere with the access, exchange, or use of electronic health information will not be considered information blocking when the...

Group

Health It Privacy Security

Category

HIPAA Privacy Security

Domain

Records

Topics

Information blocking performance exception, Health it maintenance, System performance degradation

Read provision
45 CFR § 171.206Interoperability API StandardsConfidentiality Disclosure

Protecting Care Access—When will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to reduce potential exposure to legal action not be considered information blocking?

An actor's practice that is implemented to reduce potential exposure to legal action will not be considered information blocking when the practice satisfies the condition in paragraph (a) of this section and also satisfies the requiremen...

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Reproductive health care, Electronic health information

Read provision
45 CFR § 171.300Interoperability API StandardsScope Applicability

Availability and effect of exceptions.

Establishes that a practice is not considered information blocking if the actor meets all applicable requirements and conditions of an exception.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Interoperability, Regulatory exceptions

Read provision
45 CFR § 171.301Interoperability API StandardsHealth Information Access

Manner exception—When will an actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information not be considered information blocking?

An actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information will not be considered information blocking when the practice follows the conditions of this section.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Manner exception, Electronic health information

Read provision
45 CFR § 171.302Interoperability API StandardsReimbursement Payment

Fees exception—When will an actor's practice of charging fees for accessing, exchanging, or using electronic health information not be considered information blocking?

An actor's practice of charging fees, including fees that result in a reasonable profit margin, for accessing, exchanging, or using electronic health information will not be considered information blocking when the practice meets the con...

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Fees exception, Electronic health information

Read provision
45 CFR § 171.303Interoperability API StandardsCompliance Programs

Licensing exception—When will an actor's practice to license interoperability elements in order for electronic health information to be accessed, exchanged, or used not be considered information blocking?

An actor's practice to license interoperability elements for electronic health information to be accessed, exchanged, or used will not be considered information blocking when the practice meets all of the following conditions.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Interoperability licensing, Electronic health information

Read provision
45 CFR § 171.400Interoperability API StandardsScope Applicability

Availability and effect of exceptions.

Defines the effect of satisfying an information blocking exception, stating that a practice is not considered information blocking if all requirements are met.

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Information blocking, Regulatory exceptions, Compliance standards

Read provision
45 CFR § 171.401Definitions ContextInteroperability API Standards

Definitions.

Provides definitions for terms used in the context of information blocking exceptions, such as Common Agreement and QHIN.

Group

Definitions Scope Authority

Category

Definitions Context

Domain

Records

Topics

Definitions, Information blocking, Tefca

Read provision
45 CFR § 171.402Source Placeholder

[Reserved]

This provision is reserved and contains no substantive content.

Group

Internal Review

Category

Source Placeholder

Domain

Not Service Specific

Topics

Reserved

Read provision
45 CFR § 171.403Interoperability API StandardsScope Applicability

TEFCA manner exception—When will an actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information to only via TEFCA not be considered information blocking?

An actor's practice of limiting the manner in which it fulfills a request for access, exchange, or use of electronic health information to only via TEFCA will not be considered information blocking when the practice follows the condition...

Group

Health It Privacy Security

Category

Interoperability API Standards

Domain

Records

Topics

Tefca, Information blocking, Electronic health information

Read provision