Skip Navigation
United States Flag

An official website of the United States government. Here's how you know >

Change Font Size

Security of Certified Electronic Health Record Technology Under Meaningful Use

A core meaningful-use objective for eligible providers and hospitals is to protect electronic health information created or maintained by certified EHR technology by implementing appropriate technical capabilities. To meet and measure this objective, eligible hospitals must conduct a security risk analysis of certified EHR technology as defined in Federal regulations and use the capabilities and standards of certified EHR technology (45 CFR § 164.308(a)(1) and 45 CFR §§ 170.314(d)(1) through (d)(9)). We will perform audits of various covered entities receiving EHR incentive payments from Centers for Medicare & Medicaid Services to determine whether they adequately protect electronic health information created or maintained by certified EHR technology.

Announced or Revised Agency Title Component Report Number(s) Expected Issue Date (FY)
October 2017 Centers for Medicare & Medicaid Services Security of Certified Electronic Health Record Technology Under Meaningful Use Office of Audit Services W-00-15-42002; various reviews 2018

Office of Inspector General, U.S. Department of Health and Human Services | 330 Independence Avenue, SW, Washington, DC 20201