September 4, 2025 | TriggWorks Health IT Insight
The U.S. Department of Health and Human Services (HHS) announced today a sweeping new enforcement push to eliminate information blocking—the practice of interfering with access, exchange, or use of electronic health information (EHI). Under direct orders from HHS Secretary Robert F. Kennedy, Jr., the agency is mobilizing resources to hold violators accountable and reassert the patient’s legal right to control their health data.
This renewed focus builds on the foundation laid by the 21st Century Cures Act and the ONC Cures Act Final Rule, which guarantees patients cost-free, app-enabled access to their medical data—and empowers providers to choose digital tools that work best for care delivery.
“Unblocking the flow of health information is critical to unleashing health IT innovation and transforming our healthcare ecosystem,” said Deputy HHS Secretary Jim O’Neill. “We will take appropriate action against any healthcare actors found to be blocking health data.”
Key Enforcement Players
- Office of the National Coordinator for Health IT (ONC) Leading oversight and compliance for certified health IT developers.
- HHS Office of Inspector General (OIG) Investigating violations and applying civil monetary penalties and certification terminations when appropriate.
Who’s Affected?
Entities subject to information blocking rules include:
- Providers participating in CMS programs Risk: CMS disincentives and reimbursement impacts.
- Developers of certified health IT Risk: Civil penalties up to $1 million per violation, certification revocation, or program exclusion.
- Health Information Exchanges/Networks Risk: Financial penalties and operational limitations.
Why It Matters
Patients increasingly rely on easy access to their health data to manage chronic illness, verify treatment plans, find errors, and share results across providers and digital tools. Blocking this access stifles innovation, burdens providers, and undermines trust.
This action reasserts the federal government’s intent: patients come first, and data must flow securely and without obstruction.
What You Can Do
- Patients & Developers: If you’ve experienced information blocking, report it via the ONC Report Portal.
- Health IT Stakeholders: Review your practices, especially around API access, app integrations, and patient portals. Noncompliance is no longer a gray area—it’s a liability.
“We’ve already begun investigating reports,” said Dr. Tom Keane, National Coordinator for Health IT. “This is not a symbolic gesture. It’s a mandate.”
TriggWorks Takeaway
Healthcare IT leaders should treat this as more than a policy memo—it’s a culture shift. Compliance isn’t just about avoiding penalties; it’s about unlocking innovation, building patient trust, and accelerating care delivery transformation.
For digital health startups, EHR vendors, and provider organizations alike, the message is clear: Information blocking is no longer tolerated. It’s time to lead with openness, agility, and respect for the patient’s right to choose.
Follow TriggWorks.com for continuing analysis on digital health policy, EHR transformation, and the evolving landscape of patient-centered technology.
