We had been waiting for the Office of the National Coordinator for Health IT to release the proposed rule fulfilling its Cures Act obligation for quite a while. Encompassing important issues like expanded interoperability, defining what is and isn’t information blocking, as well as proposing updated certification requirements, this is an important rule to get right.
Since the release, there have been lots of discussions—public and private, online and off—about intended and potentially unintended impacts of the language in the proposal. With so much to consider and analyze, we appreciate that the request from EHRA and other groups to give us a full three months to draft our comments on the rule was approved.
The tremendously broad reach of the proposed rule goes far beyond Congressional intent.
The EHR Association’s comments are now going through final rounds of review by our executive committee (and the seven workgroups and task forces that contributed their expertise). We worked throughout the drafting of the 21st Century Cures Act with Congress and are supportive of its goal to remove obstacles to information exchange, but we have found that the tremendously broad reach of the proposed rule goes far beyond Congressional intent. In particular, we have significant concerns regarding timelines, ambiguous language, disincentives for innovation, and definitions related to information blocking.

ONC’s 

The widespread opioid epidemic and its devastating effects flood our news feeds daily. No one is immune, which is why when the Electronic Health Record Association (EHRA) asked for volunteers to join a new Opioid Crisis Task Force, we and many others – including doctors, nurses, and pharmacists – stepped forward to share our experiences and expertise. For the past year, we have been conducting research and providing recommendations on new ways EHR technology can contribute solutions to help solve the complex puzzle of the opioid crisis.
Whether you work for a large health system or small physician practice, you know that securing your patients’ data is important, and it’s a responsibility you take seriously. But chances are, you haven’t fully implemented as many cybersecurity best practices as you could.