Information blocking rules are intended to promote the access, exchange, and use of electronic health information across the health care system — improving interoperability, care coordination, and patient access to their own health data. These provisions are established under the 21st Century Cures Act and are enforced by the Office of the National Coordinator for Health Information Technology (ONC) and the Health and Human Services Office of Inspector General (OIG).
What is information blocking?
Information blocking is a practice that interferes with, prevents, or materially discourages the access, exchange, or use of EHI. For health care providers specifically, information blocking occurs when a provider engages in a practice they know is unreasonable and is likely to interfere with access, exchange, or use of EHI.
Examples relevant to ophthalmology practices include:
- Charging excessive fees to make health information available, beyond levels permitted under the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and state law
- Placing extreme limits on how long a requester has access to information — for example, using a one-time access code that expires quickly
- Refusing to transfer EHI to a patient-selected third party without a valid reason under the rule's exceptions
ONC has defined "reasonable and necessary" exceptions under which a provider would not be considered to have committed information blocking — including exceptions related to preventing patient harm, protecting privacy, maintaining security, addressing infeasible requests, and managing health IT performance.
Enforcement and penalties
Enforcement for health care providers takes the form of "disincentives" rather than civil monetary penalties. (Civil monetary penalties of up to $1 million per violation apply to health IT developers, health information networks, and health information exchanges — not to providers.) For physicians who are MIPS-eligible clinicians, the disincentive is a zero score in the Promoting Interoperability (PI) performance category. Because PI currently accounts for 25% of the total MIPS score, a zero in this category caps a clinician's maximum achievable score at 75 — likely resulting in a negative payment adjustment under current MIPS performance thresholds. These disincentives took effect July 31, 2024.
Importantly, if an individual physician commits information blocking, the disincentive applies only to that individual — even if they report MIPS as part of a group practice.
CMS and ONC have indicated that they will continue to explore additional disincentives for health care providers through future rulemaking, so the enforcement landscape may evolve.