CMS Interoperability and Patient Access Final Rule

CMS Interoperability and Patient Access Final Rule
Title	CMS Interoperability and Patient Access Final Rule
Agency	Centers for Medicare & Medicaid Services
Promulgated	2020
Effective	2021
Citation	Final Rule on Interoperability and Patient Access
Subject	Health information technology, patient access

CMS Interoperability and Patient Access Final Rule The CMS Interoperability and Patient Access Final Rule is a regulatory action issued by the Centers for Medicare & Medicaid Services that requires standardized data exchange and patient access to health information for Medicare Advantage, Medicaid, and other federal health programs. The rule builds on federal statutes and initiatives including the Health Insurance Portability and Accountability Act, the 21st Century Cures Act, and aims to align program requirements with policies promoted by the Office of the National Coordinator for Health Information Technology, the Department of Health and Human Services, and stakeholders such as American Medical Association and Department of Veterans Affairs.

Background and Purpose

The rule arose amid national debates involving the 21st Century Cures Act, interoperability efforts led by the Office of the National Coordinator for Health Information Technology, and prior rulemaking by the Centers for Medicare & Medicaid Services. Its purpose was to reduce data blocking alleged in reports by the Office of Inspector General of the Department of Health and Human Services, to empower beneficiaries represented in cases before the Supreme Court of the United States, and to harmonize federal programs overseen by agencies like the Centers for Disease Control and Prevention and Indian Health Service. The policy responds to advocacy from organizations such as the Blue Cross Blue Shield Association, Kaiser Permanente, and patient groups linked to the American Hospital Association.

Key Provisions and Requirements

Major provisions required Medicare Advantage organizations, Medicaid managed care plans, and issuers in the Federally Facilitated Marketplace to implement standardized Application Programming Interfaces patterned after standards from the Fast Healthcare Interoperability Resources initiative, the Health Level Seven International organization, and technical guidance from the National Institute of Standards and Technology. The rule mandated patient access to claims and clinical data via consumer-facing apps approved by entities like Apple Inc., Google LLC, and health information networks such as CommonWell Health Alliance and Carequality. It also specified prior authorization electronic workflows aligned with pilots by Centers for Medicare & Medicaid Services Innovation Center and interoperability pilots involving Centers for Disease Control and Prevention programs. Compliance requirements referenced testing, certification pathways used by the Office of the National Coordinator for Health Information Technology and conformance to standards advocated by World Health Organization frameworks.

Implementation Timeline and Compliance

Implementation phases began with timelines for initial API support, data element availability, and expanded enrollment. Deadlines required plans to make provider directories, claims, encounters, and clinical data elements accessible consistent with certification timelines used by the Office of the National Coordinator for Health Information Technology. Enforcement milestones overlapped with rulemakings from the Department of Health and Human Services and coordination with the Federal Communications Commission on telehealth initiatives. Compliance involved audits comparable to program integrity reviews by the Office of Inspector General of the Department of Health and Human Services and reporting mechanisms similar to those used by the Centers for Medicare & Medicaid Services in prior contract oversight of suppliers such as UnitedHealth Group and Humana Inc..

Impact on Patients and Providers

For beneficiaries covered under programs administered by Centers for Medicare & Medicaid Services, the rule promised enhanced portability of records similar to national initiatives like My Health Record and international efforts observed in National Health Service (England). Providers affiliated with systems such as Mayo Clinic, Johns Hopkins Hospital, and integrated delivery networks including Geisinger Health System faced technical and administrative adjustments akin to transitions seen in large-scale electronic health record implementations by Epic Systems Corporation and Cerner Corporation. Patient advocacy groups including AARP and clinical societies like the American College of Physicians highlighted potential benefits for care coordination, research facilitated by datasets used by institutions like the National Institutes of Health, and concerns about app vetting reminiscent of debates before the Federal Trade Commission.

Enforcement, Penalties, and Oversight

Enforcement mechanisms relied on existing authorities of Centers for Medicare & Medicaid Services including conditions of participation and statutory remedies used in prior actions involving suppliers such as Theranos, Inc.. Penalties could include program sanctions, civil monetary penalties administered under statutes enforced by the Department of Justice, and corrective action plans similar to measures taken by Office of Inspector General of the Department of Health and Human Services reviews. Oversight coordination involved Office of the National Coordinator for Health Information Technology, Department of Health and Human Services Office for Civil Rights, and congressional committees including the United States House Committee on Energy and Commerce.

Criticisms, Legal Challenges, and Responses

Critics from industry groups such as America's Health Insurance Plans and providers including American Medical Association raised concerns about implementation burdens, security risks paralleling controversies handled by the Federal Trade Commission and National Security Agency, and potential liability issues litigated in federal courts including the United States Court of Appeals for the District of Columbia Circuit. Legal challenges referenced preemption doctrines adjudicated by the Supreme Court of the United States in cases involving federal regulatory reach. CMS and allied agencies responded with phased guidance, stakeholder engagement modeled after processes used by the National Institute for Health and Care Excellence and interagency coordination akin to responses in past health crises involving the Centers for Disease Control and Prevention and Food and Drug Administration.

Category:United States federal health legislation