HHS finalizes rule to ease health IT certification requirements but punts info blocking proposals

healthcare software
In the final rule, ONC removed 14 out of 60 certification criteria and revised seven criteria. (Getty Images)

HHS' health information technology arm finalized a rule that streamlines the health IT certification program, projecting to save billions in compliance costs.

The deregulatory rule is an explicit effort to carry out President Donald Trump’s executive order 14192 "Unleashing Prosperity Through Deregulation," according to the Office of the National Coordinator for Health Information Technology (ONC) within HHS.

The rule, called Health Data, Technology, and Interoperability: ONC Deregulatory Actions to Unleash Prosperity (HTI-5), is projected to save more than $1.5 billion in regulatory costs, according to ONC.

As part of the ONC Health IT Certification Program, developers must certify that their health IT modules conform to certain functional requirements, known as "certification criteria." 

The HTI-5 final rule significantly reduces administrative burdens for health IT developers participating in the ONC health IT certification program, ONC officials said.

"American doctors and patients need better technology, not more Washington paperwork," said HHS Secretary Robert F. Kennedy, Jr. in a statement. "The Trump Administration is eliminating unnecessary regulations that cost more than $1.5 billion and hold back innovation. We are freeing America’s health technology innovators to build better tools, lower costs, and help doctors spend more time caring for patients."

HHS estimates the changes to the certification program will save $1.55 billion in present-value regulatory costs and $108.1 million in annualized net savings beginning in 2027.

"The practical effect is to free up resources for developers. Instead of spending that time and money complying with requirements that are no longer necessary, developers can focus on innovative solutions that advance interoperability, automation, and ultimately better experiences for patients and clinicians," Tom Keane, National Coordinator for Health IT, told reporters during a press briefing Monday.

Keane said the HTI-5 rule is not the end of ONC’s deregulatory work.

"It is one step in our broader effort to improve the access, exchange, and use of electronic health information to address chronic disease, increase market competition, lower healthcare costs, and create the foundation for the next generation of health technology," Keane said.

The proposed rule issued in December pitched changes to information blocking regulations, including the definition of "access" and "use" to allow autonomous AI to retrieve and share health data. ONC also proposed to remove or revise many information blocking exceptions.  

ONC left the information blocking proposals undecided for a later rule. HHS said comments submitted in response to the HTI-5 proposed rule’s information blocking proposals "remain under consideration."

As outlined in the 2026 Unified Agenda, ONC plans to issue a draft HTI-6 rule that would include proposals for standards adoption, certification of health IT to support expanded uses of APIs and updates to information blocking regulations.

"We expect that proposed rule to look at standards that further advance interoperability in electronic health information sharing, expanded use of APIs and successor technologies through the certification program, and more targeted conditions of certification. There is also important work continuing on information blocking," Keane said.

The final HTI-5 rule retains most of the core objectives from the December 2025 proposal, but ONC significantly scaled back its approach, stopping short of the sweeping overhaul of the health IT certification program it initially proposed. In the draft rule, ONC proposed to eliminate 34 out of 60 certification requirements for electronic health records and revise seven certification requirements. The proposal (PDF) would have altered nearly 70% of its existing requirements. 

In the final rule, ONC removed 14 out of 60 certification criteria and revised seven criteria. ONC retained and made no changes to 39 certification criteria, which include the new and revised criteria that were adopted in the Health Data, Technology, and Interoperability: Electronic Prior Authorization and Real-Time Prescription Benefit (HTI-4) Final Rule.

"Through HTI-5, we have taken decisive action to significantly lower the administrative compliance burden for developers so that they can spend more of their time developing solutions that improve interoperability, automation, and better healthcare for Americans," said Tom Keane, M.D., National Coordinator for Health IT, in a statement.

The HTI-5 final rule also signals ONC's efforts to shift its certification program toward Fast Healthcare Interoperability Resources (FHIR)-based application programming interfaces (API). "This approach is consistent with the Cures Act’s reference to “successor technology or standards” within the API Condition of Certification. These requirements will support creative AI-enabled interoperability solutions," ONC officials said.

According to ONC, the HTI-5 final rule reduces or removes certain long-standing, functionality-oriented and document-based certification criteria. These certification criteria include capabilities that are already well established in health IT products in the markets or impede innovation.

ONC finalized proposals to make conforming edits for several Conditions and Maintenance of Certification requirements, including the "Assurances" (§ 170.402), "Application Programming Interfaces" (§ 170.404), and "Attestations" (§ 170.406) Conditions and Maintenance of Certification requirements, according to a HHS fact sheet.

In addition, the HTI-5 final rule scaled back "Real World Testing" Condition and Maintenance of Certification requirements (§ 170.405) with deregulatory actions for real world testing plans, real world testing results, and the use of the Standards Version Advancement Process.

The "Insights" Conditions and Maintenance of Certification reporting requirements (§ 170.407) were reduced generally consistent with the enforcement discretion issued on April 29, 2025, except that the "use of FHIR bulk data access" measure was also retained.

The final rule also moves forward with removing the AI model-card transparency requirements for decision support interventions (established under HTI-1), mirroring the intent of the draft to reduce documentation overhead.

ONC says it intends to continue to address chronic disease, increase market competition and lower healthcare costs by improving the access, exchange and use of electronic health information (EHI). The agency plans to put forth proposals in the future to advance interoperability and EHI sharing through standards adoption; additional updates to the Certification Program to support expanded uses of application programming interfaces (APIs) and potential successor technologies; and targeted conditions of certification.

Michael Lipinski, division director, regulatory affairs division, Office of Programs and Implementation at ONC, told reporters that the information blocking proposals that were left out of the final rule could still move forward through one of two paths. ONC could finalize the existing proposals in a separate final rule, using the original proposal and comments already received. Or, the agency could start a new rulemaking process, potentially revising the proposals based on those comments, seeking another round of public feedback and deciding later whether to finalize them.

Keane told reporters HHS’ commitment to information blocking enforcement "has not changed."

"HHS remains committed to addressing and eliminating information blocking in healthcare. We are working closely with our colleagues at OIG to hold those who block patient information accountable and to prevent future violations. A successful certification program should establish the floor healthcare needs without becoming the ceiling innovation keeps hitting. HTI-5 is an important step in that direction," he said.

The rule is scheduled for publication in the Federal Register on Oct. 28. Many of the provisions in the rule take effect 60 days after publication, while certain changes take effect Jan. 1, 2027. A PDF of the unpublished rule can be found here.

Editor's Note: This story was updated following an ONC press briefing Monday afternoon.