HHS Proposes New Rules to Combat Information Blocking and Enhance Interoperability for Telehealth

Introduction

The U.S. Department of Health and Human Services (HHS), through the Office of the National Coordinator for Health Information Technology (ONC), has issued proposed rules aimed at strengthening the existing information blocking regulations and promoting greater interoperability within the healthcare system. These proposals, building upon the 21st Century Cures Act, are specifically designed to ensure that electronic health information (EHI) can be accessed, exchanged, and used without unreasonable barriers, a critical component for the continued expansion and effectiveness of telehealth services. The proposed rules seek to improve patient care coordination, empower patients with their health data, and foster innovation in health IT.

Understanding Information Blocking

Information blocking, as defined by the 21st Century Cures Act, generally refers to practices that are likely to interfere with the access, exchange, or use of EHI. The original regulations, which went into effect in phases starting in 2021, prohibited healthcare providers, health IT developers of certified health IT, and health information networks/exchanges from engaging in such practices, unless an exception applied. The goal was to dismantle artificial barriers to data sharing that often hindered patient care, research, and public health efforts.

Key Provisions of the Proposed Rules

The new proposed rules introduce several significant updates and clarifications:

1. Expanded Definition of Information Blocking Actors: The proposed rules clarify and expand the types of entities considered 'Actors' subject to information blocking prohibitions. This includes a more explicit focus on health IT developers of certified health IT and health information networks/exchanges, ensuring that the entire ecosystem responsible for EHI is accountable.

2. Reinforced Exceptions: While information blocking is prohibited, certain exceptions allow for practices that interfere with EHI access, exchange, or use if they meet specific criteria. The proposed rules aim to clarify and refine these exceptions, ensuring they are not misused to justify unnecessary data withholding. These exceptions include preventing harm, promoting privacy, security, and recovery of costs, among others.

3. Focus on Interoperability for Telehealth: A significant aspect of these proposals is their direct relevance to telehealth. The ability to seamlessly exchange EHI is fundamental for effective telehealth delivery. Patients often interact with multiple providers across different systems, and the proposed rules aim to ensure that their health data follows them, regardless of the care modality. This includes facilitating access to EHI through Application Programming Interfaces (APIs), which are crucial for integrating various telehealth platforms and patient-facing applications.

4. Enforcement Mechanisms: The proposed rules reiterate and strengthen the enforcement mechanisms for information blocking. Civil monetary penalties can be levied against health IT developers and health information networks/exchanges found to be in violation. While healthcare providers are currently subject to appropriate disincentives, the long-term goal is to ensure all actors comply, fostering a culture of data sharing.

5. Promoting Transparency and Patient Access: The rules continue to emphasize the importance of patient access to their EHI. By requiring health IT systems to support standardized APIs, the proposals aim to make it easier for patients to access their health records through third-party applications of their choice, promoting greater transparency and patient empowerment.

Regulatory Context and Source

These proposed rules stem from the 21st Century Cures Act, signed into law in 2016, which mandated the development of regulations to prevent information blocking and promote interoperability. The ONC, a division of HHS, is responsible for implementing these provisions. The specific proposals are typically published in the Federal Register for public comment before finalization.

• Source: U.S. Department of Health and Human Services (HHS), Office of the National Coordinator for Health Information Technology (ONC)
• Relevant Legislation: 21st Century Cures Act (Public Law 114-255)
• Primary Source URL: While a specific Federal Register URL for a proposed rule can change, the general information and updates are consistently published on the ONC's website. A relevant starting point for information blocking regulations is the ONC's dedicated page. For example, information regarding the 21st Century Cures Act and its implementation can be found at https://www.healthit.gov/topic/information-blocking.

Implications for Healthcare Businesses

Telehealth Brands

For telehealth brands, these proposed rules are particularly impactful. Seamless EHI exchange is the backbone of coordinated virtual care. Telehealth providers must ensure their platforms are not only secure but also highly interoperable, capable of sending and receiving patient data from various EHR systems, pharmacies, labs, and other providers. This includes supporting standardized APIs to facilitate patient access and integration with other health applications. Non-compliance could lead to significant operational hurdles and potential penalties, especially if their systems are deemed to be interfering with legitimate EHI access.

Medspas and Dental Practices

Medspas and dental practices, which may traditionally have operated with more siloed data systems, will need to adapt significantly. As these practices increasingly adopt telehealth components for consultations or follow-ups, the need for interoperability grows. They must ensure their practice management software and EHR systems (if applicable) can exchange EHI with other healthcare providers involved in a patient's overall care. This might mean upgrading existing systems, implementing new interfaces, or partnering with IT vendors that prioritize interoperability. The goal is to prevent situations where a patient's aesthetic or dental history cannot be readily shared with their primary care physician if medically relevant.

Chiropractic Offices

Chiropractic offices often collaborate with primary care physicians, physical therapists, and other specialists. The proposed rules underscore the importance of their ability to share patient treatment plans, progress notes, and diagnostic information effectively. Ensuring their specialized chiropractic software is interoperable and does not engage in information blocking will be crucial for maintaining continuity of care and avoiding potential compliance issues. This could involve adopting new data exchange protocols or ensuring their current systems are certified to meet ONC standards.

General Healthcare Businesses

All healthcare businesses, regardless of specialty, must review their current health IT infrastructure and data sharing policies. Key considerations include:

• Vendor Agreements: Scrutinize contracts with EHR vendors and other health IT providers to ensure they are compliant with information blocking regulations and do not impose restrictive data sharing clauses.
• Data Governance: Establish clear policies and procedures for EHI access, exchange, and use, ensuring that staff understand their obligations under these rules.
• Patient Access: Enhance patient portals and other mechanisms to ensure patients have easy, secure, and timely access to their EHI, often through API-enabled applications.
• Training: Provide ongoing training to staff on information blocking prohibitions and the importance of interoperability.
• Risk Assessment: Conduct regular assessments to identify and mitigate any practices that could be construed as information blocking.

Conclusion

The proposed HHS rules on information blocking and interoperability signify a continued commitment to a more connected and patient-centric healthcare system. For telehealth brands, medspas, dental practices, chiropractic offices, and other healthcare businesses, these regulations are not merely technical requirements but fundamental shifts in how healthcare data is managed and shared. Proactive engagement with these rules, including assessing current systems, updating policies, and collaborating with compliant IT partners, will be essential for ensuring regulatory adherence, enhancing patient care, and fostering innovation in the evolving healthcare landscape.