Policies and Technology for Interoperability

August 28, 2021

Health information is exchanged and used by two or more systems when they are interoperable.

Once information is received, it is available for use. To be fully interoperable, all types of health IT will need to be developed over time. To promote interoperability across the healthcare system, HHS looks for opportunities to accelerate the development of interoperability.

Interoperability of Healthcare Systems

The interoperability of healthcare systems and the widespread exchange of information will lead to an improved ability to provide value-based, patient-centered care that lowers costs while improving outcomes.

In an ongoing effort to improve patient, provider, and payer access to health information, CMS continues to advance its roadmap. Similarly, health information exchange (interoperability) can also reduce administrative burdens associated with specific managerial procedures, such as prior authorization.

Through their regulations, payers, providers, and patients will exchange clinical and administrative information more efficiently, thereby facilitating better care coordination.

According to CMS regulations, payers are required or encouraged to use Application Programming Interfaces (APIs) to facilitate the electronic exchange of healthcare data - either between payers and patients or between payers and providers.

Through integration with mobile apps, electronic health records (EHRs), and practice management systems, APIs facilitate a more seamless way to exchange information.

In addition, the regulations provide policies that encourage improvements in procedures and policies so that decision-making and communication are simplified with the goal of reducing the burden of prior authorizations.


CMS issued two critical rules related to interoperability and burden reduction.

CMS Interoperability and Patient Access Final Rule

Interoperability and Patient Access rule (CMS-9115-F) is a rule that takes patients' needs into account and ensures they have access to their medical records as needed.

Under this final rule, CMS will be required to supervise Medicare Advantage (MA), Medicaid, Children's Health Insurance Program (CHIP), and Qualified Health Plans (QHP) issuers on Federally-facilitated Exchanges (FFE).

Due to the public health emergency caused by COVID-19, the CMS decided to enforce the policies regarding APIs for patients and the Provider Directory API for MA, CHIP, Medicare, and QHPs providers on the FFEs from January 1, 2021, to July 1, 2021. The new requirements became effective on July 1, 2021.

Provider Directory APIs are not required for QHP Issuers on the FFE; this rule does not apply.

CMS Interoperability and Prior Authorization Proposed Rule

As part of the proposed rule for interoperability and prior authorization (CMS-9123-P), the policy is built on the final CMS rule for interoperability and patient access. The proposed rule emphasizes that health information exchange is necessary for patients, medical professionals, and payers to obtain the appropriate access required to complete health records.

In addition to improving prior authorization processes through policies and technology, this proposed rule will ensure that patients remain in control of their care.

The CMS rule suggests enhancing specific policies from the CMS policy on interoperability by improving the prior authorization process. It also offers several new provisions the would foster data sharing as well as reducing payer, healthcare provider, and patient costs.

A proposed regulation by the Desk of the National Coordinator for Health Information Technology (ONC) under the 21st Century Cures Act:

CMS approved the ONC 21st Century Cures Act’s final rule, including technical, content, and vocabulary standards developed by the Department of Health and Human Services (HHS). Providers, payers, and prior authorization APIs are also available as HL7 Ingenuity Groups, though they are not yet mandatory.

By using them, payers help limit burdens while advancing our mutual goal of an interoperable healthcare system. CMS is also continually working with HL7 and other industry partners to ensure payers have free access to IGs and other resources if they so choose.

Interoperability and Patient Access Fact Sheet

The Interoperability and Patient Access final rule (CMS-9115-F) performs on the Administration’s agreement to put patients first, providing them access to their health information if they need it most and in a way they can use it. Due to Trump Administration’s My Health EData initiative, this final rule is concentrated on encouraging interoperability and patient access to health information by liberating patient data using CMS authority to regulate Medicare Advantage (MA), Medicaid, CHIP, and Qualified Health Plan (QHP) issuers on the Federally-facilitated Exchanges (FFEs).

The absence of seamless data exchange in healthcare has detracted from patient care, driving to poor health issues, and higher costs. The CMS Interoperability and Patient Access final rule sets policies that break down boundaries in the nation’s health method to facilitate better patient access to their health information, improve interoperability.

Privacy, Security, and Standards

Securing the privacy and security of patient information is the highest preference for CMS. Recognizing the right standards can improve data flow securely and efficiently. CMS, in cooperation with the Office of the National Coordinator for Health Information Technology (ONC), has recognized Health Level 7® (HL7) Fast Healthcare Interoperability Resources® (FHIR) Release 4.0.1 as the foundational model to promote data exchange via secure application programming interfaces (APIs). 

CMS is using the standards for FHIR-based APIs being settled by HHS in the ONC 21st Century Cures Act rule at 45 CFR 170.215. These conditions maintain the secrecy and safety of patient information.

CMS is using extra steps to give payers and patients opportunities and information to protect patient data and get educated choices about sharing patient health information with third parties.

Provider Directory API

Payer-to-Payer Data Exchange

Public Reporting and Information Blocking

Digital Contact Information

Admission, Discharge, and Transfer Event Notifications

Latest articles.

Article headline