Subpart A - General Provisions

§ 495.2 Basis and purpose.

This part implements the following:

(a) Section 1848(o) of the Act by establishing payment incentives under Medicare Part B for eligible professionals who adopt and meaningfully use certified electronic health record (EHR) technology.

(b) Section 1853(1) of the Act to provide incentive payments to Medicare Advantage organizations for certain affiliated professionals who meaningfully use certified EHR technology and meet certain other requirements.

(c) Section 1886(n) of the Act by establishing incentives payments for the meaningful use of certified EHR technology by subsection (d) hospitals, as defined under section 1886(d)(1)(B) of the Act, participating in the Medicare FFS program.

(d) Section 1814(l) of the Act to provide an incentive payment to critical access hospitals that meaningfully use certified EHR technology based on the hospitals' reasonable costs.

(e) Section 1853(m) of the Act to provide incentive payments to MA organizations for certain affiliated hospitals that meaningfully use certified EHR technology.

(f) Sections 1903(a)(3)(F) and 1903(t) of the Act to provide 100 percent Federal financial participation (FFP) to States for incentive payments to certain eligible providers participating in the Medicaid program to purchase, implement, and operate (including support services and training for staff) certified EHR technology and 90 percent FFP for State administrative expenses related to such incentive payments.

(g) Sections 1848(a)(7), 1853(l)(4), 1886(b)(3)(B)(ix)(I), and 1853(m)(4) of the Act, providing for payment reductions for inpatient services furnished on or after October 1, 2014 to Medicare beneficiaries by hospitals that are not meaningful users of certified EHR technology, and for covered professional services furnished on or after January 1, 2015 to Medicare beneficiaries by certain professionals who are not meaningful users of certified EHR technology.

§ 495.4 Definitions.

In this part, unless otherwise indicated -

Ambulatory surgical center-based EP means an EP who furnishes 75 percent or more of his or her covered professional services in sites of service identified by the codes used in the HIPAA standard transaction as an ASC setting in the calendar year that is 2 years before the payment adjustment year.

API stands for application programming interface.

Certified electronic health record technology (CEHRT) means the following:

(1) For any Federal fiscal year or calendar year before 2018, EHR technology (which could include multiple technologies) certified under the ONC Health IT Certification Program that meets one of the following:

(i) The 2014 Edition Base EHR definition (as defined at 45 CFR 170.102) and has been certified to the certification criteria that are necessary to be a Meaningful EHR User (as defined in this section), including the applicable measure calculation certification criterion at 45 CFR 170.314(g)(1) or (2) for all certification criteria that support a meaningful use objective with a percentage-based measure.

(ii) Certification to -

(A) The following certification criteria:

(1) CPOE at -

(2)

(i) Record demographics at 45 CFR 170.314(a)(3); or

(3)

(i) Problem list at 45 CFR 170.314(a)(5); or

(4)

(i) Medication list at 45 CFR 170.314(a)(6); or

(5)

(i) Medication allergy list 45 CFR 170.314(a)(7); or

(6)

(i) Clinical decision support at 45 CFR 170.314(a)(8); or

(B) Clinical quality measures at -

(3) Clinical quality measure certification criteria that support the calculation and reporting of clinical quality measures at 45 CFR 170.314(c)(2) and (3); or 45 CFR 170.315(c)(3)(i) and (ii); and can be electronically accepted by CMS if the provider is submitting electronically.

(D) The certification criteria that are necessary to be a Meaningful EHR User (as defined in this section), including the applicable measure calculation certification criterion at 45 CFR 170.314(g)(1) or (2) or 45 CFR 170.315(g)(1) or (2) for all certification criteria that support a meaningful use objective with a percentage-based measure.

(iii) The definition for 2019 and subsequent years specified in paragraph (2) of this definition.

(2) For 2019 and subsequent years, EHR technology (which could include multiple technologies) certified under the ONC Health IT Certification Program that meets the 2015 Edition Base EHR definition (as defined at 45 CFR 170.102) and has been certified to the 2015 Edition health IT certification criteria -

(i) At 45 CFR 170.315(a)(12) (family health history) and 45 CFR 170.315(e)(3) (patient health information capture); and

(ii) Necessary to be a Meaningful EHR User (as defined in this section), including the following:

(A) The applicable measure calculation certification criterion at 45 CFR 170.315(g)(1) or (2) for all certification criteria that support a meaningful use objective with a percentage-based measure.

(B) Clinical quality measure certification criteria that support the calculation and reporting of clinical quality measures at 45 CFR 170.315(c)(2) and (c)(3)(i) and (ii), and can be electronically accepted by CMS.

Critical access hospital (CAH) means a facility that has been certified as a critical access hospital under section 1820(e) of the Act and for which Medicare payment is made under section 1814(l) of the Act for inpatient services and under section 1834(g) of the Act for outpatient services.

EHR reporting period. Except with respect to payment adjustment years, EHR reporting period means either of the following:

(1) For an eligible EP -

(i) The following are applicable before 2015:

(A) For the payment year in which the EP is first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within the calendar year;

(B) Except as specified in paragraphs (1)(iii) and (1)(iv) of this definition, for the subsequent payment years following the payment year in which the EP first successfully demonstrates he or she is a meaningful EHR user, the calendar year.

(C) For an EP seeking to demonstrate he or she is a meaningful EHR user for the Medicare EHR incentive program for CY 2014, any of the following 3-month periods:

(1) January 1, 2014 through March 31, 2014.

(2) April 1, 2014 through June 30, 2014.

(3) July 1, 2014 through September 30, 2014.

(4) October 1, 2014 through December 31, 2014.

(D) For an EP seeking to demonstrate he or she is a meaningful EHR user for the Medicaid EHR incentive program for CY 2014 any continuous 90-day period within CY 2014.

(ii) The following are applicable for 2015, 2016, 2017, and 2018:

(A) For the CY 2015 payment year, any continuous 90-day period within CY 2015.

(B) For the CY 2016 payment year:

(1) For the EP first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within CY 2016.

(2) For the EP who has successfully demonstrated he or she is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2016.

(C) For the CY 2017 payment year under the Medicaid EHR Incentive Program:

(1) For the EP first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within CY 2017.

(2) For the EP who has successfully demonstrated he or she is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2017.

(3) For the EP demonstrating the Stage 3 objectives and measures at § 495.24, any continuous 90-day period within CY 2017.

(D) For the CY 2018 payment year under the Medicaid EHR Incentive Program:

(1) For the EP first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within CY 2018.

(2) For the EP who has successfully demonstrated he or she is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2018.

(iii) For the CY 2019 payment year under the Medicaid Promoting Interoperability Program:

(A) For the EP first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within CY 2019.

(B) For the EP who has successfully demonstrated he or she is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2019.

(iv) For the CY 2020 payment year under the Medicaid Promoting Interoperability Program:

(A) For the EP first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within CY 2020.

(B) For the EP who has successfully demonstrated he or she is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2020.

(v) Under the Medicaid Promoting Interoperability Program, for the CY 2021 payment year:

(A) For the EP first demonstrating he or she is a meaningful EHR user, any continuous 90-day period within CY 2021 that ends before October 31, 2021, or that ends before an earlier date in CY 2021 that is specified by the state and approved by CMS in the State Medicaid HIT plan described at § 495.332.

(B) For the EP who has successfully demonstrated he or she is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2021 that ends before October 31, 2021, or that ends before an earlier date in CY 2021 that is specified by the state and approved by CMS in the State Medicaid HIT plan described at § 495.332.

(2) For an eligible hospital or CAH -

(i) The following are applicable before 2015:

(A) For the payment year in which the eligible hospital or CAH is first demonstrating it is a meaningful EHR user, any continuous 90-day period within the Federal fiscal year;

(B) Except as specified in paragraph (2)(iii) of this definition, for the subsequent payment years following the payment year in which the eligible hospital or CAH first successfully demonstrates it is a meaningful EHR user, the Federal fiscal year.

(C) For an eligible hospital or CAH seeking to demonstrate it is a meaningful EHR user for FY 2014, any of the following 3-month periods:

(1) October 1, 2013 through December 31, 2013.

(2) January 1, 2014 through March 31, 2014.

(3) April 1, 2014 through June 30, 2014.

(4) July 1, 2014 through September 30, 2014.

(ii) The following are applicable for 2015, 2016, 2017, and 2018:

(A) For the FY 2015 payment year, any continuous 90-day period within the period beginning on October 1, 2014 and ending on December 31, 2015.

(B) For the FY 2016 payment year as follows:

(1) For the eligible hospital or CAH first demonstrating it is a meaningful EHR user, any continuous 90-day period within CY 2016.

(2) For the eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2016.

(C) For the FY 2017 payment year as follows:

(1) Under the Medicaid EHR Incentive Program:

(i) For the eligible hospital or CAH first demonstrating it is a meaningful EHR user, any continuous 90-day period within CY 2017.

(ii) For the eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2017.

(iii) For the eligible hospital or CAH demonstrating the Stage 3 objectives and measures at § 495.24, any continuous 90-day period within CY 2017.

(2) Under the Medicare EHR Incentive Program, for a Puerto Rico eligible hospital, any continuous 14-day period within CY 2017.

(D) For the FY 2018 payment year as follows:

(1) Under the Medicaid Promoting Interoperability Program:

(i) For the eligible hospital or CAH first demonstrating it is a meaningful EHR user, any continuous 90-day period within CY 2018.

(ii) For the eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2018.

(2) Under the Medicare Promoting Interoperability Program, for a Puerto Rico eligible hospital, any continuous 90-day period within CY 2018.

(iii) For the FY 2019 payment year as follows:

(A) Under the Medicaid Promoting Interoperability Program:

(1) For the eligible hospital or CAH first demonstrating it is a meaningful EHR user, any continuous 90-day period within CY 2019.

(2) For the eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2019.

(B) Under the Medicare Promoting Interoperability Program, for a Puerto Rico eligible hospital, any continuous 90-day period within CY 2019.

(iv) For the FY 2020 payment year as follows:

(A) Under the Medicaid Promoting Interoperability Program:

(1) For the eligible hospital or CAH first demonstrating it is a meaningful EHR user, any continuous 90-day period within CY 2020.

(2) For the eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year, any continuous 90-day period within CY 2020.

(B) Under the Medicare Promoting Interoperability Program, for a Puerto Rico eligible hospital, any continuous 90-day period within CY 2020.

(v) For the FY 2021 payment year as follows: Under the Medicare Promoting Interoperability Program, for a Puerto Rico eligible hospital, any continuous 90-day period within CY 2021.

EHR reporting period for a payment adjustment year. For a payment adjustment year, the EHR reporting period means the following:

(1) For an EP -

(i) The following are applicable before 2015:

(A)

(1) Except as provided in paragraphs (1)(i)(A)(2), (1)(i)(B), and (1)(i)(C) of this definition, the calendar year that is 2 years before the payment adjustment year.

(2) The special EHR reporting period for CY 2014 (specified in paragraph (1)(i)(C) of this definition, as applicable) of the definition of “EHR Reporting Period” that occurs within the calendar year that is 2 years before the payment adjustment year and is only for EHR reporting periods in CY 2014.

(B) If an EP is demonstrating he or she is a meaningful EHR user for the first time in the calendar year, that is 2 years before the payment adjustment year, then any continuous 90-day period within such (2 years prior) calendar year.

(C)

(1) If in the calendar year that is 2 years before the payment adjustment year and in all prior calendar years, the EP has not successfully demonstrated he or she is a meaningful EHR user, then any continuous 90-day period that both begins in the calendar year 1 year before the payment adjustment year and ends at least 3 months before the end of such prior year.

(2) Under this exception, the provider must successfully register for and attest to meaningful use no later than the date October 1 of the year before the payment adjustment year.

(ii) The following are applicable for 2015, 2016, and 2017:

(A) In 2015 as follows:

(1) If an EP has not successfully demonstrated he or she is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2015 and applies for the CY 2016 and 2017 payment adjustment years.

(2) If in a prior year an EP has successfully demonstrated he or she is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2015 and applies for the CY 2017 payment adjustment year.

(B) In 2016 as follows:

(1) If an EP has not successfully demonstrated he or she is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2016 and applies for the CY 2017 and 2018 payment adjustment years. For the CY 2017 payment adjustment year, the EHR reporting period must end before and the EP must successfully register for and attest to meaningful use no later than October 1, 2016.

(2) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2016 and applies for the FY 2018 payment adjustment year.

(C) In 2017 as follows:

(1) If an EP has not successfully demonstrated he or she is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2017 and applies for the CY 2018 payment adjustment year. For the CY 2018 payment adjustment year, the EHR reporting period must end before and the EP must successfully register for and attest to meaningful use no later than October 1, 2017.

(2) [Reserved]

(2) For an eligible hospital -

(i) The following are applicable before 2015:

(A)

(1) Except as provided in paragraphs (2)(i)(A)(2), (2)(i)(B), and (2)(i)(C) of this definition, the Federal fiscal year that is 2 years before the payment adjustment year.

(2) The special EHR reporting period for FY 2014 (defined in paragraph (2)(i)(C) of the definition “EHR Reporting Period”) that occurs within the fiscal year that is 2 years before the payment adjustment year and is only for EHR reporting periods in fiscal year 2014.

(B) If an eligible hospital is demonstrating it is a meaningful EHR user for the first time in the Federal fiscal year that is 2 years before the payment adjustment year, then any continuous 90-day period within such (2 years prior) Federal fiscal year.

(C)

(1) If in the Federal fiscal year that is 2 years before the payment adjustment year and for all prior Federal fiscal years the eligible hospital has not successfully demonstrated it is a meaningful EHR user, then any continuous 90-day period that both begins in the Federal fiscal year that is 1 year before the payment adjustment year and ends at least 3 months before the end of such prior Federal fiscal year.

(2) Under this exception, the eligible hospital must successfully register for and attest to meaningful use no later than July 1 of the year before the payment adjustment year.

(ii) The following are applicable for 2015, 2016, 2017, and 2018:

(A) In 2015 as follows:

(1) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within the period beginning on October 1, 2014 and ending on December 31, 2015 and applies for the FY 2016 and 2017 payment adjustment years.

(2) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within the period beginning on October 1, 2014 and ending on December 31, 2015 and applies for the FY 2017 payment adjustment year.

(B) In 2016 as follows:

(1) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2016 and 2017 applies for the FY 2017 and 2018 payment adjustment years. For the FY 2017 payment adjustment year, the EHR reporting period must end before and the eligible hospital must successfully register for and attest to meaningful use no later than October 1, 2016.

(2) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2016 and applies for the FY 2018 payment adjustment year.

(C) In 2017 as follows:

(1) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2017 and applies for the FY 2018 and 2019 payment adjustment years. For the FY 2018 payment adjustment year, the EHR reporting period must end before and the eligible hospital must successfully register for and attest to meaningful use no later than October 1, 2017.

(2) If an eligible hospital is demonstrating Stage 3 of meaningful use under § 495.24, the EHR reporting period is any continuous 90-day period within CY 2017 and applies for the FY 2019 payment adjustment year.

(3) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2017 and applies for the FY 2019 payment adjustment year.

(D) In 2018 as follows:

(1) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2018 and applies for the FY 2019 and 2020 payment adjustment years. For the FY 2019 payment adjustment year, the EHR reporting period must end before and the eligible hospital must successfully register for and attest to meaningful use no later than October 1, 2018.

(2) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2018 and applies for the FY 2020 payment adjustment year.

(iii) The following are applicable for 2019:

(A) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2019 and applies for the FY 2020 and FY 2021 payment adjustment years.

(B) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2019 and applies for the FY 2021 payment adjustment year.

(iv) The following are applicable for 2020:

(A) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2020 and applies for the FY 2021 and 2022 payment adjustment years. For the FY 2021 payment adjustment year, the EHR reporting period must end before and the eligible hospital must successfully register for and attest to meaningful use no later than October 1, 2020.

(B) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2020 and applies for the FY 2022 payment adjustment year.

(v) The following are applicable for 2021:

(A) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2021 and applies for the FY 2022 and 2023 payment adjustment years. For the FY 2022 payment adjustment year, the EHR reporting period must end before and the eligible hospital must successfully register for and attest to meaningful use no later than October 1, 2021.

(B) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2021 and applies for the FY 2023 payment adjustment year.

(vi) The following are applicable for 2022:

(A) If an eligible hospital has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2022 and applies for the FY 2023 and 2024 payment adjustment years. For the FY 2023 payment adjustment year, the EHR reporting period must end before and the eligible hospital must successfully register for and attest to meaningful use no later than October 1, 2022.

(B) If in a prior year an eligible hospital has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2022 and applies for the FY 2024 payment adjustment year.

(3) For a CAH -

(i) The following are applicable before 2015:

(A) Except as provided in paragraph (3)(i)(B) of this definition, the Federal fiscal year that is the payment adjustment year.

(B) If the CAH is demonstrating it is a meaningful EHR user for the first time in the payment adjustment year, any continuous 90-day period within the Federal fiscal year that is the payment adjustment year.

(ii) The following are applicable for 2015, 2016, 2017, and 2018:

(A) In 2015 as follows:

(1) The EHR reporting period is any continuous 90-day period within the period beginning on October 1, 2014 and ending on December 31, 2015 and applies for the FY 2015 payment adjustment year.

(2) [Reserved]

(B) In 2016 as follows:

(1) If a CAH has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2016 and applies for the FY 2016 payment adjustment year.

(2) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2016 and applies for the FY 2016 payment adjustment year.

(C) In 2017 as follows:

(1) If the CAH has not successfully demonstrated meaningful EHR use in a prior year the EHR reporting period is any continuous 90-day period within CY 2017 and applies for the FY 2017 payment adjustment year.

(2) If a CAH is demonstrating Stage 3 of meaningful use under § 495.24, the EHR reporting period is any continuous 90-day period within CY 2017 and applies for that begins on the first day of second quarter of the FY 2017 payment adjustment year.

(3) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2017 and applies for the FY 2017 payment adjustment year.

(D) In 2018 as follows:

(1) If a CAH has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2018 and applies for the FY 2018 payment adjustment year.

(2) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2018 and applies for the FY 2018 payment adjustment year.

(iii) The following are applicable for 2019:

(A) If a CAH has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2019 and applies for the FY 2019 payment adjustment year.

(B) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2019 and applies for the FY 2019 payment adjustment year.

(iv) The following are applicable for 2020:

(A) If a CAH has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2020 and applies for the FY 2020 payment adjustment year.

(B) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2020 and applies for the FY 2020 payment adjustment year.

(v) The following are applicable for 2021:

(A) If a CAH has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2021 and applies for the FY 2021 payment adjustment year.

(B) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2021 and applies for the FY 2021 payment adjustment year.

(vi) The following are applicable for 2022:

(A) If a CAH has not successfully demonstrated it is a meaningful EHR user in a prior year, the EHR reporting period is any continuous 90-day period within CY 2022 and applies for the FY 2022 payment adjustment year.

(B) If in a prior year a CAH has successfully demonstrated it is a meaningful EHR user, the EHR reporting period is any continuous 90-day period within CY 2022 and applies for the FY 2022 payment adjustment year.

Eligible hospital means an eligible hospital as defined under § 495.100 or Medicaid eligible hospital under subpart D of this part.

Eligible professional (EP) means an eligible professional as defined under § 495.100 or a Medicaid eligible professional under subpart D of this part.

First, second, third, fourth, fifth, or sixth payment years mean as follows:

(1) The first payment year is: with respect to an EP, the first calendar year for which the EP receives an incentive payment under this part; and with respect to an eligible hospital or CAH, the first FY for which the hospital receives an incentive payment under this part.

(2) The second, third, fourth, fifth, or sixth payment year is:

(i) With respect to a Medicare EP, the second, third, fourth or fifth successive CY immediately following the first payment year; and with respect to a Medicare eligible hospital or CAH, the second, third, or fourth successive Federal FY immediately following the first payment year. (Note: Medicare EPs are not eligible for a sixth payment year and Medicare eligible hospitals are not eligible for a fifth or sixth payment year.)

(ii)

(A) With respect to a Medicaid EP, the second, third, fourth, fifth, or sixth CY for which the EP receives an incentive payment under subpart D, regardless of whether the year immediately follows the prior payment year; and

(B) With respect to a Medicaid eligible hospital, for years prior to FY 2017, the second, third, fourth, fifth, or sixth Federal FY for which the hospital receives an incentive payment under subpart D of this part, regardless of whether the year immediately follows the prior payment year. Beginning with FY 2017, payments to Medicaid eligible hospitals must be consecutive, and the hospital is not eligible for an incentive payment under subpart D of this part unless it received such incentive payment for the prior fiscal year.

Hospital-based EP. Unless it meets the requirements of § 495.5, a hospital-based EP means an EP who furnishes 90 percent or more of his or her covered professional services in sites of service identified by the codes used in the HIPAA standard transaction as an inpatient hospital or emergency room setting in the year preceding the payment year, or in the case of a payment adjustment year, in either of the 2 years before the year preceding such payment adjustment year.

(1) For Medicare, this is calculated based on -

(i) The Federal fiscal year preceding the payment year; and

(ii) For the payment adjustments, based on -

(A) The Federal fiscal year 2 years before the payment adjustment year; or

(B) The Federal fiscal year 3 years before the payment adjustment year.

(2) For Medicaid, it is at the State's discretion if the data are gathered on the Federal fiscal year or calendar year preceding the payment year.

(3) For the CY 2013 payment year only, an EP who furnishes services billed by a CAH receiving payment under Method II (as described in § 413.70(b)(3) of this chapter) is considered to be hospital-based if 90 percent or more of his or her covered professional services are furnished in sites of service identified by the codes used in the HIPAA standard transaction as an inpatient hospital or emergency room setting in each of the Federal fiscal years 2012 and 2013.

Meaningful EHR user means -

(1) Subject to paragraph (3) of this definition, an EP, eligible hospital or CAH that, for an EHR reporting period for a payment year or payment adjustment year, demonstrates in accordance with § 495.40 meaningful use of certified EHR technology by meeting the applicable objectives and associated measures under §§ 495.20, 495.22, and 495.24, supporting information exchange and the prevention of health information blocking and engaging in activities related to supporting providers with the performance of CEHRT, and successfully reporting the clinical quality measures selected by CMS to CMS or the States, as applicable, in the form and manner specified by CMS or the States, as applicable; and

(2)

(i) Except as specified in paragraph (2)(ii) of this definition, a Medicaid EP or Medicaid eligible hospital, that meets the requirements of paragraph (1) of this definition and any additional criteria for meaningful use imposed by the State and approved by CMS under §§ 495.316 and 495.332.

(ii) An eligible hospital or CAH is deemed to be a meaningful EHR user for purposes of receiving an incentive payment under subpart D of this part, if the hospital participates in both the Medicare and Medicaid EHR incentive programs, and the hospital meets the requirements of paragraph (1) of this definition.

(3) To be considered a meaningful EHR user, at least 50 percent of an EP's patient encounters during an EHR reporting period for a payment year (or, in the case of a payment adjustment year, during an applicable EHR reporting period for such payment adjustment year) must occur at a practice/location or practices/locations equipped with certified EHR technology.

Payment adjustment year means the following:

(1) For an EP, a calendar year beginning with CY 2015.

(2) For a CAH or an eligible hospital, a Federal fiscal year beginning with FY 2015.

(3) For a Puerto Rico eligible hospital, a Federal fiscal year beginning with FY 2022.

Payment year means the following:

(1) For an EP, a calendar year beginning with CY 2011.

(2) For a CAH or an eligible hospital, a Federal fiscal year beginning with FY 2011.

(3) For a Puerto Rico eligible hospital, a Federal fiscal year beginning with FY 2016.

Qualified EHR has the same definition as this term is defined at 45 CFR 170.102.

[75 FR 44565, July 28, 2010, as amended at 77 FR 54148, Sept. 4, 2012; 78 FR 75200, Dec. 10, 2013; 80 FR 62940, Oct. 16, 2015; 80 FR 71386, Nov. 16, 2015; 81 FR 34909, June 1, 2016; 81 FR 77555, Nov. 4, 2016; 81 FR 79882, Nov. 14, 2016; 82 FR 38516, Aug. 14, 2017; 82 FR 46143, Oct. 4, 2017; 83 FR 41706, Aug. 17, 2018; 83 FR 60096, Nov. 23, 2018; 84 FR 42615, Aug. 16, 2019; 85 FR 59026, Sept. 18, 2020]

§ 495.5 Requirements for EPs seeking to reverse a hospital-based determination under § 495.4.

(a) Exception for certain EPs. Beginning with payment year 2013, an EP who meets the definition of hospital-based EP specified in § 495.4 but who can demonstrate to CMS that the EP funds the acquisition, implementation, and maintenance of Certified EHR Technology, including supporting hardware and interfaces needed for meaningful use without reimbursement from an eligible hospital or CAH, and uses such Certified EHR Technology in the inpatient or emergency department of a hospital (instead of the hospital's Certified EHR Technology), may be determined by CMS to be a nonhospital-based EP.

(b) Process for determining a nonhospital-based EP. When an EP registers for a given payment year they should receive a determination of whether they have been determined “hospital-based.”

(1) An EP determined “hospital-based,” but who wishes to be determined nonhospital-based as specified in paragraph (a) of section, may use an administrative process to provide documentation and seek a nonhospital-based determination. Such administrative process will be available throughout the incentive payment year and including the 2 months following the incentive payment year in which the EP may attest to being a meaningful EHR user.

(2) If an EP is determined nonhospital-based under paragraph (a) of this section, to be considered nonhospital-based for subsequent payment years, the EP must attest in such payment year (or by the time the EP must attest it is a meaningful EHR user for such year) that the EP continues to meet the criteria of paragraph (a) of this section.

(c) Requirements for nonhospital-based EPs. An EP determined nonhospital-based must—

(1) Continue to meet all applicable requirements to receive an incentive payment, including meeting all requirements for meaningful use; and

(2) Demonstrate meaningful use using all encounters at all locations equipped with Certified EHR Technology, including those in the inpatient and emergency departments of the hospital.

[77 FR 54149, Sept. 4, 2012]

§ 495.20 Meaningful use objectives and measures for EPs, eligible hospitals, and CAHs before 2015.

The following criteria are applicable before 2015:

(a) Stage 1 criteria for EPs

(1) General rule regarding Stage 1 criteria for meaningful use for EPs. Except as specified in paragraphs (a)(2) and (a)(3) of this section, EPs must meet all objectives and associated measures of the Stage 1 criteria specified in paragraph (d) of this section and five objectives of the EP's choice from paragraph (e) of this section to meet the definition of a meaningful EHR user.

(2) Exclusion for non-applicable objectives.

(i) An EP may exclude a particular objective contained in paragraphs (d) or (e) of this section, if the EP meets all of the following requirements:

(A) Must ensure that the objective in paragraph (d) or (e) of this section includes an option for the EP to attest that the objective is not applicable.

(B) Meets the criteria in the applicable objective that would permit the attestation.

(C) Attests.

(ii)

(A) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply. For example, an EP that has an exclusion from one of the objectives in paragraph (e) of this section must meet four (and not five) objectives of the EP's choice from such paragraph to meet the definition of a meaningful EHR user.

(B) Beginning 2014, an exclusion does not reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (e) of this section unless five or more objectives can be excluded. An EP must meet five of the objectives and associated measures specified in paragraph (e) of this section, one of which must be either paragraph (e)(9) or (10) of this section, unless the EP has an exclusion from five or more objectives specified in paragraph (e) of this section, in which case the EP must meet all remaining objectives and associated measures in paragraph (e) of this section.

(3) Exception for Medicaid EPs who adopt, implement or upgrade in their first payment year. For Medicaid EPs who adopt, implement, or upgrade certified EHR technology in their first payment year, the meaningful use objectives and associated measures of the Stage 1 criteria specified in paragraphs (d) and (e) apply beginning with the second payment year, and do not apply to the first payment year.

(4) Flexible options for using certified EHR technology in 2014. For an EHR reporting period in 2014, if an EP could not fully implement 2014 Edition certified EHR technology due to delays in availability and uses—

(i) Only 2011 Edition certified EHR technology, the EP must satisfy the objectives and associated measures of the Stage 1 criteria that were applicable for 2013; or

(ii) A combination of 2011 Edition certified EHR technology and 2014 Edition certified EHR technology, the EP may choose to satisfy one of the following sets of objectives and associated measures:

(A) The Stage 1 criteria that were applicable for 2013.

(B) The Stage 1 criteria that are applicable beginning 2014.

(C) If the EP is scheduled to begin Stage 2 in 2014, the Stage 2 criteria.

(b) Stage 1 criteria for eligible hospitals and CAHs

(1) General rule regarding Stage 1 criteria for meaningful use for eligible hospitals or CAHs. Except as specified in paragraphs (b)(2) and (b)(3) of this section, eligible hospitals and CAHs must meet all objectives and associated measures of the Stage 1 criteria specified in paragraph (f) of this section and five objectives of the eligible hospital's or CAH's choice from paragraph (g) of this section to meet the definition of a meaningful EHR user.

(2) Exclusions for nonapplicable objectives.

(i) An eligible hospital or CAH may exclude a particular objective that includes an option for exclusion contained in paragraphs (f) or (g) of this section, if the hospital meets all of the following requirements:

(A) The hospital meets the criteria in the applicable objective that would permit an exclusion.

(B) The hospital so attests.

(ii)

(A) An exclusion will reduce (by the number of exclusions received) the number of objectives that would otherwise apply. For example, an eligible hospital that is excluded from one of the objectives in paragraph (g) of this section must meet four (and not five) objectives of the hospital's choice from such paragraph to meet the definition of a meaningful EHR user.

(B) Beginning 2014, an exclusion does not reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (g) of this section. Eligible hospitals or CAHs must meet five of the objectives and associated measures specified in paragraph (g) of this section, one which must be specified in paragraph (g)(8), (9), or (10) of this section.

(3) Exception for Medicaid eligible hospitals that adopt, implement or upgrade in their first payment year. For Medicaid eligible hospitals that adopt, implement, or upgrade certified EHR technology in their first payment year, the meaningful use objectives and associated measures of the Stage 1 criteria specified in paragraphs (f) and (g) of this section apply beginning with the second payment year, and do not apply to the first payment year.

(4) Flexible options for using certified EHR technology in 2014. For an EHR reporting period in 2014, if an eligible hospital or CAH could not fully implement 2014 Edition certified EHR technology due to delays in availability and uses—

(i) Only 2011 Edition certified EHR technology, the eligible hospital or CAH must satisfy the objectives and associated measures of the Stage 1 criteria that were applicable for 2013;

(ii) A combination of 2011 Edition certified EHR technology and 2014 Edition certified EHR technology, the eligible hospital or CAH may choose to satisfy one of the following sets of objectives and associated measures:

(A) The Stage 1 criteria that were applicable for 2013.

(B) The Stage 1 criteria that are applicable beginning 2014.

(C) If the eligible hospital or CAH is scheduled to begin Stage 2 in 2014, the Stage 2 criteria.

(c) Many of the objective and associated measures in paragraphs paragraphs (d) through (m) of this section rely on measures that count unique patients or actions.

(1) If a measure (or associated objective) in paragraphs (d) through (g) of this section references paragraph (c) of this section, then the measure may be calculated by reviewing only the actions for patients whose records are maintained using certified EHR technology. A patient's record is maintained using certified EHR technology if sufficient data was entered in the certified EHR technology to allow the record to be saved, and not rejected due to incomplete data.

(2) If the objective and associated measure does not reference this paragraph (c) of this section, then the measure must be calculated by reviewing all patient records, not just those maintained using certified EHR technology.

(d) Stage 1 core criteria for EPs. An EP must satisfy the following objectives and associated measures, except those objectives and associated measures for which an EP qualifies for an exclusion under paragraph (a)(2) of this section specified in this paragraph:

(1)

(i) Objective. Use computerized provider order entry (CPOE) for medication orders directly entered by any licensed healthcare professional who can enter orders into the medical record per state, local and professional guidelines.

(ii) Measure.

(A) Subject to paragraph (c) of this section, more than 30 percent of all unique patients with at least one medication in their medication list seen by the EP have at least one medication order entered using CPOE.

(B) Subject to paragraph (c) of this section, more than 30 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry, or the measure specified in paragraph (d)(1)(ii)(A) of this section.

(iii) Exclusion in accordance with paragraph (a)(2) of this section Any EP who writes fewer than 100 prescriptions during the EHR reporting period.

(2)

(i) Objective. Implement drug-drug and drug-allergy interaction checks.

(ii) Measure. The EP has enabled this functionality for the entire EHR reporting period.

(3)

(i) Objective. Maintain an up-to-date problem list of current and active diagnoses.

(ii) Measure. More than 80 percent of all unique patients seen by the EP have at least one entry or an indication that no problems are known for the patient recorded as structured data.

(4)

(i) Objective. Generate and transmit permissible prescriptions electronically (eRx).

(ii) Measure. Subject to paragraph (c) of this section, more than 40 percent of all permissible prescriptions written by the EP are transmitted electronically using certified EHR technology.

(iii) Exclusion in accordance with paragraph (a)(2) of this section

(A) Any EP who writes fewer than 100 prescriptions during the EHR reporting period.

(B) Beginning 2013, any EP who does not have a pharmacy within their organization and there are no pharmacies that accept electronic prescriptions within 10 miles of the EP's practice location at the start of his/her EHR reporting period, or the exclusion specified in (d)(4)(iii)(A) of this section.

(5)

(i) Objective. Maintain active medication list.

(ii) Measure. More than 80 percent of all unique patients seen by the EP have at least one entry (or an indication that the patient is not currently prescribed any medication) recorded as structured data.

(6)

(i) Objective. Maintain active medication allergy list.

(ii) Measure. More than 80 percent of all unique patients seen by the EP have at least one entry (or an indication that the patient has no known medication allergies) recorded as structured data.

(7)

(i) Objective. Record all of the following demographics:

(A) Preferred language.

(B) Gender.

(C) Race.

(D) Ethnicity.

(E) Date of birth.

(ii) Measure. More than 50 percent of all unique patients seen by the EP have demographics recorded as structured data.

(8)

(i) Objective. Record and chart changes in the following vital signs:

(A) Height.

(B) Weight.

(C) Blood pressure.

(D) Calculate and display body mass index (BMI).

(E)

(1) Plot and display growth charts for children 2-20 years, including BMI.

(2) For 2013, plot and display growth charts for patients 0-20 years, including body mass index, or paragraph (d)(8)(i)(E)(1) of this section.

(3) Beginning 2014, plot and display growth charts for patients 0-20 years, including body mass index.

(ii) Measure.

(A) Subject to paragraph (c) of this section, more than 50 percent of all unique patients age 2 and over seen by the EP, height, weight and blood pressure are recorded as structured data.

(B) For 2013—

(1) Subject to paragraph (c) of this section, more than 50 percent of all unique patients seen by the EP during the EHR reporting period have blood pressure (for patients age 3 and over only) and height/length and weight (for all ages) recorded as structured data; or

(2) The measure specified in paragraph (d)(8)(ii)(A) of this section.

(C) Beginning 2014, only the measure specified in paragraph (d)(8)(ii)(B)(1) of this section.

(iii) Exclusion in accordance with paragraph (a)(2) of this section.

(A) Any EP who either see no patients 2 years or older, or who believes that all three vital signs of height, weight, and blood pressure of their patients have no relevance to their scope of practice.

(B) For 2013, either of the following:

(1) The exclusion specified in paragraph (d)(8)(iii)(A) of this section.

(2) The exclusion for an EP who—

(i) Sees no patients 3 years or older is excluded from recording blood pressure;

(ii) Believes that all three vital signs of height/length, weight, and blood pressure have no relevance to their scope of practice is excluded from recording them;

(iii) Believes that height/length and weight are relevant to their scope of practice, but blood pressure is not, is excluded from recording blood pressure; or

(iv) Believes that blood pressure is relevant to their scope of practice, but height/length and weight are not, is excluded from recording height/length and weight.

(C) Beginning 2014, only the exclusion specified in paragraph (d)(8)(iii)(B)(2) of this section.

(9)

(i) Objective. Record smoking status for patients 13 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 13 years old or older seen by the EP have smoking status recorded as structured data.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who sees no patients 13 years or older.

(10)

(i) Objective.

(A) Report ambulatory clinical quality measures to CMS or, in the case of Medicaid EPs, the States.

(B) Beginning 2013, this objective is reflected in the definition of a meaningful EHR user in § 495.4 and is no longer listed as an objective in this paragraph (d).

(ii) Measure.

(A) Subject to paragraph (c) of this section, successfully report to CMS (or, in the case of Medicaid EPs, the States) ambulatory clinical quality measures selected by CMS in the manner specified by CMS (or in the case of Medicaid EPs, the States).

(B) Beginning 2013, this measure is reflected in the definition of a meaningful EHR user in § 495.4 and no longer listed as a measure in this paragraph (d).

(11)

(i) Objective. Implement one clinical decision support rules relevant to specialty or high clinical priority along with the ability to track compliance with that rule.

(ii) Measure. Implement one clinical decision support rule.

(12)

(i) Objective.

(A) Provide patients with an electronic copy of their health information (including diagnostics test results, problem list, medication lists, medication allergies) upon request.

(B) Beginning 2014, provide patients the ability to view online, download, and transmit their health information within 4 business days of the information being available to the EP.

(ii) Measure.

(A) Subject to paragraph (c) of this section, more than 50 percent of all patients who request an electronic copy of their health information are provided it within 3 business days.

(B) Beginning 2014, subject to paragraph (c) of this section, more than 50 percent of all unique patients seen by the EP during the EHR reporting period are provided timely (available to the patient within 4 business days after the information is available to the EP) online access to their health information subject to the EP's discretion to withhold certain information.

(iii) Exclusion in accordance with paragraph (a)(2) of this section.

(A) Any EP that has no requests from patients or their agents for an electronic copy of patient health information during the EHR reporting period.

(B) Beginning 2014, any EP who neither orders nor creates any of the information listed for inclusion as part of this measure.

(13)

(i) Objective. Provide clinical summaries for patients for each office visit.

(ii) Measure. Subject to paragraph (c) of this section, clinical summaries provided to patients for more than 50 percent of all office visits within 3 business days.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who has no office visits during the EHR reporting period.

(14)

(i) Objective.

(A) Capability to exchange key clinical information (for example, problem list, medication list, medication allergies, and diagnostic test results), among providers of care and patient authorized entities electronically.

(B) Beginning 2013, this objective is no longer required as part of the core set.

(ii) Measure.

(A) Performed at least one test of certified EHR technology's capacity to electronically exchange key clinical information.

(B) Beginning 2013, this measure is no longer required as part of the core set.

(15)

(i) Objective. Protect electronic health information created or maintained by the certified EHR technology through the implementation of appropriate technical capabilities.

(ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1) and implement security updates as necessary and correct identified security deficiencies as part of its risk management process.

(e) Stage 1 menu set criteria for EPs. An EP must meet five of the following objectives and associated measures, one of which must be either paragraph (e)(9) or (e)(10) of this section, except that the required number of objectives and associated measures is reduced by an EP's paragraph (a)(2) of this section exclusions specified in this paragraph. Beginning 2014, an EP must meet five of the following objectives and associated measures, one of which must be either paragraph (e)(9) or (10) of this section unless the EP has an exclusion from five or more objectives in this paragraph (e), in which case the EP must meet all remaining objectives and associated measures in paragraph (e) of this section.

(1)

(i) Objective. Implement drug-formulary checks.

(ii) Measure. The EP has enabled this functionality and has access to at least one internal or external formulary for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who writes fewer than 100 prescriptions during the EHR reporting period.

(2)

(i) Objective. Incorporate clinical lab-test results into EHR as structured data.

(ii) Measure. Subject to paragraph (c) of this section, more than 40 percent of all clinical lab tests results ordered by the EP during the EHR reporting period whose results are either in a positive/negative or numerical format are incorporated in certified EHR technology as structured data.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who orders no lab tests whose results are either in a positive/negative or numeric format during the EHR reporting period.

(3)

(i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, or outreach.

(ii) Measure. Subject to paragraph (c) of this section, generate at least one report listing patients of the EP with a specific condition.

(4)

(i) Objective. Send reminders to patients per patient preference for preventive/follow-up care.

(ii) Measure. Subject to paragraph (c) of this section, more than 20 percent of all patients 65 years or older or 5 years old or younger were sent an appropriate reminder during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who has no patients 65 years old or older or 5 years old or younger with records maintained using certified EHR technology.

(5)

(i) Objective.

(A) Provide patients with timely electronic access to their health information (including lab results, problem list, medication lists, and allergies) within 4 business days of the information being available to the EP.

(B) Beginning 2014, this objective is no longer included in the menu set.

(ii) Measure.

(A) At least 10 percent of all unique patients seen by the EP are provided timely (available to the patient within four business days of being updated in the certified EHR technology) electronic access to their health information subject to the EP's discretion to withhold certain information.

(B) Beginning 2014, this measure is no longer included in the menu set.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP that neither orders nor creates any of the information listed at 45 CFR 170.314(g) during the EHR reporting period.

(6)

(i) Objective. Use certified EHR technology to identify patient-specific education resources and provide those resources to the patient if appropriate.

(ii) Measure. More than 10 percent of all unique patients seen by the EP are provided patient-specific education resources.

(7)

(i) Objective. The EP who receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation.

(ii) Measure. Subject to paragraph (c) of this section, the EP performs medication reconciliation for more than 50 percent of transitions of care in which the patient is transitioned into the care of the EP.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who was not the beneficiary of any transitions of care during the EHR reporting period.

(8)

(i) Objective. The EP who transitions their patient to another setting of care or provider of care or refers their patient to another provider of care should provide summary care record for each transition of care or referral.

(ii) Measure. Subject to paragraph (c) of this section, the EP who transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who neither transfers a patient to another setting nor refers a patient to another provider during the EHR reporting period.

(9)

(i) Objective.

(A) Capability to submit electronic data to immunization registries or immunization information systems and actual submission according to applicable law and practice.

(B) Beginning 2013, capability to submit electronic data to immunization registries or immunization information systems and actual submission except where prohibited and according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology's capacity to submit electronic data to immunization registries and follow up submission if the test is successful (unless none of the immunization registries to which the EP submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who administers no immunizations during the EHR reporting period or where no immunization registry has the capacity to receive the information electronically.

(10)

(i) Objective.

(A) Capability to submit electronic syndromic surveillance data to public health agencies and actual submission according to applicable law and practice.

(B) Beginning 2013, capability to submit electronic syndromic surveillance data to public health agencies and actual submission except where prohibited and according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology's capacity to provide electronic syndromic surveillance data to public health agencies and follow-up submission if the test is successful (unless none of the public health agencies to which an EP submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who does not collect any reportable syndromic information on their patients during the EHR reporting period or does not submit such information to any public health agency that has the capacity to receive the information electronically.

(f) Stage 1 core criteria for eligible hospitals or CAHs. An eligible hospital or CAH must meet the following objectives and associated measures except those objectives and associated measures for which an eligible hospital or CAH qualifies for a paragraph (b)(2) of this section exclusion specified in this paragraph:

(1)

(i) Objective. Use CPOE for medication orders directly entered by any licensed healthcare professional who can enter orders into the medical record per State, local, and professional guidelines.

(ii) Measure.

(A) Subject to paragraph (c) of this section, more than 30 percent of all unique patients with at least one medication in their medication list admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have at least one medication order entered using CPOE.

(B) Subject to paragraph (c) of this section, more than 30 percent of medication orders created by the authorized providers of the eligible hospital or CAH for patients admitted to their inpatient or emergency departments (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry, or the measure specified in paragraph (f)(1)(ii)(A) of this section.

(2)

(i) Objective. Implement drug-drug and drug-allergy interaction checks.

(ii) Measure. The eligible hospital or CAH has enabled this functionality for the entire EHR reporting period.

(3)

(i) Objective. Maintain an up-to-date problem list of current and active diagnoses.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have at least one entry or an indication that no problems are known for the patient recorded as structured data.

(4)

(i) Objective. Maintain active medication list.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have at least one entry (or an indication that the patient is not currently prescribed any medication) recorded as structured data.

(5)

(i) Objective. Maintain active medication allergy list.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have at least one entry (or an indication that the patient has no known medication allergies) recorded as structured data.

(6)

(i) Objective. Record all of the following demographics;

(A) Preferred language.

(B) Gender.

(C) Race.

(D) Ethnicity.

(E) Date of birth.

(F) Date and preliminary cause of death in the event of mortality in the eligible hospital or CAH.

(ii) Measure. More than 50 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have demographics recorded as structured data.

(7)

(i) Objective. Record and chart changes in the following vital signs:

(A) Height.

(B) Weight.

(C) Blood pressure.

(D) Calculate and display body mass index (BMI).

(E)

(1) Plot and display growth charts for children 2-20 years, including BMI.

(2) For 2013, plot and display growth charts for patients 0-20 years, including body mass index, or paragraph (f)(7)(i)(E)(1) of this section.

(3) Beginning 2014, plot and display growth charts for patients 0-20 years, including body mass index.

(ii) Measure.

(A) Subject to paragraph (c) of this section, for more than 50 percent of all unique patients age 2 and over admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23), height, weight, and blood pressure are recorded as structured data.

(B) For 2013—

(1) Subject to paragraph (c) of this section, more than 50 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have blood pressure (for patients age 3 and over only) and height/length and weight (for all ages) recorded as structured data; or

(2) The measure specified in paragraph (f)(7)(ii)(A) of this section.

(C) Beginning 2014, only the measure specified in paragraph (f)(7)(ii)(B)(1) of this section.

(8)

(i) Objective. Record smoking for patients 13 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 13 years old or older or admitted to the eligible hospital's inpatient or emergency department (POS 21 or 23) have smoking status recorded as structured data.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. Any eligible hospital or CAH that admits no patients 13 years or older to their inpatient or emergency department (POS 21 or 23).

(9)

(i) Objective.

(A) Report hospital clinical quality measures to CMS or, in the case of Medicaid eligible hospitals, the States.

(B) Beginning 2013, this objective is reflected in the definition of a meaningful EHR user in § 495.4 and no longer listed as an objective in this paragraph (f).

(ii) Measure.

(A) Subject to paragraph (c) of this section, successfully report to CMS (or, in the case of Medicaid eligible hospitals or CAHs, the States) hospital clinical quality measures selected by CMS in the manner specified by CMS (or, in the case of Medicaid eligible hospitals or CAHs, the States).

(B) Beginning 2013, this measure is reflected in the definition of a meaningful EHR user in § 495.4 and no longer listed as a measure in this paragraph (f).

(10)

(i) Objective. Implement one clinical decision support rule related to a high priority hospital condition along with the ability to track compliance with that rule.

(ii) Measure. Implement one clinical decision support rule.

(11)

(i) Objective.

(A) Provide patients with an electronic copy of their health information (including diagnostic test results, problem list, medication lists, medication allergies, discharge summary, procedures), upon request.

(B) Beginning 2014, this objective is no longer required as part of the core set.

(ii) Measure.

(A) Subject to paragraph (c) of this section, more than 50 percent of all patients of the inpatient or emergency departments of the eligible hospital or CAH (POS 21 or 23) who request an electronic copy of their health information are provided it within 3 business days.

(B) Beginning 2014, this measure is no longer required as part of the core set.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. Any eligible hospital or CAH that has no requests from patients or their agents for an electronic copy of patient health information during the EHR reporting period.

(12)

(i) Objective.

(A) Provide patients with an electronic copy of their discharge instructions at time of discharge, upon request.

(B) Beginning 2014, provide patients the ability to view online, download, and transmit information about a hospital admission.

(ii) Measure.

(A) Subject to paragraph (c) of this section, more than 50 percent of all patients who are discharged from an eligible hospital or CAH's inpatient or emergency department (POS 21 or 23) and who request an electronic copy of their discharge instructions are provided it.

(B) Beginning 2014, subject to paragraph (c) of this section, more than 50 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have their information available online within 36 hours of discharge.

(iii) Exclusion in accordance with paragraph (b)(2) of this section.

(A) Any eligible hospital or CAH that has no requests from patients or their agents for an electronic copy of the discharge instructions during the EHR reporting period.

(B) Beginning 2014, this exclusion is no longer available.

(13)

(i) Objective.

(A) Capability to exchange key clinical information (for example, problem list, medication list, medication allergies, and diagnostic test results), among providers of care and patient authorized entities electronically.

(B) Beginning 2013, this objective is no longer required as part of the core set.

(ii) Measure. Performed at least one test of certified EHR technology's capacity to electronically exchange key clinical information.

(B) Beginning 2013, this measure is no longer required as part of the core set.

(14)

(i) Objective. Protect electronic health information created or maintained by the certified EHR technology through the implementation of appropriate technical capabilities.

(ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1) and implement security updates as necessary and correct identified security deficiencies as part of its risk management process.

(g) Stage 1 menu set criteria for eligible hospitals or CAHs. Eligible hospitals or CAHs must meet five of the following objectives and associated measures, one which must be specified in paragraph (g)(8), (g)(9), or (g)(10) of this section, except that the required number of objectives and associated measures is reduced by a hospital's paragraph (b)(2) of this section exclusions specified in this paragraph. Beginning 2014, eligible hospitals or CAHs must meet five of the following objectives and associated measures, one which must be specified in paragraph (g)(8), (9), or (10) of this section:

(1)

(i) Objective. Implement drug-formulary checks.

(ii) Measure. The eligible hospital or CAH has enabled this functionality and has access to at least one internal or external formulary for the entire EHR reporting period.

(2)

(i) Objective. Record advance directives for patient 65 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 65 years old or older admitted to the eligible hospital's or CAH's inpatient (POS 21) have an indication of an advance directive status recorded as structured data.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. An eligible hospital or CAH that admits no patients age 65 years old or older during the EHR reporting period.

(3)

(i) Objective. Incorporate clinical lab-test results into EHR as structured data.

(ii) Measure. Subject to paragraph (c) of this section, more than 40 percent of all clinical lab test results ordered by an authorized provider of the eligible hospital or CAH for patients admitted to its inpatient or emergency department (POS 21 and 23) during the EHR reporting period whose results are either in a positive/negative or numerical format are incorporated in certified EHR technology as structured data.

(4)

(i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, or outreach.

(ii) Measure. Subject to paragraph (c) of this section, generate at least one report listing patients of the eligible hospital or CAH with a specific condition.

(5)

(i) Objective. Use certified EHR technology to identify patient-specific education resources and provide those resources to the patient if appropriate.

(ii) Measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient-specific education resources.

(6)

(i) Objective. The eligible hospital or CAH who receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation.

(ii) Measure. Subject to paragraph (c) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23).

(7)

(i) Objective. The eligible hospital or CAH that transitions their patient to another setting of care or provider of care or refers their patient to another provider of care should provide summary care record for each transition of care or referral.

(ii) Measure. Subject to paragraph (c) of this section, the eligible hospital or CAH that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals.

(8)

(i) Objective.

(A) Capability to submit electronic data to immunization registries or immunization information systems and actual submission according to applicable law and practice.

(B) Beginning 2013, Capability to submit electronic data to immunization registries or immunization information systems and actual submission except where prohibited and according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology's capacity to submit electronic data to immunization registries and follow up submission if the test is successful (unless none of the immunization registries to which the eligible hospital or CAH submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (b)(2) of this section. An eligible hospital or CAH that administers no immunizations during the EHR reporting period or where no immunization registry has the capacity to receive the information electronically.

(9)

(i) Objective.

(A) Capability to submit electronic data on reportable (as required by State or local law) lab results to public health agencies and actual submission according to applicable law and practice.

(B) Beginning 2013, capability to submit electronic data on reportable (as required by State or local law) lab results to public health agencies and actual submission except where prohibited according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology's capacity to provide electronic submission of reportable lab results to public health agencies and follow-up submission if the test is successful (unless none of the public health agencies to which an eligible hospital or CAH submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (b)(2) of this section. No public health agency to which the eligible hospital or CAH submits such information has the capacity to receive the information electronically.

(10)

(i) Objective.

(A) Capability to submit electronic syndromic surveillance data to public health agencies and actual submission according to applicable law and practice.

(B) Beginning 2013, capability to submit electronic syndromic surveillance data to public health agencies and actual submission except where prohibited and according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology's capacity to provide electronic syndromic surveillance data to public health agencies and follow-up submission if the test is successful (unless none of the public health agencies to which an eligible hospital or CAH submits information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (a)(2) of this section. No public health agency to which the eligible hospital or CAH submits information has the capacity to receive the information electronically.

(h) Stage 2 criteria for EPs

(1) General rule regarding Stage 2 criteria for meaningful use for EPs. Except as specified in paragraph (h)(2) of this section, EPs must meet all objectives and associated measures of the Stage 2 criteria specified in paragraph (j) of this section and 3 objectives of the EP's choice from paragraph (k) of this section to meet the definition of a meaningful EHR user.

(2) Exclusion for nonapplicable objectives.

(i) An EP may exclude a particular objective contained in paragraph (j) or (k) of this section, if the EP meets all of the following requirements:

(A) Must ensure that the objective in paragraph (j) or (k) of this section includes an option for the EP to attest that the objective is not applicable.

(B) Meets the criteria in the applicable objective that would permit the attestation.

(C) Attests.

(ii)

(A) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (j) of this section. For example, an EP that has an exclusion from one of the objectives in paragraph (j) of this section must meet 16 objectives from such paragraph to meet the definition of a meaningful EHR user.

(B) An exclusion does not reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (k) of this section unless four or more exclusions apply. For example, an EP that has an exclusion for one of the objectives in paragraph (k) of this section must meet three of the five nonexcluded objectives from such paragraph to meet the definition of a meaningful EHR user. If an EP has an exclusion for four of the objectives in paragraph (k) of this section, then he or she must meet the remaining two nonexcluded objectives from such paragraph to meet the definition of a meaningful EHR user.

(3) Flexible options for using certified EHR technology in 2014. For an EHR reporting period in 2014, if an EP is scheduled to begin Stage 2 in 2014, but is unable to fully implement all the functions of 2014 Edition certified EHR technology required for the objectives and associated measures of the Stage 2 criteria due to delays in availability, the EP may choose to satisfy the objectives and associated measures of the Stage 1 criteria that are applicable beginning 2014 using 2014 Edition certified EHR technology.

(i) Stage 2 criteria for eligible hospitals and CAHs

(1) General rule regarding Stage 2 criteria for meaningful use for eligible hospitals or CAHs. Except as specified in paragraph (i)(2) of this section, eligible hospitals and CAHs must meet all objectives and associated measures of the Stage 2 criteria specified in paragraph (l) of this section and three objectives of the eligible hospital's or CAH's choice from paragraph (m) of this section to meet the definition of a meaningful EHR user.

(2) Exclusions for nonapplicable objectives.

(i) An eligible hospital or CAH may exclude a particular objective that includes an option for exclusion contained in paragraphs (l) or (m) of this section, if the hospital meets all of the following requirements:

(A) The hospital meets the criteria in the applicable objective that would permit an exclusion.

(B) The hospital so attests.

(ii)

(A) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (l) of this section. For example, an eligible hospital that has an exclusion from 1 of the objectives in paragraph (l) of this section must meet 15 objectives from such paragraph to meet the definition of a meaningful EHR user.

(B) An exclusion does not reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (m) of this section. For example, an eligible hospital that has an exclusion for one of the objectives in paragraph (m) of this section must meet three of the five nonexcluded objectives from such paragraph to meet the definition of a meaningful EHR user.

(3) Flexible options for using certified EHR technology in 2014. For an EHR reporting period in 2014, if an eligible hospital or CAH is scheduled to begin Stage 2 in 2014, but is unable to fully implement all the functions of 2014 Edition certified EHR technology required for the objectives and associated measures of the Stage 2 criteria due to delays in availability, the eligible hospital or CAH may choose to satisfy the objectives and associated measures of the Stage 1 criteria that are applicable beginning 2014 using 2014 Edition certified EHR technology.

(j) Stage 2 core criteria for EPs. An EP must satisfy the following objectives and associated measures, except those objectives and associated measures for which an EP qualifies for an exclusion under paragraph (h)(2) of this section specified in this paragraph (j).

(1)

(i) Objective. Use computerized provider order entry for medication, laboratory, and radiology orders directly entered by any licensed healthcare professional who can enter orders into the medical record per State, local, and professional guidelines.

(ii) Measures. Subject to paragraph (c) of this section—

(A) More than 60 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry;

(B) More than 30 percent of laboratory orders created by the EP during the EHR reporting period are recorded using computerized provider order entry; and

(C) More than 30 percent of radiology orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.

(iii) Exclusions in accordance with paragraph (h)(2) of this section.

(A) For the measure specified in paragraph (j)(1)(ii)(A) of this section, any EP who writes fewer than 100 medication orders during the EHR reporting period.

(B) For the measure specified in paragraph (j)(1)(ii)(B) of this section, any EP who writes fewer than 100 laboratory orders during the EHR reporting period.

(C) For the measure specified in paragraph (j)(1)(ii)(C), any EP who writes fewer than 100 radiology orders during the EHR reporting period.

(2)

(i) Objective. Generate and transmit permissible prescriptions electronically (eRx).

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all permissible prescriptions, or all prescriptions, written by the EP are queried for a drug formulary and transmitted electronically using Certified EHR Technology.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who—

(A) Writes fewer than 100 permissible prescriptions during the EHR reporting period; or

(B) Does not have a pharmacy within their organization and there are no pharmacies that accept electronic prescriptions within 10 miles of the EP's practice location at the start of his or her EHR reporting period.

(3)

(i) Objective. Record all of the following demographics:

(A) Preferred language.

(B) Sex.

(C) Race.

(D) Ethnicity.

(E) Date of birth.

(ii) Measure. More than 80 percent of all unique patients seen by the EP during the EHR reporting period have demographics recorded as structured data.

(4)

(i) Objective. Record and chart changes in the following vital signs:

(A) Height/Length.

(B) Weight.

(C) Blood pressure (ages 3 and over).

(D) Calculate and display body mass index (BMI).

(E) Plot and display growth charts for patients 0-20 years, including body mass index.

(ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients seen by the EP during the EHR reporting period have blood pressure (for patients age 3 and over only) and height/length and weight (for all ages) recorded as structured data.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who—

(A) Sees no patients 3 years or older is excluded from recording blood pressure;

(B) Believes that all three vital signs of height/length, weight, and blood pressure have no relevance to their scope of practice is excluded from recording them;

(C) Believes that height/length and weight are relevant to their scope of practice, but blood pressure is not, is excluded from recording blood pressure; or

(D) Believes that blood pressure is relevant to their scope of practice, but height/length and weight are not, is excluded from recording height/length and weight.

(5)

(i) Objective. Record smoking status for patients 13 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients 13 years old or older seen by the EP during the EHR reporting period have smoking status recorded as structured data.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who sees no patients 13 years old or older.

(6)

(i) Objective. Use clinical decision support to improve performance on high priority health conditions.

(ii) Measures.

(A) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an EP's scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions; and

(B) The EP has enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section for paragraph (j)(6)(ii)(B) of this section. An EP who writes fewer than 100 medication orders during the EHR reporting period.

(7)

(i) Objective. Incorporate clinical lab test results into Certified EHR Technology as structured data.

(ii) Measure. Subject to paragraph (c) of this section, more than 55 percent of all clinical lab tests results ordered by the EP during the EHR reporting period whose results are either in a positive/negative affirmation or numerical format are incorporated in Certified EHR Technology as structured data.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who orders no lab tests whose results are either in a positive/negative affirmation or numerical format during the EHR reporting period.

(8)

(i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, or outreach.

(ii) Measure. Generate at least one report listing patients of the EP with a specific condition.

(9)

(i) Objective. Use clinically relevant information to identify patients who should receive reminders for preventive/follow-up care and send these patients the reminder, per patient preference.

(ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of all unique patients who have had two or more office visits with the EP within the 24 months before the beginning of the EHR reporting period were sent a reminder, per patient preference when available.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has had no office visits in the 24 months before the beginning of the EHR reporting period.

(10)

(i) Objective. Provide patients the ability to view online, download, and transmit their health information within 4 business days of the information being available to the EP.

(ii) Measures.

(A) More than 50 percent of all unique patients seen by the EP during the EHR reporting period are provided timely (available to the patient within 4 business days after the information is available to the EP) online access to their health information subject to the EP's discretion to withhold certain information; and

(B) More than 5 percent of all unique patients seen by the EP during the EHR reporting period (or their authorized representatives) view, download or transmit to a third party their health information.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who—

(A) Neither orders nor creates any of the information listed for inclusion as part of the measures in paragraphs (j)(10)(ii)(A) and (B) of this section, except for “Patient name” and “Provider's name and office contact information,” is excluded from both paragraphs (j)(10)(ii)(A) and (B) of this section; or

(B) Conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 3Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (j)(10)(ii)(B) of this section.

(11)

(i) Objective. Provide clinical summaries for patients for each office visit.

(ii) Measure. Subject to paragraph (c) of this section, clinical summaries provided to patients or patient-authorized representatives within 1 business day for more than 50 percent of office visits.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has no office visits during the EHR reporting period.

(12)

(i) Objective. Use clinically relevant information from Certified EHR Technology to identify patient-specific education resources and provide those resources to the patient.

(ii) Measure. Patient-specific education resources identified by Certified EHR Technology are provided to patients for more than 10 percent of all unique patients with office visits seen by the EP during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has no office visits during the EHR reporting period.

(13)

(i) Objective. The EP who receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation.

(ii) Measure. Subject to paragraph (c) of this section, the EP performs medication reconciliation for more than 50 percent of transitions of care in which the patient is transitioned into the care of the EP.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who was not the beneficiary of any transitions of care during the EHR reporting period.

(14)

(i) Objective. The EP who transitions their patient to another setting of care or provider of care or refers their patient to another provider of care provides a summary care record for each transition of care or referral.

(ii) Measures.

(A) Subject to paragraph (c) of this section, the EP that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals;

(B) Subject to paragraph (c) of this section, the EP that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 10 percent of such transitions and referrals either—

(1) Electronically transmitted using Certified EHR Technology to a beneficiary; or

(2) Where the beneficiary receives the summary of care record via exchange facilitated by an organization that is a NwHIN Exchange participant or in a manner that is consistent with the governance mechanism ONC establishes for the nationwide health information network, and

(C) Subject to paragraph (c) of this section an EP must satisfy one of the following:

(1) Conducts one or more successful electronic exchanges of a summary of care record meeting the measure specified in paragraph (j)(14)(ii)(B) of this section with a beneficiary using technology to receive the summary of care record that was designed by a different EHR developer than the sender's EHR technology certified at 45 CFR 170.314(b)(2); or

(2) Conducts one or more successful tests with the CMS designated test EHR during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who transfers a patient to another setting or refers a patient to another provider less than 100 times during the EHR reporting period.

(15)

(i) Objective. Capability to submit electronic data to immunization registries or immunization information systems except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of electronic immunization data from Certified EHR Technology to an immunization registry or immunization information system for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP that meets one or more of the following criteria:

(A) Does not administer any of the immunizations to any of the populations for which data is collected by their jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(B) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required for Certified EHR Technology at the start of his or her EHR reporting period.

(C) Operates in a jurisdiction where no immunization registry or immunization information system provides information timely on capability to receive immunization data.

(D) Operates in a jurisdiction for which no immunization registry or immunization information system that is capable of accepting the specific standards required by Certified EHR Technology at the start of his or her EHR reporting period can enroll additional EPs.

(16)

(i) Objective. Protect electronic health information created or maintained by the Certified EHR Technology through the implementation of appropriate technical capabilities.

(ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the encryption/security of data stored in Certified EHR Technology in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary and correct identified security deficiencies as part of the EP's risk management process.

(17)

(i) Objective. Use secure electronic messaging to communicate with patients on relevant health information.

(ii) Measure. A secure message was sent using the electronic messaging function of Certified EHR Technology by more than 5 percent of unique patients (or their authorized representatives) seen by the EP during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following criteria:

(A) Has no office visits during the EHR reporting period.

(B) Who conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 3Mbps broadband availability according to the latest information available from the FCC on the first day of their EHR reporting period.

(k) Stage 2 menu set criteria for EPs. An EP must meet 3 of the following objectives and associated measures, unless the EP has an exclusion from 4 or more objectives in this paragraph (k) of this section, in which case the EP must meet all remaining objectives and associated measures.

(1)

(i) Objective. Imaging results consisting of the image itself and any explanation or other accompanying information are accessible through Certified EHR Technology.

(ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of all tests whose result is one or more images ordered by the EP during the EHR reporting period are accessible through Certified EHR Technology.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following criteria.

(A) Orders less than 100 tests whose result is an image during the EHR reporting period.

(B) Has no access to electronic imaging results at the start of the EHR reporting period.

(2)

(i) Objective. Record patient family health history as structured data.

(ii) Measure. More than 20 percent of all unique patients seen by the EP during the EHR reporting period have a structured data entry for one or more first-degree relatives.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has no office visits during the EHR reporting period.

(3)

(i) Objective. Capability to submit electronic syndromic surveillance data to public health agencies, except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of electronic syndromic surveillance data from Certified EHR Technology to a public health agency for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP that meets one or more of the following criteria:

(A) Is not in a category of providers who collect ambulatory syndromic surveillance information on their patients during the EHR reporting period.

(B) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required for Certified EHR Technology at the start of their EHR reporting period.

(C) Operates in a jurisdiction where no public health agency provides information timely on capability to receive syndromic surveillance data.

(D) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional EPs.

(4)

(i) Objective. Capability to identify and report cancer cases to a public health central cancer registry, except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of cancer case information from Certified EHR Technology to a public health central cancer registry for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following—

(A) Does not diagnose or directly treat cancer.

(B) Operates in a jurisdiction for which no public health agency is capable of receiving electronic cancer case information in the specific standards required for Certified EHR Technology at the start of their EHR reporting period.

(C) Operates in a jurisdiction where no public health agency provides information timely on capability to receive electronic cancer case information.

(D) Operates in a jurisdiction for which no public health agency that is capable of receiving electronic cancer case information in the specific standards required for Certified EHR Technology at the beginning of their EHR reporting period can enroll additional EPs.

(5)

(i) Objective. Capability to identify and report specific cases to a specialized registry (other than a cancer registry), except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of specific case information from Certified EHR Technology to a specialized registry for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following criteria:

(A) Does not diagnose or directly treat any disease associated with a specialized registry sponsored by a national specialty society for which the EP is eligible, or the public health agencies in their jurisdiction;

(B) Operates in a jurisdiction for which no specialized registry sponsored by a public health agency or by a national specialty society for which the EP is eligible is capable of receiving electronic specific case information in the specific standards required by Certified EHR Technology at the beginning of their EHR reporting period;

(C) Operates in a jurisdiction where no public health agency or national specialty society for which the EP is eligible provides information timely on capability to receive information into their specialized registries; or

(D) Operates in a jurisdiction for which no specialized registry sponsored by a public health agency or by a national specialty society for which the EP is eligible that is capable of receiving electronic specific case information in the specific standards required by Certified EHR Technology at the beginning of his or her EHR reporting period can enroll additional EPs.

(6)

(i) Objective. Record electronic notes in patient records.

(ii) Measure. Enter at least one electronic progress note created, edited, and signed by an EP for more than 30 percent of unique patients with at least one office visit during the EHR reporting period. The text of the electronic note must be text-searchable and may contain drawings and other content.

(l) Stage 2 core criteria for eligible hospitals or CAHs. An eligible hospital or CAH must meet the following objectives and associated measures except those objectives and associated measures for which an eligible hospital or CAH qualifies for an exclusion under paragraph (i)(2) of this section.

(1)

(i) Objective. Use computerized provider order entry for medication, laboratory, and radiology orders directly entered by any licensed healthcare professional who can enter orders into the medical record per State, local, and professional guidelines.

(ii) Measures. Subject to paragraph (c) of this section, more than—

(A) Sixty percent of medication orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry,

(B) Thirty percent of laboratory orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry, and

(C) Thirty percent of radiology orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.

(2)

(i) Objective. Record all of the following demographics:

(A) Preferred language.

(B) Sex.

(C) Race.

(D) Ethnicity.

(E) Date of birth.

(F) Date and preliminary cause of death in the event of mortality in the eligible hospital or CAH.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have demographics recorded as structured data.

(3)

(i) Objective. Record and chart changes in the following vital signs:

(A) Height/Length.

(B) Weight.

(C) Blood pressure (ages 3 and over).

(D) Calculate and display body mass index (BMI).

(E) Plot and display growth charts for patients 0-20 years, including body mass index.

(ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have blood pressure (for patients age 3 and over only) and height/length and weight (for all ages) recorded as structured data.

(4)

(i) Objective. Record smoking status for patients 13 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients 13 years old or older admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have smoking status recorded as structured data.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that admits no patients 13 years old or older to their inpatient or emergency department (POS 21 or 23) during the EHR reporting period.

(5)

(i) Objective. Use clinical decision support to improve performance on high priority health conditions.

(ii) Measures.

(A) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an eligible hospital or CAH's patient population, the clinical decision support interventions must be related to high-priority health conditions; and

(B) The eligible hospital or CAH has enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.

(6)

(i) Objective. Incorporate clinical lab test results into Certified EHR Technology as structured data.

(ii) Measure. Subject to paragraph (c) of this section, more than 55 percent of all clinical lab tests results ordered by authorized providers of the eligible hospital or CAH for patients admitted to its inpatient or emergency department (POS 21 or 23) during the EHR reporting period whose results are either in a positive/negative affirmation or numerical format are incorporated in Certified EHR Technology as structured data.

(7)

(i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research or outreach.

(ii) Measure. Generate at least one report listing patients of the eligible hospital or CAH with a specific condition.

(8)

(i) Objective. Provide patients the ability to view online, download, and transmit information about a hospital admission.

(ii) Measures.

(A) More than 50 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have their information available online within 36 hours of discharge; and

(B) More than 5 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH (or their authorized representative) view, download or transmit to a third party their information during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 3Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (l)(8)(ii)(B) of this section.

(9)

(i) Objective. Use clinically relevant information from Certified EHR Technology to identify patient-specific education resources and provide those resources to the patient.

(ii) Measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient-specific education resources identified by Certified EHR Technology.

(10)

(i) Objective. The eligible hospital or CAH that receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation.

(ii) Measure. Subject to paragraph (c) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23).

(11)

(i) Objective. The eligible hospital or CAH that transitions their patient to another setting of care or provider of care or refers their patient to another provider of care provides a summary care record for each transition of care or referral.

(ii) Measures.

(A) Subject to paragraph (c) in this section, the eligible hospital or CAH that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals,

(B) Subject to paragraph (c) in this section, the eligible hospital or CAH that transitions their patient to another setting of care or provider of care provides a summary of care record for more than 10 percent of such transitions and referrals either—

(1) Electronically transmitted using Certified EHR Technology to a beneficiary; or

(2) Where the beneficiary receives the summary of care record via exchange facilitated by an organization that is a NwHIN Exchange participant or in a manner that is consistent with the governance mechanism ONC establishes for the nationwide health information network; and

(C) Subject to paragraph (c) of this section an eligible hospital or CAH must satisfy one of the following:

(1) Conducts one or more successful electronic exchanges of a summary of care record meeting the measure specified in paragraph (l)(11)(ii)(B) of this section with a beneficiary using technology to receive the summary of care record that was designed by a different EHR developer than the sender's EHR technology certified at 45 CFR 170.314(b)(2); or

(2) Conducts one or more successful tests with the CMS designated test EHR during the EHR reporting period.

(12)

(i) Objective. Capability to submit electronic data to immunization registries or immunization information systems except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of electronic immunization data from Certified EHR Technology to an immunization registry or immunization information system for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that meets one or more of the following criteria:

(A) The eligible hospital or CAH does not administer any of the immunizations to any of the populations for which data is collected by their jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(B) The eligible hospital or CAH operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required for Certified EHR Technology at the start of their EHR reporting period.

(C) The eligible hospital or CAH operates in a jurisdiction where no immunization registry or immunization information system provides information timely on capability to receive immunization data.

(D) Operates in a jurisdiction for which no immunization registry or immunization information system that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional eligible hospitals or CAHs.

(13)

(i) Objective. Capability to submit electronic reportable laboratory results to public health agencies, where except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of electronic reportable laboratory results from Certified EHR Technology to a public health agency for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that meets one or more of the following criteria:

(A) Operates in a jurisdiction for which no public health agency is capable of receiving electronic reportable laboratory results in the specific standards required for Certified EHR Technology at the start of their EHR reporting period.

(B) Operates in a jurisdiction for which no public health agency provides information timely on capability to receive electronic reportable laboratory results.

(C) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional eligible hospitals or CAHs.

(14)

(i) Objective. Capability to submit electronic syndromic surveillance data to public health agencies, except where prohibited, and in accordance with applicable law and practice.

(ii) Measure. Successful ongoing submission of electronic syndromic surveillance data from Certified EHR Technology to a public health agency for the entire EHR reporting period.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that meets one or more of the following criteria:

(A) Does not have an emergency or urgent care department.

(B) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required for Certified EHR Technology at the start of their EHR reporting period or can enroll additional eligible hospitals or CAHs.

(C) Operates in a jurisdiction for which no public health agency provides information timely on capability to receive syndromic surveillance data.

(D) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional eligible hospitals or CAHs.

(15)

(i) Objective. Protect electronic health information created or maintained by the Certified EHR Technology through the implementation of appropriate technical capabilities.

(ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the encryption/security of data stored in Certified EHR Technology in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary and correct identified security deficiencies as part of the eligible hospital's or CAH's risk management process.

(16)

(i) Objective. Automatically track medications from order to administration using assistive technologies in conjunction with an electronic medication administration record (eMAR).

(ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of medication orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period for which all doses are tracked using eMAR.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH with an average daily inpatient census of fewer than 10 patients.

(m) Stage 2 menu set criteria for eligible hospitals or CAHs. An eligible hospital or CAH must meet the measure criteria for three of the following objectives and associated measures.

(1)

(i) Objective. Record whether a patient 65 years old or older has an advance directive.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 65 years old or older admitted to the eligible hospital's or CAH's inpatient department (POS 21) during the EHR reporting period have an indication of an advance directive status recorded as structured data.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that admits no patients age 65 years old or older during the EHR reporting period.

(2)

(i) Objective. Imaging results consisting of the image itself and any explanation or other accompanying information are accessible through Certified EHR Technology.

(ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of all tests whose result is an image ordered by an authorized provider of the eligible hospital or CAH for patients admitted to its inpatient or emergency department (POS 21 or 23) during the EHR reporting period are accessible through Certified EHR Technology.

(3)

(i) Objective. Record patient family health history as structured data.

(ii) Measure. More than 20 percent of all unique patients admitted to the eligible hospital or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have a structured data entry for one or more first-degree relatives.

(4)

(i) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx).

(ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of hospital discharge medication orders for permissible prescriptions (for new, changed and refilled prescriptions) are queried for a drug formulary and transmitted electronically using Certified EHR Technology.

(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and there are no pharmacies that accept electronic prescriptions within 10 miles at the start of its EHR reporting period.

(5)

(i) Objective. Record electronic notes in patient records.

(ii) Measure: Enter at least one electronic progress note created, edited and signed by an authorized provider of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) for more than 30 percent of unique patients admitted to the eligible hospital or CAH's inpatient or emergency department during the EHR reporting period. The text of the electronic note must be text-searchable and may contain drawings and other content.

(6)

(i) Objective. Provide structured electronic lab results to ambulatory providers.

(ii) Measures. Hospital labs send structured electronic clinical lab results to the ordering provider for more than 20 percent of—

(A) The electronic lab orders received; or

(B) The lab orders received.

[75 FR 44565, July 28, 2010, as amended at 75 FR 81887, Dec. 29, 2010; 77 FR 54149, Sept. 4, 2012; 77 FR 64758, Oct. 23, 2012; 77 FR 72991, Dec. 7, 2012; 79 FR 52932, Sept. 4, 2014. Redesignated and amended at 80 FR 62943, Oct. 16, 2015; 85 FR 59026, Sept. 18, 2020]

§ 495.22 Meaningful use objectives and measures for EPs, eligible hospitals, and CAHs for 2015 through 2018.

(a) General rules.

(1) Subject to the provisions of paragraph (a)(2) of this section, the criteria specified in this section are applicable for EPs, eligible hospitals, and CAHs for 2015 through 2018.

(2) For 2017 and 2018, EPs, eligible hospitals, and CAHs that have successfully demonstrated meaningful use in a prior year have the option to use the criteria specified for 2019 in § 495.24 instead of the criteria specified for 2017 and 2018 under paragraphs (e) and (f) of this section.

(b) Criteria for EPs for 2015 through 2018 -

(1) General rule regarding criteria for meaningful use for 2015 through 2018 for EPs. Except as specified in paragraph (b)(2) of this section, EPs must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (e) of this section to meet the definition of a meaningful EHR user.

(2) Exclusion for non-applicable objectives.

(i) An EP may exclude a particular objective contained in paragraph (e) of this section, if the EP meets all of the following requirements:

(A) Must ensure that the objective in paragraph (e) of this section includes an option for the EP to attest that the objective is not applicable.

(B) Meets the criteria in the applicable objective that would permit the attestation to the exclusion.

(C) Attests.

(ii) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (e) of this section.

(c) Criteria for eligible hospitals and CAHs for 2015 through 2018 -

(1) General rule regarding criteria for meaningful use for 2015 through 2018 for eligible hospitals and CAHs. Except as specified in paragraph (c)(2) of this section, eligible hospitals and CAHs attesting to CMS must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (e) of this section to meet the definition of a meaningful EHR user in 2015 and 2016 and must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (f) of this section to meet the definition of a meaningful EHR user in 2017 and 2018. Except as specified in paragraph (c)(2) of this section, eligible hospitals and CAHs attesting to a State for the Medicaid EHR Incentive Program must meet all objectives and associated measures of the meaningful use criteria specified under paragraph (e) of this section to meet the definition of a meaningful EHR user in 2015 through 2018.

(2) Exclusion for non-applicable objectives.

(i) An eligible hospital or CAH may exclude a particular objective contained in paragraph (e) of this section, if the eligible hospital or CAH meets all of the following requirements:

(A) Must ensure that the objective in paragraph (e) of this section includes an option for the eligible hospital or CAH to attest that the objective is not applicable.

(B) Meets the criteria in the applicable objective that would permit the attestation to the exclusion.

(C) Attests.

(ii) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply in paragraph (e) of this section.

(d) Many of the objectives and associated measures in paragraph (e) of this section rely on measures that count unique patients or actions.

(1) If a measure (or associated objective) in paragraph (e) or (f) of this section references this paragraph (d), the measure may be calculated by reviewing only the actions for patients whose records are maintained using CEHRT. A patient's record is maintained using CEHRT if sufficient data were entered in the CEHRT to allow the record to be saved, and not rejected due to incomplete data.

(2) If the objective and associated measure does not reference this paragraph (d) of this section, then the measure must be calculated by reviewing all patient records, not just those maintained using CEHRT.

(e) Meaningful use objectives and measures for EPs for 2015 through 2018, for eligible hospitals and CAHs attesting to CMS for 2015 and 2016, and for eligible hospitals and CAHs attesting to a State for the Medicaid EHR Incentive Program for 2015 through 2018. -

(1) Protect patient health information -

(i) Objective. Protect electronic protected health information created or maintained by the CEHRT through the implementation of appropriate technical capabilities.

(ii) Measures -

(A) EP measure. Conduct or review a security risk analysis in accordance with the requirements in 45 CFR 164.308(a)(1), including addressing the security (to include encryption) of ePHI created or maintained by CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary and correct identified security deficiencies as part of the EP's risk management process.

(B) Eligible hospital or CAH measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including Addressing the security (to include encryption) of ePHI created or maintained in CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary, and correct identified security deficiencies as part of the eligible hospital's or CAH's risk management process.

(2) Clinical decision support -

(i) Objective. Use clinical decision support to improve performance on high-priority health conditions.

(ii) EP measures -

(A) Measure. In order for EPs to meet the objective they must satisfy both of the following measures:

(1) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an EP's scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions.

(2) Enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.

(B) Exclusion in accordance with paragraph (b)(2) of this section. An EP who writes fewer than 100 medication orders during the EHR reporting period may be excluded from the measure under paragraph (e)(2)(i)(A)(2) of this section.

(C) Alternate specifications. An EP previously scheduled to be in Stage 1 in 2015 may meet an alternate objective and measure specified in paragraph (e)(2)(ii)(C)(1) and (2) in place of the measure outlined under paragraph (e)(2)(ii)(A)(1) of this section for an EHR reporting period in 2015 only.

(1) Alternate objective. Implement one clinical decision support rule relevant to specialty or high clinical priority along with the ability to track compliance with that rule.

(2) Alternate measure. Implement one clinical decision support rule.

(iii) Eligible hospital and CAH measures -

(A) Measure. In order for eligible hospitals and CAHs to meet the objective they must satisfy both of the following measures:

(1) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an eligible hospital or CAH's scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions.

(2) Enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.

(B) Alternate specifications. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may meet an alternate measure described in paragraph (e)(2)(iii)(B)(2) of this section in place of the measure described in paragraph (e)(2)(iii)(A)(1) of this section for an EHR reporting period in 2015.

(1) Alternate objective. Implement one clinical decision support rule relevant to a high priority hospital condition along with the ability to track compliance with that rule.

(2) Alternate measure. Implement one clinical decision support rule.

(3) Computerized provider order entry -

(i) Objective. Use computerized provider order entry for medication, laboratory, and radiology orders directly entered by any licensed healthcare professional who can enter orders into the medical record per state, local, and professional guidelines.

(ii) EP measures -

(A) Measures. An EP must meet the following 3 measures, subject to paragraph (d) of this section:

(1) More than 60 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.

(2) More than 30 percent of laboratory orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.

(3) More than 30 percent of radiology orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.

(B) Exclusion in accordance with paragraph (b)(2) of this section.

(1) For the measure specified in paragraph (e)(3)(ii)(A)(1) of this section, any EP who writes fewer than 100 medication orders during the EHR reporting period.

(2) For the measure specified in paragraph (e)(3)(ii)(A)(2) of this section, any EP who writes fewer than 100 laboratory orders during the EHR reporting period.

(3) For the measure specified in paragraph (e)(3)(ii)(A)(3) of this section, any EP who writes fewer than 100 radiology orders during the EHR reporting period.

(C) Alternate exclusions and specifications. An EP previously scheduled to be in Stage 1 in 2015 may meet an alternate measure (e)(3)(ii)(C)(1) in place of the measure outlined under paragraph (e)(3)(ii)(A)(1) of this section, and may exclude the measures outlined under paragraphs (e)(3)(ii)(A)(2) and (3) of this section for an EHR reporting period in 2015. An EP previously scheduled to be in Stage 1 in 2016 may exclude the measures outlined under paragraphs (e)(3)(ii)(A)(2) and (3) of this section for an EHR reporting period in 2016.

(1) Alternate measure 1 in 2015. Subject to paragraph (d) of this section -

(i) More than 30 percent of all unique patients with at least one medication in their medication list seen by the EP during the EHR reporting period have at least one medication order entered using CPOE; or

(ii) More than 30 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.

(2) Alternate exclusions in 2015. An EP scheduled to be in Stage 1 in 2015 may exclude the measures specified in paragraphs (e)(3)(ii)(A)(2) and (e)(3)(ii)(A)(3) of this section in 2015.

(3) Alternate exclusions in 2016. An EP scheduled to be in Stage 1 in 2016 may exclude the measure specified in paragraphs (e)(3)(ii)(A)(2) and (e)(3)(ii)(A)(3) of this section in 2016.

(iii) Eligible hospital and CAH measures.

(A) An eligible hospital or CAH must meet the following 3 measures, subject to paragraph (d) of this section:

(1) More than 60 percent of medication orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.

(2) More than 30 percent of laboratory orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.

(3) More than 30 percent of radiology orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.

(B) Alternate exclusions and specifications.

(1) An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may meet an alternate measure specified in paragraph (e)(3)(iii)(B)(2) of this section in place of the measure outlined under paragraph (e)(3)(iii)(A)(1) of this section, and may exclude the measures outlined under paragraphs (e)(3)(iii)(A)(2) and (e)(3)(iii)(A)(3) of this section for an EHR reporting period in 2015. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2016 may exclude the measures outlined under paragraphs (e)(3)(iii)(A)(2) and (3) of this section for an EHR reporting period in 2016.

(2) Alternate measure 1 in 2015. Subject to paragraph (d) of this section -

(i) More than 30 percent of all unique patients with at least one medication in their medication list admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) have at least one medication order entered using CPOE; or

(ii) More than 30 percent of medication orders created by the authorized providers of the eligible hospital or CAH for patients admitted to their inpatient or emergency departments (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.

(3) Alternate exclusions in 2015 and 2016. An eligible hospital or CAH scheduled to be in Stage 1 in 2015 may exclude the following measures in 2015 and eligible hospital or CAH scheduled to be in Stage 1 in 2016 may exclude the following measures in 2016:

(i) The measure specified in paragraph (e)(3)(iii)(A)(2) of this section.

(ii) The measure specified in paragraph (e)(3)(iii)(A)(3) of this section.

(4) Electronic prescribing -

(i) Objective. For EPs, generate and transmit permissible prescriptions electronically (eRx); and, for eligible hospitals and CAHs, generate, and transmit permissible discharge prescriptions electronically (eRx).

(ii) EP measure -

(A) Measure. Subject to paragraph (d) of this section, more than 50 percent of all permissible prescriptions written by the EP are queried for a drug formulary and transmitted electronically using CEHRT.

(B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who -

(1) Writes fewer than 100 permissible prescriptions during the EHR reporting period; or

(2) Does not have a pharmacy within his or her organization and there are no pharmacies that accept electronic prescriptions within 10 miles of the EP's practice location at the start of his or her EHR reporting period.

(C) Alternate specification. In 2015 an EP -

(1) Previously scheduled to be in Stage 1 in 2015 may meet an alternate measure under paragraph (e)(4)(ii)(C)(2) of this section in place of the measure outlined under paragraph(e)(4)(ii)(A) of this section; and

(2) Subject to paragraph (d) of this section, more than 40 percent of all permissible prescriptions written by the EP are transmitted electronically using CEHRT.

(iii) Eligible hospital and CAH measure -

(A) Measure. Subject to paragraph (d) of this section, more than 10 percent of hospital discharge medication orders for permissible prescriptions are queried for a drug formulary and transmitted electronically using CEHRT.

(B) Exclusion in accordance with paragraph (c)(2) of this section. Any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and is not located within 10 miles of any pharmacy that accepts electronic prescriptions at the start of their EHR reporting period.

(C) Alternate exclusions.

(1) An eligible hospital or CAH previously scheduled to be in -

(i) Stage 1 in 2015 may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2015; or

(ii) Stage 2 in 2015 may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2015.

(2) An eligible hospital or CAH previously scheduled to be in -

(i) Stage 1 in 2016, may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2016; or

(ii) Stage 2 in 2016, may exclude the measure specified in paragraph (e)(4)(iii)(A) of this section for an EHR reporting period in 2016.

(5) Health Information Exchange -

(i) Objective. The EP, eligible hospital or CAH who transitions a patient to another setting of care or provider of care or refers a patient to another provider of care provides a summary care record for each transition of care or referral.

(ii) EP measure -

(A) Measure. Subject to paragraph (d) of this section, the EP who transitions or refers his or her patient to another setting of care or provider of care must do the following:

(1) Use CEHRT to create a summary of care record.

(2) Electronically transmit such summary to a receiving provider for more than 10 percent of transitions of care and referrals.

(B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who transfers a patient to another setting or refers a patient to another provider less than 100 times during the EHR reporting period.

(C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(5)(ii)(A) of this section for an EHR reporting period in 2015.

(iii) Eligible hospital and CAH measure -

(A) Measure. Subject to paragraph (d) of this section, the eligible hospital or CAH that transitions or refers its patient to another setting of care or provider of care must do the following:

(1) Use CEHRT to create a summary of care record.

(2) Electronically transmit such summary to a receiving provider for more than 10 percent of transitions of care and referrals.

(B) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(5)(iii)(A) of this section for an EHR reporting period in 2015.

(6) Patient specific education -

(i) Objective. Use clinically relevant information from CEHRT to identify patient-specific education resources and provide those resources to the patient.

(ii) EP measure -

(A) Measure. Patient-specific education resources identified by CEHRT are provided to patients for more than 10 percent of all unique patients with office visits seen by the EP during the EHR reporting period.

(B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who has no office visits during the EHR reporting period.

(C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(6)(ii)(A) of this section for an EHR reporting period in 2015.

(iii) Eligible hospital and CAH measure -

(A) Measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient-specific education resources identified by CEHRT.

(B) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(6)(iii)(A) of this section for an EHR reporting period in 2015.

(7) Medication reconciliation -

(i) Objective. The EP, eligible hospital or CAH that receives a patient from another setting of care or provider of care or believes an encounter is relevant performs medication reconciliation.

(ii) EP measure -

(A) Measure. Subject to paragraph (d) of this section, the EP performs medication reconciliation for more than 50 percent of transitions of care in which the patient is transitioned into the care of the EP.

(B) Exclusion in accordance with paragraph (b)(2) of this section. Any EP who was not the recipient of any transitions of care during the EHR reporting period.

(C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(7)(ii)(A) of this section for an EHR reporting period in 2015.

(iii) Eligible hospital or CAH measure. An eligible hospital or CAH must meet the following measure, subject to paragraph (d) of this section:

(A) Measure. Subject to paragraph (d) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23).

(B) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(7)(iii)(A) of this section for an EHR reporting period in 2015.

(8) Patient electronic access -

(i) EP objective. Provide patients the ability to view online, download, and transmit their health information within 4 business days of the information being available to the EP.

(A) EP measures. An EP must meet the following 2 measures:

(1) Measure 1: More than 50 percent of all unique patients seen by the EP during the EHR reporting period are provided timely access to view online, download and transmit to a third party their health information subject to the EP's discretion to withhold certain information.

(2) Measure 2: For an EHR reporting period -

(i) In 2015 and 2016, at least 1 patient seen by the EP during the EHR reporting period (or patient-authorized representative) views, downloads or transmits his or her health information to a third party during the EHR reporting period.

(ii) In 2017 and 2018, more than 5 percent of unique patients (or patient-authorized representatives) discharged from the inpatient or emergency department (POS 21 or POS 23) of an eligible hospital or CAH during the EHR reporting period view, download or transmit to a third party their health information during the EHR reporting period.

(B) Exclusion in accordance with paragraph (b)(2) of this section -

(1) Any EP who neither orders nor creates any of the information listed for inclusion as part of the measure in paragraph (e)(8)(ii)(A)(1) or (2) of this section, except for “Patient name” and “Provider's name and office contact information,” is excluded from paragraphs (e)(8)(ii)(A)(1) and (2) of this section.

(2) Any EP who conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the Federal Communications Commission on the first day of the EHR reporting period is excluded from paragraph (e)(8)(ii)(A)(2) of this section.

(C) Alternate exclusion. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(8)(ii)(A)(2) of this section for an EHR reporting period in 2015.

(ii) Eligible hospital and CAH objective. Provide patients the ability to view online, download, and transmit information within 36 hours of hospital discharge.

(A) Eligible hospital and CAH measures. An eligible hospital or CAH must meet the following 2 measures:

(1) Measure 1. More than 50 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have timely access to view online, download and transmit to a third party their health information.

(2) Measure 2. For an EHR reporting period -

(i) In 2015 or 2016, at least 1 patient (or patient-authorized representative) who is discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH during the EHR reporting period views, downloads or transmits to a third party his or her information during the EHR reporting period; and

(ii) In 2017 and 2018, more than 5 percent of unique patients (or patient-authorized representatives) discharged from the inpatient or emergency department (POS 21 or POS 23) of an eligible hospital or CAH during the EHR reporting period view, download or transmit to a third party their health information during the EHR reporting period.

(B) Exclusion applicable under paragraph (c)(2) of this section. Any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (e)(8)(iii)(A)(2) of this section.

(C) Alternate exclusion. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(8)(iii)(A)(2) of this section for an EHR reporting period in 2015.

(9) Secure messaging -

(i) EP objective. Use secure electronic messaging to communicate with patients on relevant health information.

(ii) EP measure -

(A) Measure. For an EHR reporting period -

(1) In 2015, the capability for patients to send and receive a secure electronic message with the EP was fully enabled during the EHR reporting period;

(2) In 2016, for at least 1 patient seen by the EP during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or the patient-authorized representative), or in response to a secure message sent by the patient (or the patient-authorized representative) during the EHR reporting period; and

(3) In 2017 and 2018, for more than 5 percent of unique patients seen by the EP during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or the patient-authorized representative), or in response to a secure message sent by the patient (or the patient-authorized representative) during the EHR reporting period.

(B) Exclusion in accordance with paragraph (b)(2) of this section. An EP may exclude from the measure if he or she -

(1) Has no office visits during the EHR reporting period; or

(2) Conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the Federal Communications Commission on the first day of the EP's EHR reporting period.

(C) Alternate specification. An EP previously scheduled to be in Stage 1 in 2015 may exclude the measure specified in paragraph (e)(9)(ii)(A) of this section for an EHR reporting period in 2015.

(10) Public Health Reporting -

(i) EP Public Health Reporting -

(A) Objective. The EP is in active engagement with a public health agency to submit electronic public health data from CEHRT, except where prohibited, and in accordance with applicable law and practice.

(B) Measures. In order to meet the objective under paragraph (e)(10)(i)(A) of this section, an EP must choose from measures 1 through 3 (as specified in paragraphs (e)(10)(i)(B)(1) through (3) of this section) and must successfully attest to any combination of two measures. The EP may attest to measure 3 (as specified in paragraph (e)(10)(i)(B)(3) of this section more than one time. These measures may be met by any combination in accordance with applicable law and practice.

(1) Immunization registry reporting. The EP is in active engagement with a public health agency to submit immunization data.

(2) Syndromic surveillance reporting. The EP is in active engagement with a public health agency to submit syndromic surveillance data.

(3) Specialized registry reporting. The EP is in active engagement to submit data to specialized registry.

(C) Exclusions in accordance with paragraph (b)(2) of this section.

(1) Any EP meeting one or more of the following criteria may be excluded from the immunization registry reporting measure in paragraph (e)(10)(i)(B)(1) of this section if the EP:

(i) Does not administer any immunizations to any of the populations for which data is collected by his or her jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(ii) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of his or her EHR reporting period.

(iii) Operates in a jurisdiction in which no immunization registry or immunization information system has declared readiness to receive immunization data from the EP at the start of the EHR reporting period.

(2) Any EP meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure described in paragraph (e)(10)(i)(B)(2) of the section if the EP:

(i) Is not in a category of providers from which ambulatory syndromic surveillance data is collected by their jurisdiction's syndromic surveillance system;

(ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data from EPs in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from EPs at the start of the EHR reporting period.

(3) Any EP who meets one or more of the following criteria may be excluded from the specialized registry reporting measure described in paragraph (e)(10)(i)(B)(3) of this section if the EP:

(i) Does not diagnose or treat any disease or condition associated with or collect relevant data that is required by a specialized registry in their jurisdiction during the EHR reporting period;

(ii) Operates in a jurisdiction for which no specialized registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period; or

(iii) Operates in a jurisdiction where no specialized registry for which the EP is eligible has declared readiness to receive electronic registry transactions at the beginning of the EHR reporting period.

(D) Alternate specifications. An EP previously scheduled to be in Stage 1 in 2015 may choose from measures 1 through 3 (as specified in paragraphs (e)(10)(i)(B)(1) through (3) of this section) and must successfully attest to any one measure in accordance with applicable law and practice for an EHR reporting period in 2015.

(ii) Eligible hospital and CAH Public Health and Clinical Data Registry reporting objective -

(A) Objective. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic public health data from CEHRT, except where prohibited, and in accordance with applicable law and practice.

(B) Measures. In order to meet the objective under paragraph (e)(10)(ii)(A) of this section, an eligible hospital or CAH must choose from measures 1 through 4 (as described in paragraphs (e)(10)(ii)(B)(1) through (4) of this section) and must successfully attest to any combination of three measures. These measures may be met by any combination, including meeting the measure specified in paragraph (e)(10)(ii)(B)(3) of this section multiple times, in accordance with applicable law and practice:

(1) Immunization registry reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization.

(2) Syndromic surveillance reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data

(3) Specialized registry reporting. The eligible hospital or CAH is in active engagement to submit data to a specialized registry.

(4) Electronic reportable laboratory result reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.

(C) Exclusions in accordance with paragraph (c)(2) of this section.

(1) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the immunization registry reporting measure specified in paragraph (e)(10)(ii)(B)(1) of this section if the eligible hospital or CAH:

(i) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(ii) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data from the eligible hospital or CAH at the start of the EHR reporting period.

(2) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure specified in paragraph (e)(10)(ii)(B)(2) of this section if the eligible hospital or CAH:

(i) Does not have an emergency or urgent care department.

(ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data from eligible hospitals or CAHs in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs at the start of the EHR reporting period.

(3) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the specialized registry reporting measure described in paragraph (e)(10)(i)(B)(3) of this section if the eligible hospital or CAH:

(i) Does not diagnose or directly treat any disease associated with or collect relevant data is required by a specialized registry for which the eligible hospital or CAH is eligible in their jurisdiction.

(ii) Operates in a jurisdiction for which no specialized registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period; or

(iii) Operates in a jurisdiction where no specialized registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions at the beginning of the EHR reporting period.

(4) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (d)(10)(ii)(B)(4) of this section if the eligible hospital or CAH:

(i) Does not perform or order laboratory tests that are reportable in the eligible hospital's or CAH's jurisdiction during the EHR reporting period

(ii) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from eligible hospitals or CAHs at the start of the EHR reporting period.

(D) Alternate specification. An eligible hospital or CAH previously scheduled to be in Stage 1 in 2015 may choose from measures 1 through 4 (as specified in paragraphs (e)(10)(ii)(B)(1) through (4) of this section) and must successfully attest to any 2 measures. These measures may be met by any combination, including meeting the measures specified in paragraph (e)(10)(ii)(B)(3) of this section multiple times, in accordance with applicable law and practice.

(f) Meaningful use objectives and measures for eligible hospitals and CAHs attesting to CMS for 2017 and 2018 -

(1) Protect patient health information -

(i) Objective. Protect electronic protected health information created or maintained by the CEHRT through the implementation of appropriate technical capabilities.

(ii) Security risk analysis measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the security (to include encryption) of ePHI created or maintained in CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary, and correct identified security deficiencies as part of the eligible hospital's or CAH's risk management process.

(2)-(3) [Reserved]

(4) Electronic Prescribing -

(i) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx).

(ii) e-Prescribing measure. Subject to the provisions of paragraph (d) of this section, more than 10 percent of hospital discharge medication orders for permissible prescriptions are queried for a drug formulary and transmitted electronically using CEHRT.

(iii) Exclusion for nonapplicable objectives. Subject to the provisions of paragraph (c)(2) of this section, any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and is not located within 10 miles of any pharmacy that accepts electronic prescriptions at the start of their EHR reporting period.

(5) Health Information Exchange -

(i) Objective. The eligible hospital or CAH who transitions a patient to another setting of care or provider of care or refers a patient to another provider of care provides a summary care record for each transition of care or referral.

(ii) Health information exchange measure. Subject to the provisions of paragraph (d) of this section, the eligible hospital or CAH that transitions or refers their patient to another setting of care or provider of care must do the following:

(A) Use CEHRT to create a summary of care record; and

(B) Electronically transmit such summary to a receiving provider for more than 10 percent of transitions of care and referrals.

(6) Patient specific education -

(i) Objective. Use clinically relevant information from CEHRT to identify patient-specific education resources and provide those resources to the patient.

(ii) Patient-specific education measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient specific education resources identified by CEHRT.

(7) Medication reconciliation -

(i) Objective. The eligible hospital or CAH that receives a patient from another setting of care or provider of care or believes an encounter is relevant performs medication reconciliation.

(ii) Medication reconciliation measure. Subject to the provisions of paragraph (d) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23).

(8) Patient electronic access -

(i) Objective. Provide patients the ability to view online, download, and transmit information within 36 hours of hospital discharge.

(ii) Measures. An eligible hospital or CAH must meet the following two measures:

(A) Provide patient access measure. More than 50 percent of all unique patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have timely access to view online, download, and transmit to a third party their health information.

(B) View, download or transmit (VDT) measure. At least 1 patient (or patient-authorized representative) who is discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH during the EHR reporting period views, downloads, or transmits to a third party his or her information during the EHR reporting period.

(iii) Exclusion for nonapplicable objectives. Subject to the provisions of paragraph (c)(2) of this section, any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (f)(8)(ii)(B) of this section.

(9) Public health reporting -

(i) Objective. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic public health data from CEHRT, except where prohibited, and in accordance with applicable law and practice.

(ii) Measures. In order to meet the objective under paragraph (f)(9)(i) of this section, an eligible hospital or CAH must choose from measures 1 through 4 (as described in paragraphs (f)(9)(ii)(A) through (D) of this section).

(A) Immunization registry reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization data.

(B) Syndromic surveillance reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data.

(C) Specialized registry reporting measure. The eligible hospital or CAH is in active engagement to submit data to a specialized registry.

(D) Electronic reportable laboratory result reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.

(iii) Exclusions for non-applicable objectives. Subject to the provisions of paragraph (c)(2) of this section -

(A) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the immunization measure specified in paragraph (f)(9)(ii)(A) of this section if the eligible hospital or CAH -

(1) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(2) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data from the eligible hospital or CAH at the start of the EHR reporting period.

(B) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance measure specified in paragraph (f)(9)(ii)(B) of this section if the eligible hospital or CAH -

(1) Does not have an emergency or urgent care department.

(2) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data from eligible hospitals or CAHs in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs at the start of the EHR reporting period.

(C) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the specialized registry measure specified in paragraph (f)(9)(ii)(C) of this section if the eligible hospital or CAH -

(1) Does not diagnose or directly treat any disease associated with or collect relevant data is required by a specialized registry for which the eligible hospital or CAH is eligible in their jurisdiction.

(2) Operates in a jurisdiction for which no specialized registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period; or

(3) Operates in a jurisdiction where no specialized registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions at the beginning of the EHR reporting period.

(D) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (f)(9)(ii)(D) of this section if the eligible hospital or CAH -

(1) Does not perform or order laboratory tests that are reportable in the eligible hospital's or CAH's jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from eligible hospitals or CAHs at the start of the EHR reporting period.

[80 FR 62943, Oct. 16, 2015, as amended at 81 FR 11449, Mar. 4, 2016; 81 FR 79882, Nov. 14, 2016; 82 FR 38517, Aug. 14, 2017]

§ 495.24 Stage 3 meaningful use objectives and measures for EPs, eligible hospitals and CAHs for 2019 and subsequent years.

The criteria specified in paragraphs (c) and (d) of this section are optional for 2017 and 2018 for EPs, eligible hospitals, and CAHs that have successfully demonstrated meaningful use in a prior year. The criteria specified in paragraph (d) of this section are applicable for all EPs for 2019 and subsequent years, and for eligible hospitals and CAHs attesting to a State for the Medicaid Promoting Interoperability Program for 2019 and subsequent years. The criteria specified in paragraph (e) of this section are applicable for eligible hospitals and CAHs attesting to CMS for 2019 and subsequent years.

(a) Stage 3 criteria for EPs -

(1) General rule regarding Stage 3 criteria for meaningful use for EPs. Except as specified in paragraphs (a)(2) and (3) of this section, EPs must meet all objectives and associated measures of the Stage 3 criteria specified in paragraph (d) of this section to meet the definition of a meaningful EHR user.

(2) Selection of measures for specified objectives in paragraph (d) of this section. An EP may meet the criteria for 2 out of the 3 measures associated with an objective, rather than meeting the criteria for all 3 of the measures, if the EP meets all of the following requirements:

(i) Must ensure that the objective in paragraph (d) of this section includes an option to meet 2 out of the 3 associated measures.

(ii) Meets the threshold for 2 out of the 3 measures for that objective.

(iii) Attests to all 3 of the measures for that objective.

(3) Exclusion for non-applicable objectives and measures.

(i) An EP may exclude a particular objective that includes an option for exclusion contained in paragraph (d) of this section, if the EP meets all of the following requirements:

(A) Meets the criteria in the applicable objective that would permit the exclusion.

(B) Attests to the exclusion.

(ii) An EP may exclude a measure within an objective which allows for a provider to meet the threshold for 2 of the 3 measures, as outlined in paragraph (a)(2) of this section, in the following manner:

(A)

(1) Meets the criteria in the applicable measure or measures that would permit the exclusion; and

(2) Attests to the exclusion or exclusions.

(B)

(1) Meets the threshold; and

(2) Attests to any remaining measure or measures.

(4) Exception for Medicaid EPs who adopt, implement or upgrade in their first payment year. For Medicaid EPs who adopt, implement, or upgrade its CEHRT in their first payment year, the meaningful use objectives and associated measures of the Stage 3 criteria specified in paragraph (d) of this section apply beginning with the second payment year, and do not apply to the first payment year.

(5) Objectives and associated measures in paragraph (d) of this section that rely on measures that count unique patients or actions.

(i) If a measure (or associated objective) in paragraph (d) of this section references paragraph (a)(5) of this section, the measure may be calculated by reviewing only the actions for patients whose records are maintained using CEHRT. A patient's record is maintained using CEHRT if sufficient data were entered in the CEHRT to allow the record to be saved, and not rejected due to incomplete data.

(ii) If the objective and associated measure does not reference paragraph (a)(5) of this section, the measure must be calculated by reviewing all patient records, not just those maintained using CEHRT.

(b) Stage 3 criteria for meaningful use for eligible hospitals and CAHs -

(1) General rule. Except as specified in paragraphs (b)(2) and (3) of this section, eligible hospitals and CAHs must meet all objectives and associated measures of the Stage 3 criteria specified in paragraphs (c) and (d) of this section, as applicable, to meet the definition of a meaningful EHR user.

(2) Selection of measures for specified objectives in paragraphs (c) and (d) of this section. An eligible hospital or CAH may meet the criteria for 2 out of the 3 measures associated with an objective, rather than meeting the criteria for all 3 of the measures, if the eligible hospital or CAH meets all of the following requirements:

(i) Must ensure that the objective in paragraph (c) or (d) of this section, as applicable, includes an option to meet 2 out of the 3 associated measures.

(ii) Meets the threshold for 2 out of the 3 measures for that objective.

(iii) Attests to all 3 of the measures for that objective.

(3) Exclusion for nonapplicable objectives and measures.

(i) An eligible hospital or CAH may exclude a particular objective that includes an option for exclusion contained in paragraph (c) or (d) of this section, as applicable, if the eligible hospital or CAH meets all of the following requirements:

(A) Meets the criteria in the applicable objective that would permit the exclusion.

(B) Attests to the exclusion.

(ii) An eligible hospital or CAH may exclude a measure within an objective which allows for a provider to meet the threshold for 2 of the 3 measures, as outlined in paragraph (b)(2) of this section, in the following manner:

(A)

(1) Meets the criteria in the applicable measure or measures that would permit the exclusion; and

(2) Attests to the exclusion or exclusions.

(B)

(1) Meets the threshold; and

(2) Attests to any remaining measure or measures.

(4) Exception for Medicaid eligible hospitals or CAHs that adopt, implement or upgrade in their first payment year. For Medicaid eligible hospitals or CAHs that adopt, implement or upgrade CEHRT in their first payment year, the meaningful use objectives and associated measures of the Stage 3 criteria specified in paragraph (c) or (d) of this section apply beginning with the second payment year, and do not apply to the first payment year.

(5) Objectives and associated measures in paragraph (c) or (d) of this section that rely on measures that count unique patients or actions.

(i) If a measure (or associated objective) in paragraph (c) or (d) of this section, as applicable, references paragraph (b)(5) of this section, the measure may be calculated by reviewing only the actions for patients whose records are maintained using CEHRT. A patient's record is maintained using CEHRT if sufficient data were entered in the CEHRT to allow the record to be saved, and not rejected due to incomplete data.

(ii) If the objective and associated measure does not reference this paragraph (b)(5) of this section, the measure must be calculated by reviewing all patient records, not just those maintained using CEHRT.

(c) Stage 3 objectives and measures for eligible hospitals and CAHs attesting to CMS -

(1) Protect patient health information -

(i) Objective. Protect electronic protected health information (ePHI) created or maintained by the CEHRT through the implementation of appropriate technical, administrative, and physical safeguards.

(ii) Security risk analysis measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the security (including encryption) of data created or maintained by CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), implement security updates as necessary, and correct identified security deficiencies as part of the provider's risk management process.

(2) Electronic prescribing -

(i) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx).

(ii) e-Prescribing measure. Subject to paragraph (b)(5) of this section, more than 25 percent of hospital discharge medication orders for permissible prescriptions (for new and changed prescriptions) are queried for a drug formulary and transmitted electronically using CEHRT.

(iii) Exclusions in accordance with paragraph (b)(3) of this section. Any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and there are no pharmacies that accept electronic prescriptions within 10 miles at the start of the eligible hospital or CAH's EHR reporting period.

(3)-(4) [Reserved]

(5) Patient electronic access to health information -

(i) Objective. The eligible hospital or CAH provides patients (or patient-authorized representative) with timely electronic access to their health information and patient-specific education.

(ii) Measures. Eligible hospitals and CAHs must meet the following two measures:

(A) Provide patient access measure. For more than 50 percent of all unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23):

(1) The patient (or patient-authorized representative) is provided timely access to view online, download, and transmit his or her health information; and

(2) The provider ensures the patient's health information is available for the patient (or patient-authorized representative) to access using any application of their choice that is configured to meet the technical specifications of the API in the provider's CEHRT.

(B) Patient-specific education measure. The eligible hospital or CAH must use clinically relevant information from CEHRT to identify patient-specific educational resources and provide electronic access to those materials to more than 10 percent of unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (b)(3) of this section. Any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from the measures specified in paragraphs (c)(5)(ii)(A) and (B) of this section.

(6) Coordination of care through patient engagement -

(i) Objective. Use CEHRT to engage with patients or their authorized representatives about the patient's care.

(ii) Measures. In accordance with paragraph (b)(2) of this section, an eligible hospital or CAH must satisfy 2 of the 3 following measures in paragraphs (c)(6)(ii)(A), (B), and (C) of this section, except those measures for which an eligible hospital or CAH qualifies for an exclusion under paragraph (b)(3) of this section.

(A) View, download or transmit (VDT) measure. During the EHR reporting period, at least one unique patient (or their authorized representatives) discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) actively engage with the electronic health record made accessible by the provider and one of the following:

(1) View, download or transmit to a third party their health information.

(2) Access their health information through the use of an API that can be used by applications chosen by the patient and configured to the API in the provider's CEHRT; or

(3) A combination of paragraphs (c)(6)(ii)(A)(1) and (2) of this section.

(B) Secure messaging measure. During the EHR reporting period, more than 5 percent of all unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or the patient authorized representative), or in response to a secure message sent by the patient (or the patient authorized representative).

(C) Patient generated health data. Patient generated health data or data from a non-clinical setting is incorporated into the CEHRT for more than 5 percent of unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period.

(iii) Exclusions under paragraph (b)(3) of this section. Any eligible hospital or CAH operating in a location that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may exclude from the measures specified in paragraphs (c)(6)(ii)(A) through (C) of this section.

(7) Health information exchange -

(i) Objective. The eligible hospital or CAH provides a summary of care record when transitioning or referring their patient to another setting of care, receives or retrieves a summary of care record upon the receipt of a transition or referral or upon the first patient encounter with a new patient, and incorporates summary of care information from other providers into their EHR using the functions of CEHRT.

(ii) Measures. In accordance with paragraph (b)(2) of this section, a eligible hospital or CAH must attest to all 3 measures, but must meet the threshold for 2 of the 3 measures in paragraphs (e)(7)(ii)(A) through (C) of this section. Subject to paragraph (b)(5) of this section -

(A) Send a summary of care measure. For more than 10 percent of transitions of care and referrals, the eligible hospital or CAH that transitions or refers its patient to another setting of care or provider of care -

(1) Creates a summary of care record using CEHRT; and

(2) Electronically exchanges the summary of care record.

(B) Request/accept summary of care measure. For more than 10 percent of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, the eligible hospital or CAH incorporates into the patient's EHR an electronic summary of care document.

(C) Clinical information reconciliation measure. For more than 50 percent of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, the eligible hospital or CAH performs a clinical information reconciliation. The provider must implement clinical information reconciliation for the following three clinical information sets:

(1) Medication. Review of the patient's medication, including the name, dosage, frequency, and route of each medication.

(2) Medication allergy. Review of the patient's known allergic medications.

(3) Current problem list. Review of the patient's current and active diagnoses.

(iii) Exclusions in accordance with paragraph (b)(3) of this section.

(A) Any eligible hospital or CAH for whom the total of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, is fewer than 100 during the EHR reporting period may be excluded from paragraphs (c)(7)(ii)(B) and (C) of this section.

(B) Any eligible hospital or CAH operating in a location that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may be excluded from the measures specified in paragraphs (e)(7)(ii)(A) and (B) of this section.

(8) Public health and clinical data registry reporting -

(i) Objective. The eligible hospital or CAH is in active engagement with a public health agency (PHA) or clinical data registry (CDR) to submit electronic public health data in a meaningful way using CEHRT, except where prohibited, and in accordance with applicable law and practice.

(ii) Measures. In order to meet the objective under paragraph (c)(8)(i) of this section, an eligible hospital or CAH must choose from measures 1 through 6 (as described in paragraphs (c)(8)(ii)(A) through (F) of this section) and must successfully attest to any combination of three measures. These measures may be met by any combination, including meeting the measure specified in paragraphs (c)(8)(ii)(D) and (E) of this section multiple times, in accordance with applicable law and practice:

(A) Immunization registry reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization data and receive immunization forecasts and histories from the public health immunization registry/immunization information system (IIS).

(B) Syndromic surveillance reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data from an urgent care setting.

(C) Electronic case reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit case reporting of reportable conditions.

(D) Public health registry reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit data to public health registries.

(E) Clinical data registry reporting measure. The eligible hospital or CAH is in active engagement to submit data to a clinical data registry.

(F) Electronic reportable laboratory result reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.

(iii) Exclusions in accordance with paragraph (b)(3) of this section.

(A) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the immunization registry reporting measure specified in paragraph (c)(8)(ii)(A) of this section if the eligible hospital or CAH -

(1) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(2) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data as of 6 months prior to the start of the EHR reporting period.

(B) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure specified in paragraph (c)(8)(ii)(B) of this section if the eligible hospital or CAH -

(1) Does not have an emergency or urgent care department.

(2) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs as of 6 months prior to the start of the EHR reporting period.

(C) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the case reporting measure specified in paragraph (e)(8)(ii)(C) of this section if the eligible hospital or CAH -

(1) Does not treat or diagnose any reportable diseases for which data is collected by their jurisdiction's reportable disease system during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency is capable of receiving electronic case reporting data in the specific standards required to meet the CEHRT definition at the start of their EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic case reporting data as of 6 months prior to the start of the EHR reporting period.

(D) Any eligible hospital or CAH meeting at least one of the following criteria may be excluded from the public health registry reporting measure specified in paragraph (c)(8)(ii)(D) of this section if the eligible hospital or CAH -

(1) Does not diagnose or directly treat any disease or condition associated with a public health registry in its jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(E) Any eligible hospital or CAH meeting at least one of the following criteria may be excluded from the clinical data registry reporting measure specified in paragraph (c)(8)(ii)(E) of this section if the eligible hospital or CAH -

(1) Does not diagnose or directly treat any disease or condition associated with a clinical data registry in their jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no clinical data registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no clinical data registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(F) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (c)(8)(ii)(F) of this section if the eligible hospital or CAH -

(1) Does not perform or order laboratory tests that are reportable in its jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from an eligible hospital or CAH as of 6 months prior to the start of the EHR reporting period.

(d) Stage 3 objectives and measures for all EPs for 2019 and subsequent years, and for eligible hospitals and CAHs attesting to a State for the Medicaid Promoting Interoperability Program for 2019 and subsequent years -

(1) Protect patient health information -

(i) EP protect patient health information -

(A) Objective. Protect electronic protected health information (ePHI) created or maintained by the CEHRT through the implementation of appropriate technical, administrative, and physical safeguards.

(B) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the security (including encryption) of data created or maintained by CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), implement security updates as necessary, and correct identified security deficiencies as part of the provider's risk management process.

(ii) Eligible hospital/CAH protect patient health information -

(A) Objective. Protect electronic protected health information (ePHI) created or maintained by the CEHRT through the implementation of appropriate technical, administrative, and physical safeguards.

(B) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the security (including encryption) of data created or maintained by CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), implement security updates as necessary, and correct identified security deficiencies as part of the provider's risk management process.

(2) Electronic Prescribing -

(i) EP Electronic Prescribing -

(A) Objective. Generate and transmit permissible prescriptions electronically (eRx).

(B) Measure. Subject to paragraph (a)(5) of this section, more than 60 percent of all permissible prescriptions written by the EP are queried for a drug formulary and transmitted electronically using CEHRT.

(C) Exclusions in accordance with paragraph (a)(3) of this section.

(1) Any EP who writes fewer than 100 permissible prescriptions during the EHR reporting period; or

(2) Any EP who does not have a pharmacy within its organization and there are no pharmacies that accept electronic prescriptions within 10 miles of the EP's practice location at the start of his/her EHR reporting period.

(ii) Eligible hospital/CAH electronic prescribing -

(A) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx).

(B) Measure. Subject to paragraph (b)(5) of this section, more than 25 percent of hospital discharge medication orders for permissible prescriptions (for new and changed prescriptions) are queried for a drug formulary and transmitted electronically using CEHRT.

(C) Exclusions in accordance with paragraph (b)(3) of this section. Any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and there are no pharmacies that accept electronic prescriptions within 10 miles at the start of the eligible hospital or CAH's EHR reporting period.

(3) Clinical decision support -

(i) EP clinical decision support -

(A) Objective. Implement clinical decision support (CDS) interventions focused on improving performance on high-priority health conditions.

(B) Measures.

(1) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an EP's scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions; and

(2) The EP has enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.

(C) Exclusion in accordance with paragraph (a)(3) of this section for paragraph (d)(3)(i)(B)(2) of this section. An EP who writes fewer than 100 medication orders during the EHR reporting period.

(ii) Eligible hospital/CAH clinical decision support -

(A) Objective. Implement clinical decision support (CDS) interventions focused on improving performance on high-priority health conditions.

(B) Measures.

(1) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an eligible hospital or CAH's patient population, the clinical decision support interventions must be related to high-priority health conditions; and

(2) The eligible hospital or CAH has enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.

(4) Computerized provider order entry (CPOE) -

(i) EP CPOE -

(A) Objective. Use computerized provider order entry (CPOE) for medication, laboratory, and diagnostic imaging orders directly entered by any licensed healthcare professional, credentialed medical assistant, or a medical staff member credentialed to and performing the equivalent duties of a credentialed medical assistant, who can enter orders into the medical record per state, local, and professional guidelines.

(B) Measures. Subject to paragraph (a)(5) of this section -

(1) More than 60 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry;

(2) More than 60 percent of laboratory orders created by the EP during the EHR reporting period are recorded using computerized provider order entry; and

(3) More than 60 percent of diagnostic imaging orders created by the EP during the EHR reporting period are recorded using computerized provider order entry.

(C) Exclusions in accordance with paragraph (a)(3) of this section.

(1) For the measure specified in paragraph (d)(4)(i)(B)(1) of this section, any EP who writes fewer than 100 medication orders during the EHR reporting period.

(2) For the measure specified in paragraph (d)(4)(i)(B)(2) of this section, any EP who writes fewer than 100 laboratory orders during the EHR reporting period.

(3) For the measure specified in paragraph (d)(4)(i)(B)(3) of this section, any EP who writes fewer than 100 diagnostic imaging orders during the EHR reporting period.

(ii) Eligible hospital and CAH CPOE -

(A) Objective. Use computerized provider order entry (CPOE) for medication, laboratory, and diagnostic imaging orders directly entered by any licensed healthcare professional, credentialed medical assistant, or a medical staff member credentialed to and performing the equivalent duties of a credentialed medical assistant; who can enter orders into the medical record per State, local, and professional guidelines.

(B) Measures. Subject to paragraph (b)(5) of this section -

(1) More than 60 percent of medication orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry;

(2) More than 60 percent of laboratory orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry; and

(3) More than 60 percent of diagnostic imaging orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.

(5) Patient electronic access to health information -

(i) EP patient electronic access to health information -

(A) Objective. The EP provides patients (or patient-authorized representative) with timely electronic access to their health information and patient-specific education.

(B) Measures. EPs must meet the following two measures:

(1) For more than 80 percent of all unique patients seen by the EP -

(i) The patient (or the patient-authorized representative) is provided timely access to view online, download, and transmit his or her health information; and

(ii) The provider ensures the patient's health information is available for the patient (or patient-authorized representative) to access using any application of their choice that is configured to meet the technical specifications of the API in the provider's CEHRT.

(2) The EP must use clinically relevant information from CEHRT to identify patient-specific educational resources and provide electronic access to those materials to more than 35 percent of unique patients seen by the EP during the EHR reporting period.

(C) Exclusions in accordance with paragraph (a)(3) of this section.

(1) Any EP who has no office visits during the reporting period may exclude from the measures specified in paragraphs (d)(5)(i)(B)(1) and (2) of this section.

(2) Any EP that conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may exclude from the measures specified in paragraphs (d)(5)(i)(B)(1) and (2) of this section.

(ii) Eligible hospital and CAH patient electronic access to health information -

(A) Objective. The eligible hospital or CAH provides patients (or patient-authorized representative) with timely electronic access to their health information and patient-specific education.

(B) Measures. Eligible hospitals and CAHs must meet the following two measures:

(1) For more than 80 percent of all unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23):

(i) The patient (or patient-authorized representative) is provided timely access to view online, download, and transmit his or her health information; and

(ii) The provider ensures the patient's health information is available for the patient (or patient-authorized representative) to access using any application of their choice that is configured to meet the technical specifications of the API in the provider's CEHRT.

(2) The eligible hospital or CAH must use clinically relevant information from CEHRT to identify patient-specific educational resources and provide electronic access to those materials to more than 35 percent of unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period.

(C) Exclusion in accordance with paragraph (b)(3) of this section. Any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from the measures specified in paragraphs (d)(5)(ii)(B)(1) and (2) of this section.

(6) Coordination of care through patient engagement -

(i) EP coordination of care through patient engagement -

(A) Objective. Use CEHRT to engage with patients or their authorized representatives about the patient's care.

(B) Measures. In accordance with paragraph (a)(2) of this section, an EP must satisfy 2 out of the 3 following measures in paragraphs (d)(6)(i)(B)(1) through (3) of this section except those measures for which an EP qualifies for an exclusion under paragraph (a)(3) of this section.

(1) During the EHR reporting period, more than 5 percent of all unique patients (or their authorized representatives) seen by the EP actively engage with the electronic health record made accessible by the provider and do either of the following:

(i) View, download or transmit to a third party their health information;

(ii) Access their health information through the use of an API that can be used by applications chosen by the patient and configured to the API in the provider's CEHRT; or

(iii) A combination of paragraphs (d)(6)(i)(B)(1)(i) and (ii) of this section.

(2) A secure message was sent using the electronic messaging function of CEHRT to the patient (or their authorized representatives), or in response to a secure message sent by the patient, for more than 5 percent of all unique patients seen by the EP during the EHR reporting period.

(3) Patient generated health data or data from a nonclinical setting is incorporated into the CEHRT for more than 5 percent of all unique patients seen by the EP during the EHR reporting period.

(C) Exclusions in accordance with paragraph (a)(3) of this section.

(1) Any EP who has no office visits during the reporting period may exclude from the measures specified in paragraphs (d)(6)(i)(B)(1) through (3) of this section.

(2) Any EP that conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may exclude from the measures specified in paragraphs (d)(6)(i)(B)(1) through (3) of this section.

(ii) Eligible hospital and CAH coordination of care through patient engagement -

(A) Objective. Use CEHRT to engage with patients or their authorized representatives about the patient's care.

(B) Measures. In accordance with paragraph (b)(2) of this section, an eligible hospital or CAH must satisfy 2 of the 3 following measures in paragraphs (d)(6)(ii)(B)(1) through (3) of this section, except those measures for which an eligible hospital or CAH qualifies for an exclusion under paragraph (b)(3) of this section.

(1) During the EHR reporting period, more than 10 percent of all unique patients (or their authorized representatives) discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) actively engage with the electronic health record made accessible by the provider and one of the following:

(i) View, download or transmit to a third party their health information.

(ii) Access their health information through the use of an API that can be used by applications chosen by the patient and configured to the API in the provider's CEHRT.

(iii) A combination of paragraphs (d)(6)(ii)(B)(1)(i) and (ii) of this section.

(iv) For an EHR reporting period in 2017 and 2018, an eligible hospital or CAH may meet a threshold of 5 percent instead of 10 percent for the measure at paragraph (d)(6)(ii)(B)(1) of this section.

(2) During the EHR reporting period -

(i) For an EHR reporting period in 2017 and 2018, for more than 5 percent of all unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or their authorized representatives), or in response to a secure message sent by the patient (or their authorized representatives).

(ii) For an EHR reporting period other than 2017 and 2018, for more than 25 percent of all unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period, a secure message was sent using the electronic messaging function of CEHRT to the patient (or their authorized representatives), or in response to a secure message sent by the patient (or their authorized representatives).

(3) Patient generated health data or data from a non-clinical setting is incorporated into the CEHRT for more than 5 percent of unique patients discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) during the EHR reporting period.

(C) Exclusions under paragraph (b)(3) of this section. Any eligible hospital or CAH operating in a location that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may exclude from the measures specified in paragraphs (d)(6)(ii)(B)(1) through (3) of this section.

(7) Health information exchange -

(i) EP health information exchange -

(A) Objective. The EP provides a summary of care record when transitioning or referring their patient to another setting of care, receives or retrieves a summary of care record upon the receipt of a transition or referral or upon the first patient encounter with a new patient, and incorporates summary of care information from other providers into their EHR using the functions of CEHRT.

(B) Measures. In accordance with paragraph (a)(2) of this section, an EP must attest to all 3 measures, but must meet the threshold for 2 of the 3 measures in paragraphs (d)(7)(i)(B)(1) through (3) of this section, in order to meet the objective. Subject to paragraph (c) of this section -

(1) Measure 1. For more than 50 percent of transitions of care and referrals, the EP that transitions or refers their patient to another setting of care or provider of care -

(i) Creates a summary of care record using CEHRT; and

(ii) Electronically exchanges the summary of care record.

(2) Measure 2. For more than 40 percent of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, the EP incorporates into the patient's EHR an electronic summary of care document.

(3) Measure 3. For more than 80 percent of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, the EP performs clinical information reconciliation. The EP must implement clinical information reconciliation for the following three clinical information sets:

(i) Medication. Review of the patient's medication, including the name, dosage, frequency, and route of each medication.

(ii) Medication allergy. Review of the patient's known allergic medications.

(iii) Current problem list. Review of the patient's current and active diagnoses.

(C) Exclusions in accordance with paragraph (a)(3) of this section. An EP must be excluded when any of the following occur:

(1) Any EP who transfers a patient to another setting or refers a patient to another provider less than 100 times during the EHR reporting period must be excluded from paragraph (d)(7)(i)(B)(1) of this section.

(2) Any EP for whom the total of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, is fewer than 100 during the EHR reporting period may be excluded from paragraphs (d)(7)(i)(B)(2) and (3) of this section.

(3) Any EP that conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may exclude from the measures specified in paragraphs (d)(7)(i)(B)(1) and (2) of this section.

(ii) Eligible hospitals and CAHs health information exchange -

(A) Objective. The eligible hospital or CAH provides a summary of care record when transitioning or referring their patient to another setting of care, receives or retrieves a summary of care record upon the receipt of a transition or referral or upon the first patient encounter with a new patient, and incorporates summary of care information from other providers into their EHR using the functions of CEHRT.

(B) Measures. In accordance with paragraph (b)(2) of this section, an eligible hospital or CAH must attest to all three measures, but must meet the threshold for 2 of the 3 measures in paragraphs (d)(7)(ii)(B)(1) through (3) of this section. Subject to paragraph (b)(5) of this section -

(1) Measure 1. For more than 50 percent of transitions of care and referrals, the eligible hospital or CAH that transitions or refers its patient to another setting of care or provider of care -

(i) Creates a summary of care record using CEHRT; and

(ii) Electronically exchanges the summary of care record.

(2) Measure 2. For more than 40 percent of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, the eligible hospital or CAH incorporates into the patient's EHR an electronic summary of care document from a source other than the provider's EHR system.

(3) Measure 3. For more than 80 percent of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, the eligible hospital or CAH performs a clinical information reconciliation. The provider must implement clinical information reconciliation for the following three clinical information sets:

(i) Medication. Review of the patient's medication, including the name, dosage, frequency, and route of each medication.

(ii) Medication allergy. Review of the patient's known allergic medications.

(iii) Current problem list. Review of the patient's current and active diagnoses.

(C) Exclusions in accordance with paragraph (b)(3) of this section.

(1) Any eligible hospital or CAH for whom the total of transitions or referrals received and patient encounters in which the provider has never before encountered the patient, is fewer than 100 during the EHR reporting period may be excluded from paragraphs (d)(7)(i)(B)(2) and (3) of this section.

(2) Any eligible hospital or CAH operating in a location that does not have 50 percent or more of its housing units with 4Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period may exclude from the measures specified in paragraphs (d)(7)(ii)(B)(1) and (2) of this section.

(8) Public Health and Clinical Data Registry Reporting -

(i) EP Public Health and Clinical Data Registry: Reporting objective -

(A) Objective. The EP is in active engagement with a public health agency or clinical data registry to submit electronic public health data in a meaningful way using CEHRT, except where prohibited, and in accordance with applicable law and practice.

(B) Measures. In order to meet the objective under paragraph (d)(8)(i)(A) of this section, an EP must choose from measures 1 through 5 (paragraphs (d)(8)(i)(B)(1) through (5) of this section) and must successfully attest to any combination of two measures. These measures may be met by any combination, including meeting measure specified in paragraph (d)(8)(i)(B)(4) or (5) of this section multiple times, in accordance with applicable law and practice:

(1) Immunization registry reporting. The EP is in active engagement with a public health agency to submit immunization data and receive immunization forecasts and histories from the public health immunization registry/immunization information system (IIS).

(2) Syndromic surveillance reporting. The EP is in active engagement with a public health agency to submit syndromic surveillance data from an urgent care setting, or from any other setting from which ambulatory syndromic surveillance data are collected by the state or a local public health agency.

(3) Electronic case reporting. The EP is in active engagement with a public health agency to submit case reporting of reportable conditions.

(4) Public health registry reporting. The EP is in active engagement with a public health agency to submit data to public health registries.

(5) Clinical data registry reporting. The EP is in active engagement to submit data to a clinical data registry.

(C) Exclusions in accordance with paragraph (a)(3) of this section.

(1) Any EP meeting one or more of the following criteria may be excluded from the immunization registry reporting measure in paragraph (d)(8)(i)(B)(1) of this section if the EP -

(i) Does not administer any immunizations to any of the populations for which data is collected by their jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(ii) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of its EHR reporting period.

(iii) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data as of 6 months prior to the start of the EHR reporting period.

(2) Any EP meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure described in paragraph (d)(8)(i)(B)(2) of the section if the EP -

(i) Is not in a category of providers from which ambulatory syndromic surveillance data is collected by their jurisdiction's syndromic surveillance system.

(ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from EPs as of 6 months prior to the start of the EHR reporting period.

(3) Any EP meeting one or more of the following criteria may be excluded from the case reporting measure at paragraph (d)(8)(i)(B)(3) of this section if the EP:

(i) Does not treat or diagnose any reportable diseases for which data is collected by their jurisdiction's reportable disease system during the EHR reporting period.

(ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic case reporting data in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic case reporting data as of 6 months prior to the start of the EHR reporting period.

(4) Any EP meeting at least one of the following criteria may be excluded from the public health registry reporting measure specified in paragraph (d)(8)(i)(B)(4) of this section if the EP -

(i) Does not diagnose or directly treat any disease or condition associated with a public health registry in the EP's jurisdiction during the EHR reporting period.

(ii) Operates in a jurisdiction for which no public health agency is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health registry for which the EP, eligible hospital, or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(5) Any EP meeting at least one of the following criteria may be excluded from the clinical data registry reporting measure specified in paragraph (d)(8)(i)(B)(5) of this section if the EP -

(i) Does not diagnose or directly treat any disease or condition associated with a clinical data registry in their jurisdiction during the EHR reporting period.

(ii) Operates in a jurisdiction for which no clinical data registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no clinical data registry for which the EP, eligible hospital, or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(ii) Eligible hospital and CAH Public Health and Clinical Data Registry: Reporting objective -

(A) Objective. The eligible hospital or CAH is in active engagement with a public health agency (PHA) or clinical data registry (CDR) to submit electronic public health data in a meaningful way using CEHRT, except where prohibited, and in accordance with applicable law and practice.

(B) Measures. In order to meet the objective under paragraph (d)(8)(ii)(A) of this section, an eligible hospital or CAH must choose from measures 1 through 6 (as described in paragraphs (d)(8)(ii)(B)(1) through (6) of this section) and must successfully attest to any combination of four measures. These measures may be met by any combination, including meeting the measure specified in paragraph (d)(8)(ii)(B)(4) or (5) of this section multiple times, in accordance with applicable law and practice:

(1) Immunization registry reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization data and receive immunization forecasts and histories from the public health immunization registry/immunization information system (IIS).

(2) Syndromic surveillance reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data from an urgent care setting.

(3) Case reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit case reporting of reportable conditions.

(4) Public health registry reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit data to public health registries.

(5) Clinical data registry reporting. The eligible hospital or CAH is in active engagement to submit data to a clinical data registry.

(6) Electronic reportable laboratory result reporting. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.

(C) Exclusions in accordance with paragraph (b)(3) of this section.

(1) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from to the immunization registry reporting measure specified in paragraph (d)(8)(ii)(B)(1) of this section if the eligible hospital or CAH -

(i) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(ii) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data as of 6 months prior to the start of the EHR reporting period.

(2) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure specified in paragraph (d)(8)(ii)(B)(2) of this section if the eligible hospital or CAH -

(i) Does not have an emergency or urgent care department.

(ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs as of 6 months prior to the start of the EHR reporting period.

(3) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the case reporting measure specified in paragraph (d)(8)(ii)(B)(3) of this section if the eligible hospital or CAH -

(i) Does not treat or diagnose any reportable diseases for which data is collected by their jurisdiction's reportable disease system during the EHR reporting period.

(ii) Operates in a jurisdiction for which no public health agency is capable of receiving electronic case reporting data in the specific standards required to meet the CEHRT definition at the start of their EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic case reporting data as of 6 months prior to the start of the EHR reporting period.

(4) Any eligible hospital or CAH meeting at least one of the following criteria may be excluded from the public health registry reporting measure specified in paragraph (d)(8)(ii)(B)(4) of this section if the eligible hospital or CAH -

(i) Does not diagnose or directly treat any disease or condition associated with a public health registry in its jurisdiction during the EHR reporting period.

(ii) Operates in a jurisdiction for which no public health agency is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(5) Any eligible hospital or CAH meeting at least one of the following criteria may be excluded from the clinical data registry reporting measure specified in paragraph (d)(8)(ii)(B)(5) of this section if the eligible hospital or CAH -

(i) Does not diagnose or directly treat any disease or condition associated with a clinical data registry in their jurisdiction during the EHR reporting period.

(ii) Operates in a jurisdiction for which no clinical data registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no clinical data registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(6) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (d)(8)(ii)(B)(6) of this section if the eligible hospital or CAH -

(i) Does not perform or order laboratory tests that are reportable in its jurisdiction during the EHR reporting period.

(ii) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.

(iii) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from an eligible hospital or CAH as of 6 months prior to the start of the EHR reporting period.

(e) Stage 3 objectives and measures for eligible hospitals and CAHs attesting to CMS for 2019 and subsequent years -

(1) General rule.

(i) Except as specified in paragraph (e)(2) of this section, eligible hospitals and CAHs must meet all objectives and associated measures of the Stage 3 criteria specified in this paragraph (e) and earn a total score of at least 50 points to meet the definition of a meaningful EHR user.

(ii) Beginning in CY 2020, the numerator and denominator of measures increment based on actions occurring during the EHR reporting period selected by the eligible hospital or CAH, unless otherwise indicated.

(2) Exclusion for nonapplicable measures.

(i) An eligible hospital or CAH may exclude a particular measure that includes an option for exclusion contained in this paragraph (e) if the eligible hospital or CAH meets the following requirements:

(A) Meets the criteria in the applicable measure that would permit the exclusion.

(B) Attests to the exclusion.

(ii) Distribution of points for nonapplicable measures. For eligible hospitals or CAHs that claim such exclusion, the points assigned to the excluded measure will be distributed to other measures as outlined in this paragraph (e).

(3) Objectives and associated measures in this paragraph (e) that rely on measures that count unique patients or actions.

(i) If a measure (or associated objective) in this paragraph (e) references paragraph (e)(3) of this section, the measure may be calculated by reviewing only the actions for patients whose records are maintained using CEHRT. A patient's record is maintained using CEHRT if sufficient data were entered in the CEHRT to allow the record to be saved, and not rejected due to incomplete data.

(ii) If the objective and associated measure does not reference this paragraph (e)(3), the measure must be calculated by reviewing all patient records, not just those maintained using CEHRT.

(4) Protect patient health information -

(i) Objective. Protect electronic protected health information (ePHI) created or maintained by the CEHRT through the implementation of appropriate technical, administrative, and physical safeguards.

(ii) Measure scoring. Eligible hospitals and CAHs are required to report on the security risk analysis measure in paragraph (e)(4)(iii) of this section, but no points are available for this measure.

(iii) Security risk analysis measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the security (including encryption) of data created or maintained by CEHRT in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), implement security updates as necessary, and correct identified security deficiencies as part of the provider's risk management process. Actions included in the security risk analysis measure may occur any time during the calendar year in which the EHR reporting period occurs.

(5) Electronic prescribing -

(i) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx).

(ii) Measures scoring.

(A) In 2019, eligible hospitals and CAHs must meet the e-Prescribing measure in paragraph (e)(5)(iii)(A) of this section and have the option to report on the query of PDMP measure and verify opioid treatment agreement measure in paragraphs (e)(5)(iii)(B) and (C) of this section. The electronic prescribing objective in paragraph (e)(5)(i) of this section is worth up to 20 points.

(B) In 2020 and subsequent years, eligible hospitals and CAHs must meet the e-Prescribing measure in paragraph (e)(5)(iii)(A) of this section and have the option to report on the query of PDMP measure in paragraph (e)(5)(iii)(B) of this section. In 2020 and subsequent years, the electronic prescribing objective in paragraph (e)(5)(i) of this section is worth up to 15 points.

(iii) Measures -

(A) e-Prescribing measure. Subject to paragraph (e)(3) of this section, at least one hospital discharge medication order for permissible prescriptions (for new and changed prescriptions) is queried for a drug formulary and transmitted electronically using CEHRT. This measure is worth up to 10 points in CY 2019 and subsequent years.

(B) Query of prescription drug monitoring program (PDMP) measure. Subject to paragraph (e)(3) of this section, for at least one Schedule II opioid electronically prescribed using CEHRT during the EHR reporting period, the eligible hospital or CAH uses data from CEHRT to conduct a query of a Prescription Drug Monitoring Program (PDMP) for prescription drug history, except where prohibited and in accordance with applicable law. This measure is worth 5 bonus points in CYs 2019, 2020, and 2021.

(C) Verify opioid treatment agreement measure. Subject to paragraph (e)(3) of this section, for at least one unique patient for whom a Schedule II opioid was electronically prescribed by the eligible hospital or CAH using CEHRT during the EHR reporting period, if the total duration of the patient's Schedule II opioid prescriptions is at least 30 cumulative days within a 6-month look-back period, the eligible hospital or CAH seeks to identify the existence of a signed opioid treatment agreement and incorporates it into the patient's electronic health record using CEHRT. This measure is worth 5 bonus points in CY 2019.

(iv) Exclusions in accordance with paragraph (e)(2) of this section and redistribution of points. An exclusion claimed under paragraph (e)(5)(v) of this section will redistribute 10 points in CY 2019 and CY 2020 equally among the measures associated with the health information exchange objective under paragraph (e)(6) of this section.

(v) Exclusion in accordance with paragraph (e)(2) of this section. Beginning with the EHR reporting period in CY 2019, any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and there are no pharmacies that accept electronic prescriptions within 10 miles at the start of the eligible hospital or CAH's EHR reporting period may be excluded from the measure specified in paragraph (e)(5)(iii)(A) of this section.

(6) Health information exchange -

(i) Objective. The eligible hospital or CAH provides a summary of care record when transitioning or referring their patient to another setting of care, receives or retrieves a summary of care record upon the receipt of a transition or referral or upon the first patient encounter with a new patient, and incorporates summary of care information from other providers into their EHR using the functions of CEHRT.

(ii) Measures. Eligible hospitals and CAHs must meet both of the following measures (each worth up to 20 points), and could receive up to 40 points for this objective:

(A) Support electronic referral loops by sending health information measure: Subject to paragraph (e)(3) of this section, for at least one transition of care or referral, the eligible hospital or CAH that transitions or refers its patient to another setting of care or provider of care -

(1) Creates a summary of care record using CEHRT; and

(2) Electronically exchanges the summary of care record.

(B) Support electronic referral loops by receiving and reconciling health information measure. Subject to paragraph (e)(3) of this section, for at least one electronic summary of care record received using CEHRT for patient encounters during the EHR reporting period for which an eligible hospital or CAH was the receiving party of a transition of care or referral, or for patient encounters during the EHR reporting period in which the eligible hospital or CAH has never before encountered the patient, the eligible hospital or CAH conducts clinical information reconciliation for medication, medication allergy, and current problem list using CEHRT.

(iii) Exclusions in accordance with paragraph (e)(2) of this section. Any eligible hospital or CAH that is unable to implement the support electronic referral loops by receiving and incorporating health information measure under paragraph (e)(6)(ii)(B) of this section for an EHR reporting period in 2019 may be excluded from that measure. Claiming the exclusion will redistribute 20 points to the support electronic referral loops by sending health information measure under paragraph (e)(6)(ii)(A) of this section.

(7) Provider to patient exchange. -

(i) Objective. The eligible hospital or CAH provides patients (or patient-authorized representative) with timely electronic access to their health information.

(ii) Provide patients electronic access to their health information measure. Eligible hospitals and CAHs must meet the following measure, and could receive up to 40 points for this objective beginning in CY 2019. For at least one unique patient discharged from the eligible hospital or CAH inpatient or emergency department (POS 21 or 23) -

(A) The patient (or patient-authorized representative) is provided timely access to view online, download, and transmit his or her health information; and

(B) The eligible hospital or CAH ensures the patient's health information is available for the patient (or patient-authorized representative) to access using any application of their choice that is configured to meet the technical specifications of the API in the eligible hospital or CAH's CEHRT. This measure is worth up to 40 points beginning in CY 2019.

(8) Public health and clinical data exchange. -

(i) Objective. The eligible hospital or CAH is in active engagement with a public health agency (PHA) or clinical data registry (CDR) to submit electronic public health data in a meaningful way using CEHRT, except where prohibited, and in accordance with applicable law and practice.

(ii) Measures. In order to meet the objective under paragraph (e)(8)(i) of this section, an eligible hospital or CAH must meet any two measures specified in paragraphs (e)(8)(ii)(A) through (F) of this section. Eligible hospitals and CAHs could receive a total of 10 points for this objective.

(A) Syndromic surveillance reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit syndromic surveillance data from an urgent care setting.

(B) Immunization registry reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit immunization data and receive immunization forecasts and histories from the public health immunization registry/immunization information system (IIS).

(C) Electronic case reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit case reporting of reportable conditions.

(D) Public health registry reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit data to public health registries.

(E) Clinical data registry reporting measure. The eligible hospital or CAH is in active engagement to submit data to a clinical data registry.

(F) Electronic reportable laboratory result reporting measure. The eligible hospital or CAH is in active engagement with a public health agency to submit electronic reportable laboratory results.

(iii) Exclusions in accordance with paragraph (e)(2) of this section. If an exclusion is claimed under paragraphs (e)(8)(iii)(A) through (F) of this section for each of the two measures selected for reporting, the 10 points for the objective specified in paragraph (e)(8)(i) of this section will be redistributed to the provide patients electronic access to their health information measure under paragraph (e)(7)(ii) of this section.

(A) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the syndromic surveillance reporting measure specified in paragraph (e)(8)(ii)(A) of this section if the eligible hospital or CAH -

(1) Does not have an emergency or urgent care department.

(2) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive syndromic surveillance data from eligible hospitals or CAHs as of 6 months prior to the start of the EHR reporting period.

(B) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from to the immunization registry reporting measure specified in paragraph (e)(8)(ii)(B) of this section if the eligible hospital or CAH -

(1) Does not administer any immunizations to any of the populations for which data is collected by its jurisdiction's immunization registry or immunization information system during the EHR reporting period.

(2) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no immunization registry or immunization information system has declared readiness to receive immunization data as of 6 months prior to the start of the EHR reporting period.

(C) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic case reporting measure specified in paragraph (e)(8)(ii)(C) of this section if the eligible hospital or CAH -

(1) Does not treat or diagnose any reportable diseases for which data is collected by their jurisdiction's reportable disease system during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency is capable of receiving electronic case reporting data in the specific standards required to meet the CEHRT definition at the start of their EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic case reporting data as of 6 months prior to the start of the EHR reporting period.

(D) Any eligible hospital or CAH meeting at least one of the following criteria may be excluded from the public health registry reporting measure specified in paragraph (e)(8)(ii)(D) of this section if the eligible hospital or CAH -

(1) Does not diagnose or directly treat any disease or condition associated with a public health registry in its jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(E) Any eligible hospital or CAH meeting at least one of the following criteria may be excluded from the clinical data registry reporting measure specified in paragraph (e)(8)(ii)(E) of this section if the eligible hospital or CAH -

(1) Does not diagnose or directly treat any disease or condition associated with a clinical data registry in their jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no clinical data registry is capable of accepting electronic registry transactions in the specific standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no clinical data registry for which the eligible hospital or CAH is eligible has declared readiness to receive electronic registry transactions as of 6 months prior to the start of the EHR reporting period.

(F) Any eligible hospital or CAH meeting one or more of the following criteria may be excluded from the electronic reportable laboratory result reporting measure specified in paragraph (e)(8)(ii)(F) of this section if the eligible hospital or CAH -

(1) Does not perform or order laboratory tests that are reportable in its jurisdiction during the EHR reporting period.

(2) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific ELR standards required to meet the CEHRT definition at the start of the EHR reporting period.

(3) Operates in a jurisdiction where no public health agency has declared readiness to receive electronic reportable laboratory results from an eligible hospital or CAH as of 6 months prior to the start of the EHR reporting period.

[81 FR 79884, Nov. 14, 2016, as amended at 82 FR 38517, August 14, 2017; 82 FR 46143, Oct. 4, 2017; 83 FR 41707, Aug. 17, 2018; 83 FR 60096, Nov. 23, 2018; 84 FR 42616, Aug. 16, 2019; 85 FR 59026, Sept. 18, 2020]

§ 495.40 Demonstration of meaningful use criteria.

(a) Demonstration by EPs. An EP must demonstrate that he or she satisfies each of the applicable objectives and associated measures under § 495.20, § 495.22 or § 495.24, supports information exchange and the prevention of health information blocking, and engages in activities related to supporting providers with the performance of CEHRT:

(1) For CY 2011 -

(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid EP, in a manner specified by the State), that during the EHR reporting period, the EP -

(A) Used certified EHR technology, and specify the technology used;

(B) Satisfied the required objectives and associated measures under § 495.20 or § 495.24;

(C) Must specify the EHR reporting period and provide the result of each applicable measure for all patients seen during the EHR reporting period for which a selected measure is applicable;

(ii) Additional requirements for Medicaid EPs. For Medicaid EPs, if, in accordance with §§ 495.316 and 495.332, CMS has approved a State's revised definition for meaningful use, in addition to meeting paragraphs (a)(1)(i) through (ii) of this section, the EP must also demonstrate meeting the State revised definition using the method approved by CMS; and

(iii) Exception for Medicaid EPs. If a Medicaid EP has adopted, implemented or upgraded certified EHR technology in the first payment year, the EP need not demonstrate meaningful use until the second payment year, as described in § 495.20 or §§ 495.24 and 495.40.

(2) For CY 2012 and subsequent years -

(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid EP, in a manner specified by the State) that during the EHR reporting period, the EP -

(A) Used certified EHR technology and specify the technology used.

(B) For calendar years before 2015, satisfied the required objectives and associated measures under § 495.20 for the EP's stage of meaningful use.

(C) Must specify the EHR reporting period and provide the result of each applicable measure for all patients seen during the EHR reporting period for which a selected measure is applicable.

(D) For 2014 only, if the EP uses one of the options specified in § 495.20(a)(4) or (h)(3), the EP must attest that he or she is unable to fully implement 2014 Edition certified EHR technology for an EHR reporting period in 2014 due to delays in 2014 Edition certified EHR technology availability.

(E) For CYs 2015 through 2016, satisfied the required objectives and associated measures under § 495.22(e) for meaningful use.

(F) For CY 2017 and CY 2018: An EP that has successfully demonstrated it is a meaningful EHR user in any prior year may satisfy either the objectives and measures specified in § 495.22(e) for meaningful use or the objectives and measures specified in § 495.24(d) for meaningful use; an EP that has never successfully demonstrated it is a meaningful EHR user in any prior year must satisfy the objectives and measures specified in § 495.22(e) for meaningful use.

(G) For CY 2019 and subsequent years, satisfied the required objectives and associated measures under § 495.24(d) for meaningful use.

(H) Supporting providers with the performance of CEHRT (SPPC). To engage in activities related to supporting providers with the performance of CEHRT, the EP -

(1) Must attest that he or she:

(i) Acknowledges the requirement to cooperate in good faith with ONC direct review of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC direct review is received; and

(ii) If requested, cooperated in good faith with ONC direct review of his or her health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating its capabilities as implemented and used by the EP in the field.

(2) Optionally, may also attest that he or she:

(i) Acknowledges the option to cooperate in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC-ACB surveillance is received; and

(ii) If requested, cooperated in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating capabilities as implemented and used by the EP in the field.

(I) Support for health information exchange and the prevention of information blocking. For an EHR reporting period in CY 2017 and subsequent years, the EP must attest that he or she -

(1) Did not knowingly and willfully take action (such as to disable functionality) to limit or restrict the compatibility or interoperability of certified EHR technology.

(2) Implemented technologies, standards, policies, practices, and agreements reasonably calculated to ensure, to the greatest extent practicable and permitted by law, that the certified EHR technology was, at all relevant times -

(i) Connected in accordance with applicable law;

(ii) Compliant with all standards applicable to the exchange of information, including the standards, implementation specifications, and certification criteria adopted at 45 CFR part 170;

(iii) Implemented in a manner that allowed for timely access by patients to their electronic health information; and

(iv) Implemented in a manner that allowed for the timely, secure, and trusted bi-directional exchange of structured electronic health information with other health care providers (as defined by 42 U.S.C. 300jj(3)), including unaffiliated providers, and with disparate certified EHR technology and vendors.

(3) Responded in good faith and in a timely manner to requests to retrieve or exchange electronic health information, including from patients, health care providers (as defined by 42 U.S.C. 300jj(3)), and other persons, regardless of the requestor's affiliation or technology vendor.

(ii) Reporting clinical quality information. Successfully report the clinical quality measures selected by CMS to CMS or the States, as applicable, in the form and manner specified by CMS or the States, as applicable.

(iii) Additional requirements for Medicaid EPs. For Medicaid EPs, if, in accordance with §§ 495.316 and 495.332, CMS has approved a State's additional criteria for meaningful use, in addition to meeting paragraphs (a)(2)(i) through (iii), the EP must also demonstrate meeting such additional criteria using the method approved by CMS.

(iv) Exception for Medicaid EPs. If a Medicaid EP has adopted, implemented, or upgrade certified EHR technology in the first payment year, the EP need not demonstrate that it is a meaningful EHR user until the second payment year, as described in § 495.20 or §§ 495.24 and 495.40.

(v) Exception for Medicare EPs for 2012 and 2013 - Participation in the Physician Quality Reporting System-Medicare EHR Incentive Pilot. To satisfy the clinical quality measure reporting requirements of meaningful use, aside from attestation, an EP participating in the Physician Quality Reporting System may also participate in the Physician Quality Reporting System-Medicare EHR Incentive Pilot through one of the following methods:

(A) Submission of data extracted from the EP's certified EHR technology through a Physician Quality Reporting System qualified EHR data submission vendor; or

(B) Submission of data extracted from the EP's certified EHR technology, which must also be through a Physician Quality Reporting System qualified EHR.

(3) For all CYs, an EP who practices in multiple physical locations, not all of which have certified EHR technology available, will demonstrate meaningful use using only the locations where the EP has certified EHR technology available. (See also § 495.4 regarding the definition of meaningful EHR user).

(b) Demonstration by eligible hospitals and CAHs. An eligible hospital or CAH must demonstrate that it satisfies each of the applicable objectives and associated measures under § 495.20, § 495.22, or § 495.24, supports information exchange and the prevention of health information blocking, and engages in activities related to supporting providers with the performance of CEHRT:

(1) For FY 2011 -

(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid eligible hospital, in a manner specified by the State), that during the EHR reporting period, the eligible hospital or CAH -

(A) Used certified EHR and specify the technology used.

(B) Satisfied the required objectives and associated measures under § 495.20 or § 495.24.

(C) Must specify the EHR reporting period and provide the result of each applicable measure for all patients admitted to the inpatient or emergency department (POS 21 or 23) of the hospital during the EHR reporting period for which a selected measure is applicable.

(ii) Additional requirements for Medicaid eligible hospitals. For Medicaid eligible hospitals, if, in accordance with §§ 495.316 and 495.332, CMS has approved a State's revised definition for meaningful use, in addition to meeting paragraphs (b)(1)(i) through (ii) of this section, the eligible hospital must also demonstrate meeting the State's revised definition using the method approved by CMS.

(iii) Exception for Medicaid eligible hospitals. If a Medicaid eligible hospital has adopted, implemented or upgraded certified EHR technology in the first payment year, the eligible hospital need not demonstrate meaningful use until the second payment year, as described in § 495.20 or §§ 495.24 and 495.40.

(2) For FY 2012 and subsequent years -

(i) Attestation. Attest, through a secure mechanism, in a manner specified by CMS (or for a Medicaid eligible hospital, in a manner specified by the State), that during the EHR reporting period, the eligible hospital or CAH -

(A) Used certified EHR and specify the technology used;

(B) For fiscal years before 2015, satisfied the required objectives and associated measures under § 495.20 for the eligible hospital or CAH's stage of meaningful use.

(C) Must specify the EHR reporting period and provide the result of each applicable measure for all patients admitted to the inpatient or emergency department (POS 21 or 23) of the hospital during the EHR reporting period for which a selected measure is applicable.

(D) For 2014 only, if the eligible hospital or CAH uses one of the options specified in § 495.20(b)(4) or (h)(3), it must attest that it is unable to fully implement 2014 Edition certified EHR technology for an EHR reporting period in 2014 due to delays in 2014 Edition certified EHR technology availability.

(E) For CYs 2015 through 2016, satisfied the required objectives and associated measures under § 495.22(e) for meaningful use.

(F) For CY 2017 and CY 2018:

(1) For an eligible hospital or CAH attesting to CMS: An eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year may satisfy either the objectives and measures specified in § 495.22(f) for meaningful use or the objectives and measures specified in § 495.24(c) for meaningful use; an eligible hospital or CAH that has never successfully demonstrated it is a meaningful EHR user in any prior year must satisfy the objectives and measures specified in § 495.22(f) for meaningful use.

(2) For an eligible hospital or CAH attesting to a State for the Medicaid EHR Incentive Program: An eligible hospital or CAH that has successfully demonstrated it is a meaningful EHR user in any prior year may satisfy either the objectives and measures specified in § 495.22(e) for meaningful use or the objectives and measures specified in § 495.24(d) for meaningful use; an eligible hospital or CAH that has never successfully demonstrated it is a meaningful EHR user in any prior year must satisfy the objectives and measures specified in § 495.22(e) for meaningful use.

(G) For CY 2019:

(1) For an eligible hospital or CAH attesting to CMS, satisfied the required objectives and associated measures under § 495.24(c) for meaningful use.

(2) For an eligible hospital or CAH attesting to a State for the Medicaid EHR Incentive Program, satisfied the required objectives and associated measures under § 495.24(d) for meaningful use.

(H) Supporting providers with the performance of CEHRT (SPPC). To engage in activities related to supporting providers with the performance of CEHRT, the eligible hospital or CAH -

(1) Must attest that it:

(i) Acknowledges the requirement to cooperate in good faith with ONC direct review of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC direct review is received; and

(ii) If requested, cooperated in good faith with ONC direct review of its health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating its capabilities as implemented and used by the eligible hospital or CAH in the field.

(2) Optionally, may attest that it:

(i) Acknowledges the option to cooperate in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program if a request to assist in ONC-ACB surveillance is received; and

(ii) If requested, cooperated in good faith with ONC-ACB surveillance of his or her health information technology certified under the ONC Health IT Certification Program as authorized by 45 CFR part 170, subpart E, to the extent that such technology meets (or can be used to meet) the definition of CEHRT, including by permitting timely access to such technology and demonstrating its capabilities as implemented and used by the eligible hospital or CAH in the field.

(I) Support for health information exchange and the prevention of information blocking. For an EHR reporting period in CY 2017 and subsequent years, the eligible hospital or CAH must attest that it -

(1) Did not knowingly and willfully take action (such as to disable functionality) to limit or restrict the compatibility or interoperability of certified EHR technology.

(2) Implemented technologies, standards, policies, practices, and agreements reasonably calculated to ensure, to the greatest extent practicable and permitted by law, that the certified EHR technology was, at all relevant times -

(i) Connected in accordance with applicable law;

(ii) Compliant with all standards applicable to the exchange of information, including the standards, implementation specifications, and certification criteria adopted at 45 CFR part 170;

(iii) Implemented in a manner that allowed for timely access by patients to their electronic health information; and

(iv) Implemented in a manner that allowed for the timely, secure, and trusted bi-directional exchange of structured electronic health information with other health care providers (as defined by 42 U.S.C. 300jj(3)), including unaffiliated providers, and with disparate certified EHR technology and vendors.

(3) Responded in good faith and in a timely manner to requests to retrieve or exchange electronic health information, including from patients, health care providers (as defined by 42 U.S.C. 300jj(3)), and other persons, regardless of the requestor's affiliation or technology vendor.

(ii) Reporting clinical quality information. Successfully report the clinical quality measures selected by CMS to CMS or the States, as applicable, in the form and manner specified by CMS or the States, as applicable.

(iii) [Reserved]

(iv) Additional requirements for Medicaid eligible hospitals. For Medicaid eligible hospitals if, in accordance with §§ 495.316 and 495.332, CMS has approved a State's revised definition for meaningful use, in addition to meeting paragraphs (b)(2)(i) through (iii) of this section, the eligible hospital must also demonstrate meeting the State's revised definition using the method approved by CMS.

(v) Exception for Medicare EPs for 2012 and 2013 - Participation in the Physician Quality Reporting System-Medicare EHR Incentive Pilot. To satisfy the clinical quality measure reporting requirements of meaningful use, aside from attestation, an EP participating in the Physician Quality Reporting System may also participate in the Physician Quality Reporting System-Medicare EHR Incentive Pilot through one of the following methods:

(A) Submission of data extracted from the EP's certified EHR technology through a Physician Quality Reporting System qualified EHR data submission vendor; or

(B) Submission of data extracted from the EP's certified EHR technology, which must also be through a Physician Quality Reporting System qualified EHR.

(vi) Exception for Medicare eligible hospitals and CAHs for FY 2012 and 2013 - Participation in the Medicare EHR Incentive Program Electronic Reporting Pilot. In order to satisfy the clinical quality measure reporting requirements of meaningful use, aside from attestation, a Medicare eligible hospital or CAH may participate in the Medicare EHR Incentive Program Electronic Reporting Pilot.

(vii) Exception for dual-eligible eligible hospitals and CAHs beginning in CY 2019.

(A) Beginning with the EHR reporting period in CY 2019, dual-eligible eligible hospitals and CAHs (those that are eligible for an incentive payment under Medicare for meaningful use of CEHRT and/or subject to the Medicare payment reduction for failing to demonstrate meaningful use, and are also eligible to earn a Medicaid incentive payment for meaningful use) must satisfy the requirements under paragraph (b)(2) of this section by attestation and reporting information to CMS, not to their respective state Medicaid agency.

(B) Dual-eligible eligible hospitals and CAHs that demonstrate meaningful use to their state Medicaid agency may only qualify for an incentive payment under Medicaid and will not qualify for an incentive payment under Medicare and/or avoid the Medicare payment reduction.

(c) Review of meaningful use.

(1) CMS (and in the case of Medicaid EPs and eligible hospitals, States) may review an EP, eligible hospital or CAH's demonstration of meaningful use.

(2) All EPs, eligible hospitals, and CAHs must keep documentation supporting their demonstration of meaningful use for 6 years.

[75 FR 44565, July 28, 2010, as amended at 76 FR 73473, Nov. 28, 2011; 76 FR 74584, Nov. 30, 2011; 77 FR 54157, Sept. 4, 2012; 77 FR 68565, Nov. 15, 2012; 77 FR 69372, Nov. 16, 2012; 79 FR 52933, Sept. 4, 2014. Redesignated and amended at 80 FR 62943, 62954, Oct. 16, 2015; 81 FR 77556, Nov. 4, 2016; 81 FR 79892, Nov. 14, 2016; 82 FR 36, Jan. 3, 2017; 82 FR 16742, Apr. 6, 2017; 82 FR 38518, Aug. 14, 2017; 83 FR 41710, Aug. 17, 2018]

§ 495.60 Participation requirements for EPs, eligible hospitals, and CAHs.

(a) An eligible hospital, CAH or EP must submit in a manner specified by CMS the following information in the first payment year:

(1) Name of the EP, eligible hospital or CAH.

(2) National Provider Identifier (NPI).

(3) Business address, business email address, and phone number.

(4) Such other information as specified by CMS.

(b) In addition to the information submitted under paragraph (a) of this section, an eligible hospital or CAH, must, in the first payment year, submit in a manner specified by CMS its CMS Certification Number (CCN) and its Taxpayer Identification Number (TIN).

(c) Subject to paragraph (f) of this section, in addition to the information submitted under paragraph (a) of this section, an EP must submit in a manner specified by CMS, the Taxpayer Identification Number (TIN) which may be the EP's Social Security Number (SSN) to which the EP's incentive payment should be made.

(d) In the event the information specified in paragraphs (a) through (c) of this section as previously submitted to CMS is no longer accurate, the EP, eligible hospital or CAH must provide updated information to CMS or the State on a timely basis in the manner specified by CMS or the State.

(e) An EP that qualifies as both a Medicaid EP and Medicare EP—

(1) Must notify CMS in the manner specified by CMS as to whether he or she elects to participate in the Medicare or the Medicaid EHR incentive program;

(2) After receiving at least one EHR incentive payment, may switch between the two EHR incentive programs only one time, and only for a payment year before 2015;

(3) Must, for each payment year, meet all of the applicable requirements, including applicable patient volume requirements, for the program in which he or she chooses to participate (Medicare or Medicaid);

(4) Is limited to receiving, in total, the maximum payments the EP would receive under the Medicaid EHR program, as described in subpart D of this part; and

(5) Is placed in the payment year the EP would have been in had the EP begun in and remained in the program to which he or she has switched. For example, an EP that begins receiving Medicaid incentive payments in 2011, and then switches to the Medicare program for 2012, is in his or her second payment year in 2012.

(f) Limitations on incentive payment reassignments.

(1) EPs are permitted to reassign their incentive payments to their employer or to an entity with which they have a contractual arrangement allowing the employer or entity to bill and receive payment for the EP's covered professional services.

(2)

(i) Assignments in Medicare must be consistent with Section 1842(b)(6)(A) of the Act and 42 CFR part 424 subpart F.

(ii) Medicaid EPs may also assign their incentive payments to a TIN for an entity promoting the adoption of EHR technology, consistent with subpart D of this part.

(3) Each EP may reassign the entire amount of the incentive payment to only one employer or entity.

[75 FR 44565, July 28, 2010, as amended at 77 FR 54157, Sept. 4, 2012. Redesignated at 80 FR 62943, Oct. 16, 2015]