Federal
Information Blocking
24 provisions · Centers for Medicare & Medicaid Services
Provisions
Citable source units
Statutory basis and purpose.
This provision establishes the statutory authority and purpose for the information blocking regulations under the Public Health Service Act.
Group
Definitions Scope Authority
Category
Definitions Context
Domain
Records
Topics
Information blocking purpose, Statutory basis for information blocking
Scope.
This provision defines the scope of the subpart regarding disincentives that may be imposed on health care providers for information blocking.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Information blocking disincentives, Provider information blocking penalties
Disincentives.
This provision specifies the disincentives that may be applied to hospitals, clinicians, and ACOs determined to have committed information blocking.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Information blocking disincentives, Meaningful ehr user status, Medicare shared savings program penalties
Notice of disincentive.
This provision outlines the requirements for notifying a health care provider when a disincentive for information blocking is being imposed.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Information blocking notice, Disincentive notification process
Applicability.
This provision defines the entities subject to the information blocking regulations and the effective date of these requirements.
Group
Definitions Scope Authority
Category
Scope Applicability
Domain
Records
Topics
Information blocking applicability, Health information exchange rules
Definitions.
This provision defines key terms used in the regulation of information blocking, including access, exchange, electronic health information, and health IT developer.
Group
Definitions Scope Authority
Category
Definitions Context
Domain
Records
Topics
Information blocking definitions, Electronic health information, Interoperability standards
Information blocking.
This provision defines information blocking as practices likely to interfere with the access, exchange, or use of electronic health information when conducted by health IT developers, networks, or health care providers.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking definition, Electronic health information access, Health it interoperability
Scope.
This section establishes the scope for posting information on the ONC public website regarding actors determined by the HHS Office of Inspector General to have committed information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking enforcement, Public disclosure of information blocking, Onc public website
Posting of information for actors found to have committed information blocking.
This provision outlines the specific information the ONC will post on its public website regarding health care providers and other actors determined to have committed information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking penalties, Public reporting of information blocking, Onc enforcement actions
Availability and effect of exceptions.
This provision states that a practice will not be considered information blocking if the actor meets all applicable requirements and conditions of an exception set forth in subpart B.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking exceptions, Interoperability compliance, Electronic health information exchange
Preventing harm exception—when will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to prevent harm n...
This provision outlines the conditions under which an actor's practice that interferes with electronic health information access to prevent harm will not be considered information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Preventing harm exception, Information blocking exceptions, Patient safety
Privacy exception—When will an actor's practice of not fulfilling a request to access, exchange, or use electronic health information in order to protect an individual's privacy...
This provision specifies the conditions under which an actor's practice of not fulfilling a request to access, exchange, or use electronic health information to protect privacy will not be considered information blocking.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Privacy exception, Information blocking exceptions, Hipaa privacy rule
Security exception—When will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to protect the security...
This provision outlines the conditions under which an actor's practice of interfering with electronic health information access to protect security is not considered information blocking.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Information blocking security exception, Electronic health information security, Safeguarding electronic health information
Infeasibility exception—When will an actor's practice of not fulfilling a request to access, exchange, or use electronic health information due to the infeasibility of the reque...
This provision specifies the criteria and documentation requirements for an actor to claim an infeasibility exception when unable to fulfill a request for electronic health information.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Information blocking infeasibility exception, Electronic health information access, Request fulfillment documentation
Health IT performance exception—When will an actor's practice that is implemented to maintain or improve health IT performance and that is likely to interfere with the access, e...
This provision defines the conditions under which practices implemented to maintain or improve health IT performance are not considered information blocking.
Group
Health It Privacy Security
Category
HIPAA Privacy Security
Domain
Records
Topics
Information blocking performance exception, Health it maintenance, System performance degradation
Protecting Care Access—When will an actor's practice that is likely to interfere with the access, exchange, or use of electronic health information in order to reduce potential...
Defines the conditions under which an actor's practice of interfering with electronic health information access to reduce legal risk related to reproductive health care is not considered information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking, Reproductive health care, Electronic health information
Availability and effect of exceptions.
Establishes that a practice is not considered information blocking if the actor meets all applicable requirements and conditions of an exception.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking, Interoperability, Regulatory exceptions
Manner exception—When will an actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information not be considered...
Specifies the conditions under which an actor's practice of limiting the manner of fulfilling a request for electronic health information is not considered information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking, Manner exception, Electronic health information
Fees exception—When will an actor's practice of charging fees for accessing, exchanging, or using electronic health information not be considered information blocking?
Outlines the criteria for charging fees for accessing, exchanging, or using electronic health information without violating information blocking regulations.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking, Fees exception, Electronic health information
Licensing exception—When will an actor's practice to license interoperability elements in order for electronic health information to be accessed, exchanged, or used not be consi...
Specifies the conditions under which an actor's practice of licensing interoperability elements for electronic health information is not considered information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking, Interoperability licensing, Electronic health information
Availability and effect of exceptions.
Defines the effect of satisfying an information blocking exception, stating that a practice is not considered information blocking if all requirements are met.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Information blocking, Regulatory exceptions, Compliance standards
Definitions.
Provides definitions for terms used in the context of information blocking exceptions, such as Common Agreement and QHIN.
Group
Definitions Scope Authority
Category
Definitions Context
Domain
Records
Topics
Definitions, Information blocking, Tefca
[Reserved]
This provision is reserved and contains no substantive content.
Group
Internal Review
Category
Source Placeholder
Domain
Not Service Specific
Topics
Reserved
TEFCA manner exception—When will an actor's practice of limiting the manner in which it fulfills a request to access, exchange, or use electronic health information to only via...
Outlines the conditions under which limiting the manner of fulfilling an EHI request to TEFCA is not considered information blocking.
Group
Health It Privacy Security
Category
Interoperability API Standards
Domain
Records
Topics
Tefca, Information blocking, Electronic health information
