Information Blocking: Everything Providers Should Know to Ensure Compliance

In December 2016, Congress passed the 21st Century Cures Act (often simply called the "Cures Act"). Woven within the Cures Act is Section 4004 titled "Information Blocking."[1] The purpose of this section is to prohibit any action or practice that interferes with or prevents access to electronic health information (i.e., information about a patient's medical history or treatment). The law requires the Department of Health and Human Services ("HHS"), through rulemaking, to identify reasonable and necessary activities that do not constitute information blocking.

On May 1, 2020, HHS issued its Final Rule that set an initial compliance date of November 2, 2020. [2] Due to the public health emergency and lobbying efforts, this was pushed back to April 5, 2021.

"Information blocking" is defined as any practice that is likely to interfere with, prevent, or materially discourage access, exchange, or use of electronic health information, and if conducted by a healthcare provider, such provider knows that the practice is unreasonable and is likely to be considered information blocking.[3]  Engaging in "information blocking" could result in a civil monetary penalty up to $1,000,000 for each violation. The Final Rule also utilizes the definition of "healthcare provider" found in the PHSA - which is broader than the definition of "healthcare provider" under HIPAA.

Examples of information blocking include, but are not limited to, (1) practices that restrict authorized access, exchange, or use of such information for treatment, including transitions between certified health information technologies; (2) implementing health information technology in non-standard ways that are likely to substantially increase the complexity or burden of accessing, exchanging, or using electronic health information; and (3) implementing health information technology in ways that are likely to (a) restrict the access, exchange, or use of electronic health information with respect to exporting complete information sets or in transitioning between health information technology systems; or (b) lead to fraud, waste, or abuse, or impede innovations and advancements in health information access, exchange, and use, including care delivery enabled by health information technology.[4]

In the Final Rule, the ONC requires, at a minimum, that the common data through the U.S. Core Data for Interoperability ("USCDI") be made available to a requestor. The USCDI is a standardized set of health data classes and data elements that are essential for nationwide, interoperable health information exchange.[5] The purpose of this rule is to advance and promote the complete access, exchange, and use of all electronically accessible health information.

The Final Rule identifies eight different types of clinical notes that must be shared under new USCDI standards: (1) consultation notes, (2) discharge summary notes, (3) history and physical, (4) imaging narratives, (5) laboratory report narratives, (6) pathology report narratives, (7) procedure notes, and (8) progress notes.[6]

The Final Rule also provides eight exceptions to information blocking that may be utilized by healthcare providers. If a provider meets one of these exceptions, then the action is not considered information blocking and will not be subject to civil monetary penalties. The Final Rule is clear that each situation is a case-by-case determination that is based upon the specific facts and circumstances of each request.

It will not be information blocking for an actor to engage in any of the following actions:



Please contact Amanda Waesch, Esq. at 330-253-9185 or alwaesch@bmdllc.com should you have any questions regarding the Final Rule or questions regarding information blocking, the sharing of health information, or other general healthcare issues.