42 C.F.R. § 495.22 – Meaningful use objectives and measures for EPs, eligible hospitals, and CAHs for 2015 through 2018.

(a) General rules.
1. (1) Subject to the provisions of paragraph (a)(2) of this section, the criteria specified in this section are applicable for EPs, eligible hospitals, and CAHs for 2015 through 2018.
2. (2) For 2017 and 2018, EPs, eligible hospitals, and CAHs that have successfully demonstrated meaningful use in a prior year have the option to use the criteria specified for 2019 in § 495.24 instead of the criteria specified for 2017 and 2018 under paragraphs (e) and (f) of this section.
(b) Criteria for EPs for 2015 through 2018—(1) General rule regarding criteria for meaningful use for 2015 through 2018 for EPs. Except as specified in paragraph (b)(2) of this section, EPs must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (e) of this section to meet the definition of a meaningful EHR user.
(2) Exclusion for non-applicable objectives.
1. (i) An EP may exclude a particular objective contained in paragraph (e) of this section, if the EP meets all of the following requirements:
  1. (A) Must ensure that the objective in paragraph (e) of this section includes an option for the EP to attest that the objective is not applicable.
  2. (B) Meets the criteria in the applicable objective that would permit the attestation to the exclusion.
  3. (C) Attests.
2. (ii) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (e) of this section.
3. (c) Criteria for eligible hospitals and CAHs for 2015 through 2018—(1) General rule regarding criteria for meaningful use for 2015 through 2018 for eligible hospitals and CAHs. Except as specified in paragraph (c)(2) of this section, eligible hospitals and CAHs attesting to CMS must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (e) of this section to meet the definition of a meaningful EHR user in 2015 and 2016 and must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (f) of this section to meet the definition of a meaningful EHR user in 2017 and 2018. Except as specified in paragraph (c)(2) of this section, eligible hospitals and CAHs attesting to a State for the Medicaid EHR Incentive Program must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (e) of this section to meet the definition of a meaningful EHR user in 2015 through 2018.
4. (2) Exclusion for non-applicable objectives.
  1. (i) An eligible hospital or CAH may exclude a particular objective contained in paragraph (e) of this section, if the eligible hospital or CAH meets all of the following requirements:
    1. (A) Must ensure that the objective in paragraph (e) of this section includes an option for the eligible hospital or CAH to attest that the objective is not applicable.
    2. (B) Meets the criteria in the applicable objective that would permit the attestation to the exclusion.
    3. (C) Attests.
  2. (ii) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (e) of this section.
  3. (d) Many of the objectives and associated measures in paragraph (e) of this section rely on measures that count unique patients or actions.
  4. (1) If a measure (or associated objective) in paragraph (e) or (f) of this section references this paragraph (d), the measure may be calculated by reviewing only the actions for patients whose records are maintained using CEHRT. A patient's record is maintained using CEHRT if sufficient data were entered in the CEHRT to allow the record to be saved, and not rejected due to incomplete data.
  5. (2) If the objective and associated measure does not reference this paragraph (d) of this section, then the measure must be calculated by reviewing all patient records, not just those maintained using CEHRT.
  6. (e) Meaningful use objectives and measures for EPs for 2015 through 2018, for eligible hospitals and CAHs attesting to CMS for 2015 and 2016, and for eligible hospitals and CAHs attesting to a State for the Medicaid EHR Incentive Program for 2015 through 2018.—(1) Protect patient health information—(i) Objective. Protect electronic protected health information created or maintained by the CEHRT through the implementation of appropriate technical capabilities.
  7. (ii) Measures—(A) EP measure. Conduct or review a security risk analysis in accordance with the requirements in 45 CFR 164.308(a)(1), including addressing the security (to include encryption) of ePHI created or maintained by CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary and correct identified security deficiencies as part of the EP's risk management process.
  8. (B) Eligible hospital or CAH measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including Addressing the security (to include encryption) of ePHI created or maintained in CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary, and correct identified security deficiencies as part of the eligible hospital's or CAH's risk management process.
  9. (2) Clinical decision support—(i) Objective. Use clinical decision support to improve performance on high-priority health conditions.
  10. (ii) EP measures—(A) Measure. In order for EPs to meet the objective they must satisfy both of the following measures:
    (1) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an EP's scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions.
    (2) Enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.
  11. (B) Exclusion in accordance with paragraph (b)(2) of this section. An EP who writes fewer than 100 medication orders during the EHR reporting period may be excluded from the measure under paragraph (e)(2)(i)(A)(2) of this section.
  12. (C) Alternate specifications. An EP previously scheduled to be in Stage 1 in 2015 may meet an alternate objective and measure specified in paragraph (e)(2)(ii)(C)(1) and (2) in place of the measure outlined under paragraph (e)(2)(ii)(A)(1) of this section for an EHR reporting period in 2015 only.
    (1) Alternate objective. Implement one clinical decision support rule relevant to specialty or high clinical priority along with the ability to track compliance with that rule.
    (2) Alternate measure. Implement one clinical decision support rule.
  13. (iii) Eligible hospital and CAH measures—(A) Measure. In order for eligible hospitals and CAHs to meet the objective they must satisfy both of the following measures:
    (1) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an eligible hospital or CAH's scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions.
    (2) Enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.
  14. (B) Alternate specifications. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may meet an alternate measure described in paragraph (e)(2)(iii)(B)(2) of this section in place of the measure described in paragraph (e)(2)(iii)(A)(1) of this section for an EHR reporting period in 2015.
    (1) Alternate objective. Implement one clinical decision support rule relevant to a high priority hospital condition along with the ability to track compliance with that rule.
    (2) Alternate measure. Implement one clinical decision support rule.
5. (3) Computerized provider order entry—(i) Objective. Use computerized provider order entry for medication, laboratory, and radiology orders directly entered by any licensed healthcare professional who can enter orders into the medical record per state, local, and professional guidelines.
6. (ii) EP measures—(A) Measures. An EP must meet the following 3 measures, subject to paragraph (d) of this section:
  (1) More than 60 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.
  (2) More than 30 percent of laboratory orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.
  (3) More than 30 percent of radiology orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.
7. (B) Exclusion in accordance with paragraph (b)(2) of this section. (1) For the measure specified in paragraph (e)(3)(ii)(A)(1) of this section, any EP who writes fewer than 100 medication orders during the EHR reporting period.
  (2) For the measure specified in paragraph (e)(3)(ii)(A)(2) of this section, any EP who writes fewer than 100 laboratory orders during the EHR reporting period.
  (3) For the measure specified in paragraph (e)(3)(ii)(A)(3) of this section, any EP who writes fewer than 100 radiology orders during the EHR reporting period.
8. (C) Alternate exclusions and specifications. An EP previously scheduled to be in Stage 1 in 2015 may meet an alternate measure (e)(3)(ii)(C)(1) in place of the measure outlined under paragraph (e)(3)(ii)(A)(1) of this section, and may exclude the measures outlined under paragraphs (e)(3)(ii)(A)(2) and (3) of this section for an EHR reporting period in 2015. An EP previously scheduled to be in Stage 1 in 2016 may exclude the measures outlined under paragraphs (e)(3)(ii)(A)(2) and (3) of this section for an EHR reporting period in 2016.
  (1) Alternate measure 1 in 2015. Subject to paragraph (d) of this section—
  (i) More than 30 percent of all unique patients with at least one medication in their medication list seen by the EP during the EHR reporting period have at least one medication order entered using CPOE; or
  (ii) More than 30 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.
  (2) Alternate exclusions in 2015. An EP scheduled to be in Stage 1 in 2015 may exclude the measures specified in paragraphs (e)(3)(ii)(A)(2) and (e)(3)(ii)(A)(3) of this section in 2015.
  (3) Alternate exclusions in 2016. An EP scheduled to be in Stage 1 in 2016 may exclude the measure specified in paragraphs (e)(3)(ii)(A)(2) and (e)(3)(ii)(A)(3) of this section in 2016.
9. (iii) Eligible hospital and CAH measures.
  1. (A) An eligible hospital or CAH must meet the following 3 measures, subject to paragraph (d) of this section:
    (1) More than 60 percent of medication orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.
    (2) More than 30 percent of laboratory orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.
    (3) More than 30 percent of radiology orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.
  2. (B) Alternate exclusions and specifications. (1) An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may meet an alternate measure specified in paragraph (e)(3)(iii)(B)(2) of this section in place of the measure outlined under paragraph (e)(3)(iii)(A)(1) of this section, and may exclude the measures outlined under paragraphs (e)(3)(iii)(A)(2) and (e)(3)(iii)(A)(3) of this section for an EHR reporting period in 2015. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2016 may exclude the measures outlined under paragraphs (e)(3)(iii)(A)(2) and (3) of this section for an EHR reporting period in 2016.
    (2) Alternate measure 1 in 2015. Subject to paragraph (d) of this section—
    (i) More than 30 percent of all unique patients with at least one medication in their medication list admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have at least one medication order entered using CPOE; or
    (ii) More than 30 percent of medication orders created by the authorized providers of the eligible hospital or CAH for patients admitted to their inpatient or emergency departments (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.
    (3) Alternate exclusions in 2015 and 2016. An eligible hospital or CAH scheduled to be in Stage 1 in 2015 may exclude the following measures in 2015 and eligible hospital or CAH scheduled to be in Stage 1 in 2016 may exclude the following measures in 2016:
    (i) The measure specified in paragraph (e)(3)(iii)(A)(2) of this section.
    (ii) The measure specified in paragraph (e)(3)(iii)(A)(3) of this section.
  3. (4) Electronic prescribing—(i) Objective. For EPs, generate and transmit permissible prescriptions electronically (eRx); and, for eligible hospitals and CAHs, generate, and transmit permissible discharge prescriptions electronically (eRx).
  4. (ii) EP measure—(A) Measure. Subject to paragraph (d) of this section, more than 50 percent of all permissible prescriptions written by the EP are queried for a drug formulary and transmitted electronically using CEHRT.
  5. (B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who—
    (1) Writes fewer than 100 permissible prescriptions during the EHR reporting period; or
    (2) Does not have a pharmacy within his or her organization and there are no pharmacies that accept electronic prescriptions within 10 miles of the EP's practice location at the start of his or her EHR reporting period.
  6. (C) Alternate specification. In 2015 an EP—
    (1) Previously scheduled to be in Stage 1 in 2015 may meet an alternate measure under paragraph (e)(4)(ii)(C)(2) of this section in place of the measure outlined under paragraph(e)(4)(ii)(A) of this section; and
    (2) Subject to paragraph (d) of this section, more than 40 percent of all permissible prescriptions written by the EP are transmitted electronically using CEHRT.
  7. (iii) Eligible hospital and CAH measure—(A) Measure. Subject to paragraph (d) of this section, more than 10 percent of hospital discharge medication orders for permissible prescriptions are queried for a drug formulary and transmitted electronically using CEHRT.
  8. (B) Exclusion in accordance with paragraph (c)(2) of this section. Any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and is not located within 10 miles of any pharmacy that accepts electronic prescriptions at the start of their EHR reporting period.
  9. (C) Alternate exclusions. (1) An eligible hospital or CAH previously scheduled to be in—
    (i) Stage 1 in 2015 may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2015; or
    (ii) Stage 2 in 2015 may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2015.
    (2) An eligible hospital or CAH previously scheduled to be in—
    (i) Stage 1 in 2016, may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2016; or
    (ii) Stage 2 in 2016, may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2016.
  10. (5) Health Information Exchange—(i) Objective. The EP, eligible hospital or CAH who transitions a patient to another setting of care or provider of care or refers a patient to another provider of care provides a summary care record for each transition of care or referral.
  11. (ii) EP measure—(A) Measure. Subject to paragraph (d) of this section, the EP who transitions or refers his or her patient to another setting of care or provider of care must do the following:
    (1) Use CEHRT to create a summary of care record.
    (2) Electronically transmit such summary to a receiving provider for more than 10 percent of transitions of care and referrals.
  12. (B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who transfers a patient to another setting or refers a patient to another provider less than 100 times during the EHR reporting period.
  13. (C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(5)(ii)(A) of this section for an EHR reporting period in 2015.
  14. (iii) Eligible hospital and CAH measure—(A) Measure. Subject to paragraph (d) of this section, the eligible hospital or CAH that transitions or refers its patient to another setting of care or provider of care must do the following:
    (1) Use CEHRT to create a summary of care record.
    (2) Electronically transmit such summary to a receiving provider for more than 10 percent of transitions of care and referrals.
  15. (B) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(5)(iii)(A) of this section for an EHR reporting period in 2015.
  16. (6) Patient specific education—(i) Objective. Use clinically relevant information from CEHRT to identify patient-specific education resources and provide those resources to the patient.
  17. (ii) EP measure—(A) Measure. Patient-specific education resources identified by CEHRT are provided to patients for more than 10 percent of all unique patients with office visits seen by the EP during the EHR reporting period.
  18. (B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who has no office visits during the EHR reporting period.
  19. (C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(6)(ii)(A) of this section for an EHR reporting period in 2015.
  20. (iii) Eligible hospital and CAH measure—(A) Measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient-specific education resources identified by CEHRT.
  21. (B) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(6)(iii)(A) of this section for an EHR reporting period in 2015.
  22. (7) Medication reconciliation—(i) Objective. The EP, eligible hospital or CAH that receives a patient from another setting of care or provider of care or believes an encounter is relevant performs medication reconciliation.
  23. (ii) EP measure—(A) Measure. Subject to paragraph (d) of this section, the EP performs medication reconciliation for more than 50 percent of transitions of care in which the patient is transitioned into the care of the EP.
  24. (B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who was not the recipient of any transitions of care during the EHR reporting period.
  25. (C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(7)(ii)(A) of this section for an EHR reporting period in 2015.
  26. (iii) Eligible hospital or CAH measure. An eligible hospital or CAH must meet the following measure, subject to paragraph (d) of this section:
    1. (A) Measure. Subject to paragraph (d) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23).
    2. (B) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(7)(iii)(A) of this section for an EHR reporting period in 2015.
    3. (8) Patient electronic access—(i) EP objective. Provide patients the ability to view online, download, and transmit their health information within 4 business days of the information being available to the EP.
      1. (A) EP measures. An EP must meet the following 2 measures:
        (1) Measure 1: More than 50 percent of all unique patients seen by the EP during the EHR reporting period are provided timely access to view online, download and transmit to a third party their health information subject to the EP's discretion to withhold certain information.
        (2) Measure 2: For an EHR reporting period—
        (i) In 2015 and 2016, at least 1 patient seen by the EP during the EHR reporting period (or patient-authorized representative) views, downloads or transmits his or her health information to a third party during the EHR reporting period.
        (ii) In 2017 and 2018, more than 5 percent of unique patients seen by the EP during the EHR reporting period (or their authorized representatives) views, downloads or transmits their health information to a third party during the EHR reporting period.
      2. (B) Exclusion in accordance with paragraph (b)(2) of this section—(1) Any EP who neither orders nor creates any of the information listed for inclusion as part of the measure in paragraph (e)(8)(ii)(A)(1) or (2) of this section, except for “Patient name” and “Provider's name and office contact information,” is excluded from paragraphs (e)(8)(ii)(A)(1) and (2) of this section.
        (2) Any EP who conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the Federal Communications Commission on the first day of the EHR reporting period is excluded from paragraph (e)(8)(ii)(A)(2) of this section.
      3. (C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(8)(ii)(A)(2) of this section for an EHR reporting period in 2015.
      4. (ii) Eligible hospital and CAH objective. Provide patients the ability to view online, download, and transmit information within 36 hours of hospital discharge.
        (A) Eligible hospital and CAH measures. An eligible hospital or CAH must meet the following 2 measures:
        (1) Measure 1. More than 50 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have timely access to view online, download and transmit to a third party their health information.
        (2) Measure 2. For an EHR reporting period—
        (i) In 2015 or 2016, at least 1 patient (or patient-authorized representative) who is discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH during the EHR reporting period views, downloads or transmits to a third party his or her information during the EHR reporting period; and
        (ii) In 2017 and 2018, more than 5 percent of unique patients (or patient-authorized representatives) discharged from the inpatient or emergency department (POS 21 or POS 23) of an eligible hospital or CAH during the EHR reporting period view, download or transmit to a third party their health information during the EHR reporting period.
        (B) Exclusion applicable under paragraph (c)(2) of this section. Any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (e)(8)(iii)(A)(2) of this section.
        (C) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(8)(iii)(A)(2) of this section for an EHR reporting period in 2015.
    4. (9) Secure messaging—(i) EP objective. Use secure electronic messaging to communicate with patients on relevant health information.
    5. (ii) EP measure—(A) Measure. For an EHR reporting period—
      (1) In 2015, the capability for patients to send and receive a secure electronic message with the EP was fully enabled during the EHR reporting period;
      (2) In 2016, for at least 1 patient seen by the EP during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or the patient-authorized representative), or in response to a secure message sent by the patient (or the patient-authorized representative) during the EHR reporting period; and
      (3) In 2017 and 2018, for more than 5 percent of unique patients seen by the EP during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or the patient-authorized representative), or in response to a secure message sent by the patient (or the patient-authorized representative) during the EHR reporting period.
    6. (B) Exclusion in accordance with paragraph (b)(2) of this section. An EP may exclude from the measure if he or she—
      (1) Has no office visits during the EHR reporting period; or
      (2) Conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the Federal Communications Commission on the first day of the EP's EHR reporting period.
    7. (C) Alternate specification. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(9)(ii)(A) of this section for an EHR reporting period in 2015.
    8. (10) Public Health Reporting—(i) EP Public Health Reporting—(A) Objective. The EP is in active engagement with a public health agency to submit electronic public health data from CEHRT, except where prohibited, and in accordance with applicable law and practice.
    9. (B) Measures. In order to meet the objective under paragraph (e)(10)(i)(A) of this section, an EP must choose from measures 1 through 3 (as specified in paragraphs (e)(10)(i)(B)(1) through (3) of this section) and must successfully attest to any combination of two measures. The EP may attest to measure 3 (as specified in paragraph (e)(10)(i)(B)(3) of this section more than one time. These measures may be met by any combination in accordance with applicable law and practice.
      (1) Immunization registry reporting. The EP is in active engagement with a public health agency to submit immunization data.
      (2) Syndromic surveillance reporting. The EP is in active engagement with a public health agency to submit syndromic surveillance data.
      (3) Specialized registry reporting. The EP is in active engagement to submit data to specialized registry.
    10. (C) Exclusions in accordance with paragraph (b)(2) of this section. (1) Any EP meeting one or more of the following criteria may be excluded from the immunization registry reporting measure in paragraph (e)(10)(i)(B)(1) of this section if the EP:
      (i) Does not administer any immunizations to any of the populations for which data is collected by his or her jurisdiction's immunization registry or immunization information system during the EHR reporting period.
      (ii) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of his or her EHR reporting period.
      (iii) Operates in a jurisdiction in which no immunization registry or immunization information system has declared readiness to receive immunization data from the EP at the start of the EHR reporting period.
      (2) Any EP meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure described in paragraph (e)(10)(i)(B)(2) of the section if the EP:
      (i) Is not in a category of providers from which ambulatory syndromic surveillance data is collected by their jurisdiction's syndromic surveillance system;
      (ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data from EPs in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.
      (iii) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from EPs at the start of the EHR reporting period.
      (3) Any EP who meets one or more of the following criteria may be excluded from the specialized registry reporting measure described in paragraph (e)(10)(i)(B)(3) of this section if the EP:
      (i) Does not diagnose or treat any disease or condition associated with or collect relevant data that is required by a specialized registry in their jurisdiction during the EHR reporting period;
      (ii) Operates in a jurisdiction for which no specialized registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period; or
      (iii) Operates in a jurisdiction where no specialized registry for which the EP is eligible has declared readiness to receive electronic registry transactions at the beginning of the EHR reporting period.
    11. (D) Alternate specifications. An EP previously scheduled to be in Stage 1 in 2015 may choose from measures 1 through 3 (as specified in paragraphs (e)(10)(i)(B)(1) through (3) of this section) and must successfully attest to any one measure in accordance with applicable law and practice for an EHR reporting period in 2015.
    12. (ii) Eligible hospital and CAH Public Health and Clinical Data Registry reporting objective—(A) Objective. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic public health data from CEHRT, except where prohibited, and in accordance with applicable law and practice.
    13. (B) Measures. In order to meet the objective under paragraph (e)(10)(ii)(A) of this section, an eligible hospital or CAH must choose from measures 1 through 4 (as described in paragraphs (e)(10)(ii)(B)(1) through (4) of this section) and must successfully attest to any combination of three measures. These measures may be met by any combination, including meeting the measure specified in paragraph (e)(10)(ii)(B)(3) of this section multiple times, in accordance with applicable law and practice:
      (1) Immunization registry reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization.
      (2) Syndromic surveillance reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data
      (3) Specialized registry reporting. The eligible hospital or CAH is in active engagement to submit data to a specialized registry.
      (4) Electronic reportable laboratory result reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.
    14. (C) Exclusions in accordance with paragraph (c)(2) of this section. (1) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the immunization registry reporting measure specified in paragraph (e)(10)(ii)(B)(1) of this section if the eligible hospital or CAH:
      (i) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.
      (ii) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.
      (iii) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data from the eligible hospital or CAH at the start of the EHR reporting period.
      (2) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure specified in paragraph (e)(10)(ii)(B)(2) of this section if the eligible hospital or CAH:
      (i) Does not have an emergency or urgent care department.
      (ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data from eligible hospitals or CAHs in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.
      (iii) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs at the start of the EHR reporting period.
      (3) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the specialized registry reporting measure described in paragraph (e)(10)(i)(B)(3) of this section if the eligible hospital or CAH:
      (i) Does not diagnose or directly treat any disease associated with or collect relevant data is required by a specialized registry for which the eligible hospital or CAH is eligible in their jurisdiction.
      (ii) Operates in a jurisdiction for which no specialized registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period; or
      (iii) Operates in a jurisdiction where no specialized registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions at the beginning of the EHR reporting period.
      (4) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (d)(10)(ii)(B)(4) of this section if the eligible hospital or CAH:
      (i) Does not perform or order laboratory tests that are reportable in the eligible hospital's or CAH's jurisdiction during the EHR reporting period
      (ii) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.
      (iii) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from eligible hospitals or CAHs at the start of the EHR reporting period.
    15. (D) Alternate specification. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may choose from measures 1 through 4 (as specified in paragraphs (e)(10)(ii)(B)(1) through (4) of this section) and must successfully attest to any 2 measures. These measures may be met by any combination, including meeting the measures specified in paragraph (e)(10)(ii)(B)(3) of this section multiple times, in accordance with applicable law and practice.
    16. (f) Meaningful use objectives and measures for eligible hospitals and CAHs attesting to CMS for 2017 and 2018—(1) Protect patient health information—(i) Objective. Protect electronic protected health information created or maintained by the CEHRT through the implementation of appropriate technical capabilities.
    17. (ii) Security risk analysis measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the security (to include encryption) of ePHI created or maintained in CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary, and correct identified security deficiencies as part of the eligible hospital's or CAH's risk management process.
    18. (2) -(3) [Reserved]
    19. (4) Electronic Prescribing—(i) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx).
    20. (ii) e-Prescribing measure. Subject to the provisions of paragraph (d) of this section, more than 10 percent of hospital discharge medication orders for permissible prescriptions are queried for a drug formulary and transmitted electronically using CEHRT.
    21. (iii) Exclusion for nonapplicable objectives. Subject to the provisions of paragraph (c)(2) of this section, any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and is not located within 10 miles of any pharmacy that accepts electronic prescriptions at the start of their EHR reporting period.
    22. (5) Health Information Exchange—(i) Objective. The eligible hospital or CAH who transitions a patient to another setting of care or provider of care or refers a patient to another provider of care provides a summary care record for each transition of care or referral.
    23. (ii) Health information exchange measure. Subject to the provisions of paragraph (d) of this section, the eligible hospital or CAH that transitions or refers their patient to another setting of care or provider of care must do the following:
      1. (A) Use CEHRT to create a summary of care record; and
      2. (B) Electronically transmit such summary to a receiving provider for more than 10 percent of transitions of care and referrals.
      3. (6) Patient specific education—(i) Objective. Use clinically relevant information from CEHRT to identify patient-specific education resources and provide those resources to the patient.
      4. (ii) Patient-specific education measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient specific education resources identified by CEHRT.
      5. (7) Medication reconciliation—(i) Objective. The eligible hospital or CAH that receives a patient from another setting of care or provider of care or believes an encounter is relevant performs medication reconciliation.
      6. (ii) Medication reconciliation measure. Subject to the provisions of paragraph (d) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23).
      7. (8) Patient electronic access—(i) Objective. Provide patients the ability to view online, download, and transmit information within 36 hours of hospital discharge.
      8. (ii) Measures. An eligible hospital or CAH must meet the following two measures:
        (A) Provide patient access measure. More than 50 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have timely access to view online, download, and transmit to a third party their health information.
        (B) View, download or transmit (VDT) measure. At least 1 patient (or patient-authorized representative) who is discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH during the EHR reporting period views, downloads, or transmits to a third party his or her information during the EHR reporting period.
      9. (iii) Exclusion for nonapplicable objectives. Subject to the provisions of paragraph (c)(2) of this section, any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (f)(8)(ii)(B) of this section.
      10. (9) Public health reporting—(i) Objective. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic public health data from CEHRT, except where prohibited, and in accordance with applicable law and practice.
      11. (ii) Measures. In order to meet the objective under paragraph (f)(9)(i) of this section, an eligible hospital or CAH must choose from measures 1 through 4 (as described in paragraphs (f)(9)(ii)(A) through (D) of this section).
        (A) Immunization registry reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization data.
        (B) Syndromic surveillance reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data.
        (C) Specialized registry reporting measure. The eligible hospital or CAH is in active engagement to submit data to a specialized registry.
        (D) Electronic reportable laboratory result reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.
      12. (iii) Exclusions for non-applicable objectives. Subject to the provisions of paragraph (c)(2) of this section—
        (A) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the immunization measure specified in paragraph (f)(9)(ii)(A) of this section if the eligible hospital or CAH—
        (1) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.
        (2) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.
        (3) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data from the eligible hospital or CAH at the start of the EHR reporting period.
        (B) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance measure specified in paragraph (f)(9)(ii)(B) of this section if the eligible hospital or CAH—
        (1) Does not have an emergency or urgent care department.
        (2) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data from eligible hospitals or CAHs in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.
        (3) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs at the start of the EHR reporting period.
        (C) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the specialized registry measure specified in paragraph (f)(9)(ii)(C) of this section if the eligible hospital or CAH—
        (1) Does not diagnose or directly treat any disease associated with or collect relevant data is required by a specialized registry for which the eligible hospital or CAH is eligible in their jurisdiction.
        (2) Operates in a jurisdiction for which no specialized registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period; or
        (3) Operates in a jurisdiction where no specialized registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions at the beginning of the EHR reporting period.
        (D) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (f)(9)(ii)(D) of this section if the eligible hospital or CAH—
        (1) Does not perform or order laboratory tests that are reportable in the eligible hospital's or CAH's jurisdiction during the EHR reporting period.
        (2) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.
        (3) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from eligible hospitals or CAHs at the start of the EHR reporting period.

[80 FR 62943, Oct. 16, 2015, as amended at 81 FR 11449, Mar. 4, 2016; 81 FR 79882, Nov. 14, 2016; 82 FR 38517, Aug. 14, 2017]