42 C.F.R. § 495.40
(a) Demonstration by EPs. An EP must demonstrate that he or she satisfies each of the applicable objectives and associated measures under § 495.20, § 495.22 or § 495.24, supports information exchange and the prevention of health information blocking, and engages in activities related to supporting providers with the performance of CEHRT:
(1) For CY 2011—(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid EP, in a manner specified by the State), that during the EHR reporting period, the EP—
(2) For CY 2012 and subsequent years—
(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid EP, in a manner specified by the State) that during the EHR reporting period, the EP—
(H) Supporting providers with the performance of CEHRT (SPPC). To engage in activities related to supporting providers with the performance of CEHRT, the EP—
(1) Must attest that he or she:
(i) Acknowledges the requirement to cooperate in good faith with ONC direct review of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC direct review is received; and
(ii) If requested, cooperated in good faith with ONC direct review of his or her health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating its capabilities as implemented and used by the EP in the field.
(2) Optionally, may also attest that he or she:
(i) Acknowledges the option to cooperate in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC-ACB surveillance is received; and
(ii) If requested, cooperated in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating capabilities as implemented and used by the EP in the field.
(I) Support for health information exchange and the prevention of information blocking. For an EHR reporting period in CY 2017 and subsequent years, the EP must attest that he or she—
(1) Did not knowingly and willfully take action (such as to disable functionality) to limit or restrict the compatibility or interoperability of certified EHR technology.
(2) Implemented technologies, standards, policies, practices, and agreements reasonably calculated to ensure, to the greatest extent practicable and permitted by law, that the certified EHR technology was, at all relevant times—
(i) Connected in accordance with applicable law;
(ii) Compliant with all standards applicable to the exchange of information, including the standards, implementation specifications, and certification criteria adopted at 45 CFR part 170;
(iii) Implemented in a manner that allowed for timely access by patients to their electronic health information; and
(iv) Implemented in a manner that allowed for the timely, secure, and trusted bi-directional exchange of structured electronic health information with other health care providers (as defined by 42 U.S.C. 300jj(3)), including unaffiliated providers, and with disparate certified EHR technology and vendors.
(3) Responded in good faith and in a timely manner to requests to retrieve or exchange electronic health information, including from patients, health care providers (as defined by 42 U.S.C. 300jj(3)), and other persons, regardless of the requestor's affiliation or technology vendor.
(v) Exception for Medicare EPs for 2012 and 2013—Participation in the Physician Quality Reporting System-Medicare EHR Incentive Pilot. To satisfy the clinical quality measure reporting requirements of meaningful use, aside from attestation, an EP participating in the Physician Quality Reporting System may also participate in the Physician Quality Reporting System-Medicare EHR Incentive Pilot through one of the following methods:
(b) Demonstration by eligible hospitals and CAHs. An eligible hospital or CAH must demonstrate that it satisfies each of the applicable objectives and associated measures under § 495.20, § 495.22, or § 495.24; supports health information exchange and the prevention of health information blocking or does not take actions to limit or restrict the compatibility or interoperability of CEHRT, as applicable for the EHR reporting period; and engages in activities related to supporting providers with the performance of CEHRT.
(1) For FY 2011—
(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid eligible hospital, in a manner specified by the State), that during the EHR reporting period, the eligible hospital or CAH—
(2) For FY 2012 and subsequent years—
(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid eligible hospital, in a manner specified by the State), that during the EHR reporting period, the eligible hospital or CAH—
(F) For CY 2017 and CY 2018:
(1) For an eligible hospital or CAH attesting to CMS: An eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year may satisfy either the objectives and measures specified in § 495.22(f) for meaningful use or the objectives and measures specified in § 495.24(c) for meaningful use; an eligible hospital or CAH that has never successfully demonstrated it is a meaningful EHR user in any prior year must satisfy the objectives and measures specified in § 495.22(f) for meaningful use.
(2) For an eligible hospital or CAH attesting to a State for the Medicaid EHR Incentive Program: An eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year may satisfy either the objectives and measures specified in § 495.22(e) for meaningful use or the objectives and measures specified in § 495.24(d) for meaningful use; an eligible hospital or CAH that has never successfully demonstrated it is a meaningful EHR user in any prior year must satisfy the objectives and measures specified in § 495.22(e) for meaningful use.
(G) For CY 2019:
(1) For an eligible hospital or CAH attesting to CMS, satisfied the required objectives and associated measures under § 495.24(c) for meaningful use.
(2) For an eligible hospital or CAH attesting to a State for the Medicaid EHR Incentive Program, satisfied the required objectives and associated measures under § 495.24(d) for meaningful use.
(I) Supporting providers with the performance of CEHRT (SPPC). To engage in activities related to supporting providers with the performance of CEHRT, the eligible hospital or CAH—
(1) Must attest that it:
(i) Acknowledges the requirement to cooperate in good faith with ONC direct review of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC direct review is received; and
(ii) If requested, cooperated in good faith with ONC direct review of its health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating its capabilities as implemented and used by the eligible hospital or CAH in the field.
(2) Optionally, may attest that it:
(i) Acknowledges the option to cooperate in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC-ACB surveillance is received; and
(ii) If requested, cooperated in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating its capabilities as implemented and used by the eligible hospital or CAH in the field.
(J) Support for health information exchange and the prevention of information blocking. For an EHR reporting period in CYs 2017 through 2021, the eligible hospital or CAH must attest that it—
(1) Did not knowingly and willfully take action (such as to disable functionality) to limit or restrict the compatibility or interoperability of certified EHR technology.
(2) Implemented technologies, standards, policies, practices, and agreements reasonably calculated to ensure, to the greatest extent practicable and permitted by law, that the certified EHR technology was, at all relevant times—
(i) Connected in accordance with applicable law;
(ii) Compliant with all standards applicable to the exchange of information, including the standards, implementation specifications, and certification criteria adopted at 45 CFR part 170;
(iii) Implemented in a manner that allowed for timely access by patients to their electronic health information; and
(iv) Implemented in a manner that allowed for the timely, secure, and trusted bi-directional exchange of structured electronic health information with other health care providers (as defined by 42 U.S.C. 300jj(3)), including unaffiliated providers, and with disparate certified EHR technology and vendors.
(3) Responded in good faith and in a timely manner to requests to retrieve or exchange electronic health information, including from patients, health care providers (as defined by 42 U.S.C. 300jj(3)), and other persons, regardless of the requestor's affiliation or technology vendor.
(v) Exception for Medicare EPs for 2012 and 2013—Participation in the Physician Quality Reporting System-Medicare EHR Incentive Pilot. To satisfy the clinical quality measure reporting requirements of meaningful use, aside from attestation, an EP participating in the Physician Quality Reporting System may also participate in the Physician Quality Reporting System-Medicare EHR Incentive Pilot through one of the following methods:
(vii) Exception for dual-eligible eligible hospitals and CAHs beginning in CY 2019.
(c) Review of meaningful use.
(2) All EPs, eligible hospitals, and CAHs must keep documentation supporting their demonstration of meaningful use for 6 years.
Editorial Note:For Federal Register citations affecting § 495.40, see the List of CFR Sections Affected, which appears in the Finding Aids section of the printed volume and at www.govinfo.gov.
[75 FR 44565, July 28, 2010. Redesignated at 80 FR 62943, Oct. 16, 2015]