Trump Administration Relaxes Security and Transparency Requirements for Hospital EHR Software
Federal health officials eliminated or revised 21 certification criteria for electronic health record systems, proceeding over commenter objections about data protection and AI oversight.
The Trump administration has removed or substantially revised security, privacy, and transparency standards governing electronic health record software used by hospitals and medical practices nationwide.
The Office of the National Coordinator for Health IT released a final rule on Monday eliminating 14 of the 60 certification criteria that EHR vendors must meet, while substantially revising seven additional requirements. The changes affect major healthcare technology companies including Epic and Oracle, whose systems are used across thousands of hospitals and medical practices.
Policy Rationale and Stakeholder Concerns
The policy shift, designated as the HTI-5 Health Data Interoperability rule, advances the administration's stated goal of streamlining government regulations and supporting development of new technologies in the healthcare sector.
The administration eliminated or revised certification requirements over the objections of commenters who raised concerns during the rulemaking process. These commenters warned that the changes would undermine the security and privacy of sensitive health information, along with efforts to ensure the safety of products that rely on artificial intelligence.
The certification criteria being eliminated or revised have historically served as baseline standards that EHR vendors must meet before their products can be certified for use in clinical environments.
Potential Implications
The relaxed standards may affect the pace at which EHR vendors can roll out software updates and new features, as well as the regulatory barriers vendors face in bringing new capabilities to market, including AI-powered clinical tools.
Questions remain about how the changes will affect patient data protection and transparency as healthcare organizations implement systems certified under the revised criteria, particularly as AI applications become more prevalent in clinical decision-making.
Sources
Companies in this article
Google Search
Follow Health AI Central on Google
Choose Health AI Central as a preferred source, and Google is more likely to show our reporting in Top Stories.
Reporting & accountability
How we maintain accuracy
Health AI Central separates reported facts, analysis, and public-source data. Readers can review our standards, request a correction, or consult the relevant research methodology before relying on a claim.