Point of View White Paper

The 21st Century Cures Act, the ONC Cures Act Final Rule, and the CMS Interoperability and Patient Access rule collectively requires CMS covered entities to enable the secure exchange of patient’s healthcare information via HL7® FHIR® Application Programming Interfaces (APIs), while ensuring the patient remains in charge of all decisions around their healthcare data.

CMS requires covered entities to authenticate patient identity, grant access authorization, and obtain patient consent to exchange their healthcare information with the application or entity of their choice. This ensures compliance with the Health Insurance Portability and Accountability Act (HIPAA).