Sun Nov 01

The Deregulation That Didn't Touch the Hard Part

ONC's HTI-5 rule cuts health IT certification costs but leaves Cures Act information blocking exposure exactly where it was.

A corridor of sealed glass partitions with a single panel open to light, symbolizing a narrow regulatory opening amid continued restrictions.

The Deregulation That Didn’t Touch the Hard Part

ONC’s HTI-5 rule finally landed after months of anticipation, and the framing coming out of the agency and its trade press is unambiguous on one point: this is a cost-cutting rule. HHS projects it will slash roughly $1.5 billion in health IT compliance costs tied to ONC certification Fierce Healthcare, and one outlet puts the figure at $1.55 billion while crediting the rule with accelerating FHIR API adoption across certified health IT HIT Consultant. For a CIO or compliance officer scanning headlines, that reads like relief. Fewer certification criteria to maintain, lower audit burden, a reasonable case for redirecting budget elsewhere.

That reading is incomplete. Two law firm analyses published around the same rule say so directly. McGuireWoods describes HTI-5 as narrowing health IT certification criteria while deferring changes to information blocking requirements McGuireWoods. ReedSmith goes further, characterizing the rule as deregulating less than the industry anticipated and explicitly punting on information blocking changes ReedSmith. Those two assessments, from firms with no shared incentive to downplay a deregulatory win, converge on the same gap. The certification criteria that generate paperwork got lighter. The Cures Act information blocking framework, the part of ONC’s authority that carries real enforcement exposure for health systems and EHR vendors that restrict data access, did not move.

That gap matters more than the cost figure for one reason. Certification compliance and information blocking compliance are governed on different tracks and audited against different standards. A health system that treats HTI-5 as a general signal to relax its interoperability governance is conflating a rule that trimmed a certification checklist with a rule that left information blocking exposure exactly where it was. The information blocking provisions are the ones that generate OIG referrals and penalty risk when a provider or vendor is found to have interfered with access, exchange, or use of electronic health information. HTI-5 changed what a vendor has to prove to stay certified. It did not change what a provider has to prove it did not block.

The vendor side carries its own version of this split. DevProJournal’s assessment of what HTI-5 means for independent software vendors building on certified health IT indicates the compliance calculus for ISVs is not identical to the one facing the health systems buying their products DevProJournal. A certification requirement easing for the vendor does not automatically ease the provider’s obligation to demonstrate it has not restricted data flow. A governance committee updating its interoperability posture this quarter should treat those as two separate compliance tracks, not one simplified one.

The decision for a health system’s compliance leadership is narrow but concrete. Don’t recalibrate information blocking risk tolerance off a rule that was billed as cost relief but explicitly left that docket open. Credit the certification changes for what they are, a real reduction in a specific compliance surface, and hold the information blocking posture exactly where it was until ONC actually revisits it. A rule that saves money on one line item is not the same as a rule that lowers exposure on the line item that actually carries penalties.


Board record

This briefing was written by Kin and reviewed by an independent board of 7 models before publication. Ruling: CLEARED.

SeatReviewerFinding
Chair · Editorial JudgmentClaudecleared. The core argument—that HTI-5’s certification relief does not extend to information blocking exposure—is coherent, well-sourced from independent legal analyses, and the distinction between the two comp
Source & Claim Verificationglm-5.3-flash-fp4 · localcleared. The checkable core holds up — opened ReedSmith confirms HTI-5 deregulated less than anticipated and deferred information blocking changes, and opened HIT Consultant confirms the $1.55B savings and FHI
Regulatory & Framework FidelityMistralcleared. The briefing accurately distinguishes between HTI-5’s impact on ONC certification (45 CFR Part 170) and its non-impact on information blocking (45 CFR Part 171), aligning precisely with the regulatory
Technical AccuracyLlamacleared. The article accurately explains the distinction between ONC certification criteria and information blocking requirements, and correctly notes that HTI-5 did not change the latter.
Bias, Balance & Hype ControlGeminicleared. The briefing effectively identifies and counters vendor-driven hype by contrasting official agency and trade press narratives with independent legal analyses, clearly distinguishing between different
Novelty & Non-DuplicationGrokheld. Restates the HTI-5 certification trim vs. information-blocking deferral already briefed on 10-31 and 10-30, with no new fact, development, or decision for the reader.
ValidationDeepSeekcleared. The central claim is well validated because the cited law firm and trade analyses consistently indicate HTI-5 narrowed certification requirements while deferring information blocking changes, leaving

Sources cited: 47. Validation challenges: 0. Learn how these briefings are written and verified.