November 26, 2020

Volume X, Number 331

Advertisement

November 25, 2020

Subscribe to Latest Legal News and Analysis

November 24, 2020

Subscribe to Latest Legal News and Analysis

November 23, 2020

Subscribe to Latest Legal News and Analysis

Key Takeaways on Complying With the New ONC Final Rule | MHA Webinar

On October 8th, the Massachusetts Health & Hospital Association (MHA) held a webinar regarding the information blocking aspects of the Office of the National Coordinator for Health Information Technology (ONC) Final Rule under the 21st Century Cures Act. The Cures Act required ONC to develop regulations to improve interoperability and patient access to electronic health information, and deter information blocking. Information blocking is a practice that is likely to interfere with, prevent, or materially discourage access, exchange, or use of electronic health information (EHI).

The presentation, which was given by Foley Partner Chanley Howell, focused on aspects of ONC’s Final Rule specific to health care providers and steps practices should take in order to comply. Below are some key takeaways from the presentation:

  1. While the Office of Management and Budget (OMB) is currently reviewing further extensions from the current compliance deadline of November 2, 2020, it is important to keep in mind that the Office of Inspector General (OIG) is working on civil monetary penalties (CMPs) up to $1 million and “appropriate disincentives.” However, these penalties will not begin until the OIG has had the opportunity for notice and comment rulemaking on what may constitute “appropriate disincentives.” There will also be a three-month enforcement discretion period from ONC until February 2, 2021 to allow health care providers to focus on other priorities during the COVID-19.

  2. While HIPAA historically has required business associate agreements to establish permissible uses and disclosures of PHI—and prohibit uses and disclosures not permitted or required by law—the new rule now requires the sharing of data where HIPAA permits, but does not require, the disclosure. Additionally, when the law permits the access to or exchange of EHI, a disclosure will often be required.

  3. The new rule requires that the policies be implemented in a consistent and non-discriminatory manner to put pressure on providers or health IT developers to streamline their data contracting protocols. If delay or denial of information may be considered interference, compliance with an exception may be necessary to avoid information blocking claims.

  4. Covered entities and their business associates should update their privacy and security policies, as well as modify their release of information and data-sharing practices. In some places, the rule requires that organizational policies be in writing (such as in the Preventing Harm, Privacy and Security Exceptions).

  5. Although the ONC notes that the information blocking rule does not itself require providers or health IT developers to violate their Business Associate Agreements (BAAs), they cannot use these agreements to limit EHI disclosures, so it is highly encouraged to consider the applicability of BAA language regarding modifications to the law.

You can view the recording of the presentation on demand by clicking here and download the slides from this presentation by clicking here.

© 2020 Foley & Lardner LLPNational Law Review, Volume X, Number 293
Advertisement

TRENDING LEGAL ANALYSIS

Advertisement
Advertisement

About this Author

Chanley Howell, Intellectual Property Attorney, Foley Law Firm
Partner

Chanley T. Howell is a partner and intellectual property lawyer with Foley & Lardner LLP, where his practice focuses on a broad range of technology law matters. He is a member of the firm's Technology Transactions & Outsourcing and Privacy, Security & Information Management Practices and the Sports and Health Care Industry Teams.

Mr. Howell represents companies in a variety of technology law areas, such as:

  • Data Privacy and Security Compliance – Counsel and advise clients with respect to compliance...

904-359-8745
Advertisement
Advertisement