Security of Certified Electronic Health Record Technology Under Meaningful Use
A core meaningful-use objective for eligible providers and hospitals is to protect electronic health information created or maintained by certified EHR technology by implementing appropriate technical capabilities. To meet and measure this objective, eligible hospitals must conduct a security risk analysis of certified EHR technology as defined in Federal regulations and use the capabilities and standards of certified EHR technology (45 CFR § 164.308(a)(1) and 45 CFR §§ 170.314(d)(1) through (d)(9)). We will perform audits of various covered entities receiving EHR incentive payments from Centers for Medicare & Medicaid Services to determine whether they adequately protect electronic health information created or maintained by certified EHR technology.
|Announced or Revised
|Expected Issue Date (FY)
|Centers for Medicare & Medicaid Services
|Security of Certified Electronic Health Record Technology Under Meaningful Use
|Office of Audit Services