Authorized Certification Body

Full Title

This description of an Authorized Certification Body applies solely to the evaluaiton of applications used by Patients and their delegates to access Personal Healthcare Information (PHI) and upload of data to providers.

Context

Much of the language used here is directly towards Health IT Modules running in providers web sites. It is adapted here to the case of Health IT for patients and delegates.

1. Information Blocking - there must be no action that cconsititues information blocking. But this only applies to apps that are from certified developers.
2. The following communications must be provided for Health IT apps.
   1. The user ability of the app.
   2. The interoperability of the apis used by the app.
   3. The security of the app.
   4. User experiences when patients or delegates use the app.
   5. Business practices of the app developers.
   6. The manner in which the technologies in the app have been used in health IT.
3. Application Programming Interfaces (APIs) that are used for communications with:
   1. Electronic Health Records Providers (EHR) or Health Information Exchanges (HIE).

References

• ONC’s Cures Act Final Rule supports seamless and secure access, exchange, and use of electronic health information
• ONC's Cures Act Final Rule