ABCDEFGHI
1
Provider ObjectivesMeasuresExclusionsHospital ObjectivesMeasuresExclusions2015 EHR Certification Criteria2014 EHR Certification CriteriaStandards
2
42 CFR §495.642 CFR §495.645 CFR §170.31545 CFR §170.31445 CFR §170
3
(j) Stage 2 core criteria for EPs. (l) Stage 2 core criteria for eligible hospitals or CAHs
4
(1)(i) Objective. Use computerized provider order entry for medication, laboratory, and radiology orders directly entered by any licensed healthcare professional who can enter orders into the medical record per State, local, and professional guidelines. (A) More than 60 percent of medication orders created by the EP during the EHR reporting period are recorded using computerized provider order entry;
(B) More than 30 percent of laboratory orders created by the EP during the EHR reporting period are recorded using computerized provider order entry; and
(C) More than 30 percent of radiology orders created by the EP during the EHR reporting period are recorded using computerized provider order entry. 		(A) For the measure specified in paragraph (j)(1)(ii)(A) of this section, any EP who writes fewer than 100 medication orders during the EHR reporting period.
(B) For the measure specified in paragraph (j)(1)(ii)(B) of this section, any EP who writes fewer than 100 laboratory orders during the EHR reporting period.
(C) For the measure specified in paragraph (j)(1)(ii)(C), any EP who writes fewer than
100 radiology orders during the EHR reporting period.		(1)(i) Objective. Use computerized provider order entry for medication, laboratory, and radiology orders directly entered by any licensed healthcare professional who can enter orders into the medical record per State, local, and professional guidelines. (ii) Measures. Subject to paragraph (c) of this section, more than--
(A) Sixty percent of medication orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry,
(B) Thirty percent of laboratory orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry, and
(C) Thirty percent of radiology orders created by authorized providers of the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period are recorded using computerized provider order entry.
(a) Clinical. (1) Computerized provider order entry. Enable a user to electronically record, change, and access the following order types, at a minimum:
(i) Medications;
(ii) Laboratory; and
(iii) Radiology/imaging.
5
(2)(i) Objective. Generate and transmit permissible prescriptions electronically (eRx). (ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all permissible prescriptions, or all prescriptions, written by the EP are queried for a drug formulary and transmitted electronically using Certified EHR Technology. Any EP who--
(A) Writes fewer than 100 permissible prescriptions during the EHR reporting period; or
(B) Does not have a pharmacy within their organization and there are no pharmacies that accept electronic prescriptions within 10 miles of the EP's practice location at the start of his or her EHR reporting period. 		(a) (10) Drug-formulary checks. EHR technology must automatically and electronically check whether a drug formulary (or preferred drug list) exists for a given patient and medication.
(b)(3) Electronic prescribing. Enable a user to electronically create prescriptions and prescription-related information for electronic transmission in accordance with:
(i) The standard specified in § 170.205(b)(2); and
(ii) At a minimum, the version of the standard specified in § 170.207(d)(2).
205(b)(2)Standard. NCPDP SCRIPT Standard, Implementation Guide, Version 10.6 (incorporated by reference in §170.299).
207(d)(2) Standard. RxNorm, a standardized nomenclature for clinical drugs produced by the United States National Library of Medicine, August 6, 2012 Release (incorporated by reference in § 170.299).
6
 (3)(i) Objective. Record all of the following demographics:
(A) Preferred language.
(B) Sex.
(C) Race.
(D) Ethnicity.
(E) Date of birth. 		(ii) Measure. More than 80 percent of all unique patients seen by the EP during the EHR reporting period have demographics recorded as structured data. (2)(i) Objective. Record all of the following demographics:
(A) Preferred language.
(B) Sex.
(C) Race.
(D) Ethnicity.
(E) Date of birth.

(F) Date and preliminary cause of death in the event of mortality in the eligible hospital or CAH.
(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have demographics recorded as structured data.(a) (3) Demographics. (i) Enable a user to electronically record, change, and access patient demographic data including preferred language, sex, race, ethnicity, and date of birth.
(A) Enable race and ethnicity to be recorded in accordance with the standard specified in § 170.207(f) and whether a patient declines to specify race and/or ethnicity.
(B) Enable preferred language to be recorded in accordance with the standard specified in § 170.207(g) and whether a patient declines to specify a preferred language.
207 (f) Race and Ethnicity. Standard. The Office of Management and Budget Standards for Maintaining, Collecting, and Presenting Federal Data on Race and Ethnicity, Statistical Policy Directive No. 15, as revised, October 30, 1997 (see “Revisions to the Standards for the Classification of Federal Data on Race and Ethnicity,” available at http://www.whitehouse.gov/omb/fedreg_1997standards).
207(g) Preferred language. Standard. As specified by the Library of Congress, ISO 639-2 alpha-3 codes limited to those that also have a corresponding alpha-2 code in ISO 639-1. (incorporated by reference in § 170.299).
7
(4)(i) Objective. Record and chart changes in the following vital signs:
(A) Height/Length.
(B) Weight.
(C) Blood pressure (ages 3 and over).
(D) Calculate and display body mass index (BMI).
(E) Plot and display growth charts for patients 0 - 20 years, including body mass index.
(ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients seen by the EP during the EHR reporting period have blood pressure (for patients age 3 and over only) and height/length and weight (for all ages) recorded as structured data. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who--
(A) Sees no patients 3 years or older is excluded from recording blood pressure;
(B) Believes that all three vital signs of height/length, weight, and blood pressure have no relevance to their scope of practice is excluded from recording them;
(C) Believes that height/length and weight are relevant to their scope of practice, but blood pressure is not, is excluded from recording blood pressure; or
(D) Believes that blood pressure is relevant to their scope of practice, but height/length
and weight are not, is excluded from recording height/length and weight.		(3)(i) Objective. Record and chart changes in the following vital signs:
(A) Height/Length.
(B) Weight.
(C) Blood pressure (ages 3 and over).
(D) Calculate and display body mass index (BMI).
(E) Plot and display growth charts for patients 0 - 20 years, including body mass index.
(ii) Measure: Subject to paragraph (c) of this section, more than 80 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have blood pressure (for patients age 3 and over only) and height/length and weight (for all ages) recorded as structured data. (a) (4) Vital signs, body mass index, and growth charts. (i) Vital signs. Enable a user to electronically record, change, and access, at a minimum, a patient’s height/length, weight, and

blood pressure. Height/length, weight, and blood pressure must be recorded in numerical values only.
(ii) Calculate body mass index. Automatically calculate and electronically display body mass index based on a patient’s height and weight.
(iii) Optional—Plot and display growth charts. Plot and electronically display, upon request, growth charts for patients.
8
(5)(i) Objective. Record smoking status for patients 13 years old or older. (ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients 13 years old or older seen by the EP during the EHR reporting period have smoking status recorded as structured data. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who sees no patients 13 years old or older. (4)(i) Objective. Record smoking status for patients 13 years old or older. (ii) Measure. Subject to paragraph (c) of this section, more than 80 percent of all unique patients 13 years old or older admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have smoking status recorded as structured data. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that admits no patients 13 years old or older to their inpatient or emergency department (POS 21 or 23) during the EHR reporting period. (a) (11) Smoking status. Enable a user to electronically record, change, and access the smoking status of a patient in accordance with the standard specified at § 170.207(h). (h) Smoking status. Standard. Smoking status must be coded in one of the following SNOMED CT® codes:
(1) Current every day smoker. 449868002
(2) Current some day smoker. 428041000124106
(3) Former smoker. 8517006
(4) Never smoker. 266919005
(5) Smoker, current status unknown. 77176002
(6) Unknown if ever smoked. 266927001
(7) Heavy tobacco smoker. 428071000124103
(8) Light tobacco smoker. 428061000124105
9
(6)(i) Objective. Use clinical decision support to improve performance on high priority health conditions. (ii) Measures. (A) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an EP’s scope of practice or patient population, the clinical decision support interventions must be related to high-priority health conditions; and
(B) The EP has enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.
(iii) Exclusion in accordance with paragraph (h)(2) of this section for paragraph (j)(6)(ii)(B) of this section. An EP who writes fewer than 100 medication orders during the EHR reporting period. (5)(i) Objective. Use clinical decision support to improve performance on high priority health conditions. (ii) Measures. (A) Implement five clinical decision support interventions related to four or more clinical quality measures at a relevant point in patient care for the entire EHR reporting period. Absent four clinical quality measures related to an eligible hospital or CAH’s patient population, the clinical decision support interventions must be related to high-priority health conditions; and
(B) The eligible hospital or CAH has enabled and implemented the functionality for drug-drug and drug-allergy interaction checks for the entire EHR reporting period.
(a) (2) Drug-drug, drug-allergy interaction checks. (i) Interventions. Before a medication order is completed and acted upon during computerized provider order entry (CPOE), interventions must automatically and electronically indicate to a user drug-drug and drug-allergy contraindications based on a patient’s medication list and medication allergy list.
(ii) Adjustments. (A) Enable the severity level of interventions provided for drug-drug interaction checks to be adjusted.
(B) Limit the ability to adjust severity levels to an identified set of users or available as a system administrative function.

(a) (8) Clinical decision support. (i) Evidence-based decision support interventions. Enable a limited set of identified users to select (i.e., activate) one or more electronic clinical decision support

interventions (in addition to drug-drug and drug-allergy contraindication checking) based on each one and at least one combination of the following data:
(A) Problem list;
(B) Medication list;
(C) Medication allergy list;
(D) Demographics;
(E) Laboratory tests and values/results; and
(F) Vital signs.
(ii) Linked referential clinical decision support. (A) EHR technology must be able to:
(1) Electronically identify for a user diagnostic and therapeutic reference information; or
(2) Electronically identify for a user diagnostic and therapeutic reference information in accordance with the standard specified at § 170.204(b) and the implementation specifications at § 170.204 (b)(1) or (2).
(B) For paragraph (a)(8)(ii)(A) of this section, EHR technology must be able to electronically identify for a user diagnostic or therapeutic reference information based on each one and at least one combination of the following data referenced in paragraphs (a)(8)(i)(A) through (F) of this section:

(iii) Clinical decision support configuration. (A) Enable interventions and reference resources specified in paragraphs (a)(8)(i) and (ii) of this section to be configured by a limited set of identified users (e.g., system administrator) based on a user’s role.
(B) EHR technology must enable interventions to be electronically triggered:
(1) Based on the data referenced in paragraphs (a)(8)(i)(A) through (F) of this section.
(2) When a patient’s medications, medication allergies, and problems are incorporated from a transition of care/referral summary received pursuant to paragraph (b)(1)(iii) of this section.
(3) Ambulatory setting only. When a patient’s laboratory tests and values/results are incorporated pursuant to paragraph (b)(5)(i)(A)(1) of this section.

(iv) Automatically and electronically interact. Interventions triggered in accordance with paragraphs (a)(8)(i) through (iii) of this section must automatically and electronically occur when a user is interacting with EHR technology.
(v) Source attributes. Enable a user to review the attributes as indicated for all clinical decision support resources:
(A) For evidence-based decision support interventions under paragraph (a)(8)(i) of this section:
(1) Bibliographic citation of the intervention (clinical research/guideline);
(2) Developer of the intervention (translation from clinical research/guideline);
(3) Funding source of the intervention development technical implementation; and
(4) Release and, if applicable, revision date(s) of the intervention or reference source.
(B) For linked referential clinical decision support in paragraph (a)(8)(ii) of this section and drug-drug, drug-allergy interaction checks in paragraph(a)(2) of this section, the developer of the intervention, and where clinically indicated, the bibliographic citation of the intervention (clinical research/guideline).
10
(7)(i) Objective. Incorporate clinical lab test results into Certified EHR Technology as structured data. (ii) Measure. Subject to paragraph (c) of this section, more than 55 percent of all clinical lab tests results ordered by the EP during the EHR reporting period whose results are either in a positive/negative affirmation or numerical format are incorporated in Certified EHR Technology as structured data. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who orders no lab tests whose results are either in a positive/negative affirmation or numerical format during the EHR reporting period. (6)(i) Objective. Incorporate clinical lab test results into Certified EHR Technology as structured data. (ii) Measure. More than 55 percent of all clinical lab tests results ordered by authorized providers of the eligible hospital or CAH for patients admitted to its inpatient or emergency department (POS 21 or 23) during the EHR reporting period whose results are either in a positive/negative affirmation or numerical format are incorporated in Certified EHR Technology as structured data. (b)(5) Incorporate laboratory tests and values/results. (i) Receive results. (A) Ambulatory setting only. (1) Electronically receive and incorporate clinical laboratory tests and values/results in accordance with the standard specified in § 170.205(j) and, at a minimum, the version of the standard specified in § 170.207(c)(2).
(2) Electronically display the tests and values/results received in human readable format.
(B) Inpatient setting only. Electronically receive clinical laboratory tests and values/results in a structured format and electronically display such tests and values/results in human readable format.
(ii) Electronically display all the information for a test report specified at 42 CFR
493.1291(c)(1) through (7).

(iii) Electronically attribute, associate, or link a laboratory test and value/result with a
laboratory order or patient record.
205(j) Electronic incorporation and transmission of lab results. Standard. HL7 Version 2.5.1 Implementation Guide: S&I Framework Lab Results Interface, (incorporated by reference in § 170.299).

297(c)(2) Standard. Logical Observation Identifiers Names and Codes (LOINC®) Database version 2.40, a universal code system for identifying laboratory and clinical observations produced by the Regenstrief Institute, Inc. (incorporated by reference in § 170.299).

42 CFR §493.1291 (c) The test report must indicate the following:
(1) For positive patient identification, either the patient's name and identification number, or a unique patient identifier and identification number.
(2) The name and address of the laboratory location where the test was performed.
(3) The test report date.
(4) The test performed.
(5) Specimen source, when appropriate.
(6) The test result and, if applicable, the units of measurement or interpretation, or both.
(7) Any information regarding the condition and disposition of specimens that do not meet the laboratory's criteria for acceptability.
11
(8)(i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, or outreach. (ii) Measure. Generate at least one report listing patients of the EP with a specific condition. (7)(i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research or outreach. (ii) Measure. Generate at least one report listing patients of the eligible hospital or CAH with a specific condition. (a)(14) Patient list creation. Enable a user to electronically and dynamically select, sort, access, and create patient lists by: date and time; and based on each one and at least one combination of the following data:
(i) Problems;
(ii) Medications;
(iii) Medication allergies;
(iv) Demographics;
(v) Laboratory tests and values/results; and
(vi) Ambulatory setting only. Patient communication preferences.
12
 (9)(i) Objective. Use clinically relevant information to identify patients who should receive reminders for preventive/follow-up care and send these patients the reminder, per patient preference. (ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of all unique patients who have had two or more office visits with the EP within the 24 months before the beginning of the EHR reporting period were sent a reminder, per patient preference when available. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has had no office visits in the 24 months before the beginning of the EHR reporting period. (a)(14) Patient list creation. Enable a user to electronically and dynamically select, sort, access, and create patient lists by: date and time; and based on each one and at least one combination of the following data:
(i) Problems;
(ii) Medications;
(iii) Medication allergies;
(iv) Demographics;
(v) Laboratory tests and values/results; and
(vi) Ambulatory setting only. Patient communication preferences.
13
(10)(i) Objective. Provide patients the ability to view online, download, and transmit their health information within 4 business days of the information being available to the EP. (ii) Measures. (A) More than 50 percent of all unique patients seen by the EP during the EHR reporting period are provided timely (available to the patient within 4 business days after
the information is available to the EP) online access to their health information subject to the EP's discretion to withhold certain information; and
(B) More than 5 percent of all unique patients seen by the EP during the EHR reporting period (or their authorized representatives) view, download or transmit to a third party their health information.
(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who--
(A) Neither orders nor creates any of the information listed for inclusion as part of the measures in paragraphs (j)(10)(ii)(A) and (B) of this section, except for "Patient name" and "Provider’s name and office contact information," is excluded from both paragraphs (j)(10)(ii)(A) and (B) of this section; or
(B) Conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 3Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (j)(10)(ii)(B) of this section.
(8)(i) Objective. Provide patients the ability to view online, download, and transmit information about a hospital admission. (ii) Measures. (A) More than 50 percent of all patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH have their information available online within 36 hours of discharge; and
(B) More than 5 percent of all patients who are discharged from the inpatient or emergency department (POS 21 or 23) of an eligible hospital or CAH (or their authorized representative) view, download or transmit to a third party their information during the EHR reporting period.
(iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that is located in a county that does not have 50 percent or more of its housing units with 3Mbps broadband availability according to the latest information available from the FCC on the first day of the EHR reporting period is excluded from paragraph (l)(8)(ii)(B) of this section. (e) Patient engagement. (1) View, download, and transmit to 3rd party. (i) EHR technology must provide patients (and their authorized representatives) with an online means to view, download, and transmit to a 3rd party the data specified below. Access to these capabilities must be through a secure channel that ensures all content is encrypted and integrity-protected in accordance with the standard for encryption and hashing algorithms specified at § 170.210(f).
(A) View. Electronically view in accordance with the standard adopted at § 170.204(a), at a minimum, the following data:
(1) The Common MU Data Set (which should be in their English (i.e., non-coded) representation if they associate with a vocabulary/code set).
(2) Ambulatory setting only. Provider’s name and office contact information.
(3) Inpatient setting only. Admission and discharge dates and locations; discharge instructions; and reason(s) for hospitalization.
(B) Download. (1) Electronically download an ambulatory summary or inpatient summary (as applicable to the EHR technology setting for which certification is requested) in human readable format or formatted according to the standard adopted at § 170.205(a)(3) that includes, at a minimum, the following data (which, for the human readable version, should be in their English representation if they associate with a vocabulary/code set):
(i) Ambulatory setting only. All of the data specified in paragraph (e)(1)(i)(A)(1) and
(2) of this section.
(ii) Inpatient setting only. All of the data specified in paragraphs (e)(1)(i)(A)(1) and (3) of this section.
(2) Inpatient setting only. Electronically download transition of care/referral summaries that were created as a result of a transition of care (pursuant to the capability expressed in the certification criterion adopted at paragraph (b)(2) of this section).
(C) Transmit to third party. (1) Electronically transmit the ambulatory summary or inpatient summary (as applicable to the EHR technology setting for which certification is requested) created in paragraph (e)(1)(i)(B)(1) of this section in accordance with the standard specified in § 170.202(a).
(2) Inpatient setting only. Electronically transmit transition of care/referral summaries (as a result of a transition of care/referral) selected by the patient (or their authorized representative) in accordance with the standard specified in § 170.202(a).
(ii) Activity history log. (A) When electronic health information is viewed, downloaded, or transmitted to a third-party using the capabilities included in paragraphs (e)(1)(i)(A) through
(C) of this section, the following information must be recorded and made accessible to the patient:
(1) The action(s) (i.e., view, download, transmission) that occurred;
(2) The date and time each action occurred in accordance with the standard specified at § 170.210(g); and
(3) The user who took the action.
(B) EHR technology presented for certification may demonstrate compliance with paragraph (e)(1)(ii)(A) of this section if it is also certified to the certification criterion adopted at § 170.314(d)(2) and the information required to be recorded in paragraph (e)(1)(ii)(A) is accessible by the patient.
210 (f) Encryption and hashing of electronic health information. Any encryption and hashing algorithm identified by the National Institute of Standards and Technology (NIST) as an approved security function in Annex A of the FIPS Publication 140-2 (incorporated by reference in § 170.299).

204(a) Accessibility. Standard. Web Content Accessibility Guidelines (WCAG) 2.0, Level A Conformance (incorporated by reference in § 170.299).

205(a)(3) Standard. HL7 Implementation Guide for CDA® Release 2: IHE Health Story Consolidation, (incorporated by reference in § 170.299). The use of the “unstructured document” document-level template is prohibited.

202(a) Standard. ONC Applicability Statement for Secure Health Transport (incorporated by reference in § 170.299).

210(g) Synchronized clocks. The date and time recorded utilize a system clock that has been synchronized following (RFC 1305) Network Time Protocol, (incorporated by reference in § 170.299) or (RFC 5905) Network Time Protocol Version 4, (incorporated by reference in § 170.299).
14
 (11)(i) Objective. Provide clinical summaries for patients for each office visit. (ii) Measure. Subject to paragraph (c) of this section, clinical summaries provided to patients or patient-authorized representatives within 1 business day for more than 50 percent of office visits. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has no office visits during the EHR reporting period. (e) (2) Ambulatory setting only – clinical summary. (i) Create. Enable a user to create a clinical summary for a patient in human readable format and formatted according to the standards adopted at § 170.205(a)(3).
(ii) Customization. Enable a user to customize the data included in the clinical summary.
(iii) Minimum data from which to select. EHR technology must permit a user to select, at a minimum, the following data when creating a clinical summary:
(A) Common MU Data Set (which, for the human readable version, should be in their English representation if they associate with a vocabulary/code set)
(B) The provider’s name and office contact information; date and location of visit; reason for visit; immunizations and/or medications administered during the visit; diagnostic tests pending; clinical instructions; future appointments; referrals to other providers; future scheduled tests; and recommended patient decision aids.
205(a)(3) Standard. HL7 Implementation Guide for CDA® Release 2: IHE Health Story Consolidation, (incorporated by reference in § 170.299). The use of the “unstructured document” document-level template is prohibited.
15
(12)(i) Objective. Use clinically relevant information from Certified EHR Technology to identify patient-specific education resources and provide those resources to the patient. (ii) Measure. Patient-specific education resources identified by Certified EHR Technology are provided to patients for more than 10 percent of all unique patients with office visits seen by the EP during the EHR reporting period. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has no office visits during the EHR reporting period. (9)(i) Objective. Use clinically relevant information from Certified EHR Technology to identify patient-specific education resources and provide those resources to the patient. (ii) Measure. More than 10 percent of all unique patients admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23) are provided patient-specific education resources identified by Certified EHR Technology. (a)(15) Patient-specific education resources. EHR technology must be able to electronically identify for a user patient-specific education resources based on data included in the patient's problem list, medication list, and laboratory tests and values/results:
(i) In accordance with the standard specified at § 170.204(b) and the implementation
specifications at § 170.204(b)(1) or (2); and
(ii) By any means other than the method specified in paragraph (a)(15)(i) of this section. 		204(b) Reference source. Standard. HL7 Version 3 Standard: Context-Aware Retrieval Application (Infobutton) (incorporated by reference in § 170.299). (1) Implementation specifications. HL7 Version 3 Implementation Guide: URL-Based Implementations of the Context-Aware Information Retrieval (Infobutton) Domain, (incorporated by reference in § 170.299).
(2) Implementation specifications. HL7 Version 3 Implementation Guide: Context-Aware Knowledge Retrieval (Infobutton) Service-Oriented Architecture Implementation Guide, (incorporated by reference in § 170.299).
(c) Clinical quality measure-by-measure data. Data Element Catalog, (incorporated by reference in § 170.299).
16
(13)(i) Objective. The EP who receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation. (ii) Measure. Subject to paragraph (c) of this section, the EP performs medication reconciliation for more than 50 percent of transitions of care in which the patient is transitioned into the care of the EP. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who was not the recipient of any transitions of care during the EHR reporting period. (10)(i) Objective. The eligible hospital or CAH that receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation. (ii) Measure. Subject to paragraph (c) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital's or CAH's inpatient or emergency department (POS 21 or 23). (b) Care coordination. (1) Transitions of care – receive, display, and incorporate transition of care/referral summaries. (i) Receive. EHR technology must be able to electronically receive transition of care/referral summaries in accordance with:
(A) The standard specified in § 170.202(a).
(B) Optional. The standards specified in § 170.202(a) and (b).
(C) Optional. The standards specified in § 170.202(b) and (c).

(ii) Display. EHR technology must be able to electronically display in human readable format the data included in transition of care/referral summaries received and formatted according to any of the following standards (and applicable implementation specifications) specified in: § 170.205(a)(1), § 170.205(a)(2), and § 170.205(a)(3).

(iii) Incorporate. Upon receipt of a transition of care/referral summary formatted according to the standard adopted at § 170.205(a)(3), EHR technology must be able to:
(A) Correct patient. Demonstrate that the transition of care/referral summary received is or can be properly matched to the correct patient.
(B) Data incorporation. Electronically incorporate the following data expressed according to the specified standard(s):
(1) Medications. At a minimum, the version of the standard specified in § 170.207(d)(2);
(2) Problems. At a minimum, the version of the standard specified in § 170.207(a)(3);
(3) Medication allergies. At a minimum, the version of the standard specified in § 170.207(d)(2).
(C) Section views. Extract and allow for individual display each additional section or sections (and the accompanying document header information) that were included in a transition of care/referral summary received and formatted in accordance with the standard adopted at § 170.205(a)(3).

(b)(4) Clinical information reconciliation. Enable a user to electronically reconcile the data that represent a patient’s active medication, problem, and medication allergy list as follows. For each list type:
(i) Electronically and simultaneously display (i.e., in a single view) the data from at least two list sources in a manner that allows a user to view the data and their attributes, which must include, at a minimum, the source and last modification date.
(ii) Enable a user to create a single reconciled list of medications, medication allergies, or problems.
(iii) Enable a user to review and validate the accuracy of a final set of data and, upon a user’s confirmation, automatically update the list.
§ 170.202 Transport standards. The Secretary adopts the following transport standards:
(a) Standard. ONC Applicability Statement for Secure Health Transport (incorporated by reference in § 170.299).
(b) Standard. ONC XDR and XDM for Direct Messaging Specification (incorporated by reference in § 170.299).
(c) Standard. ONC Transport and Security Specification (incorporated by reference in § 170.299).

205 (a) Patient summary record —(1) Standard. Health Level Seven Clinical Document Architecture (CDA) Release 2, Continuity of Care Document (CCD) (incorporated by reference in §170.299). Implementation specifications. The Healthcare Information Technology Standards Panel (HITSP) Summary Documents Using HL7 CCD Component HITSP/C32 (incorporated by reference in §170.299).

(2) Standard. ASTM E2369 Standard Specification for Continuity of Care Record and Adjunct to ASTM E2369 (incorporated by reference in §170.299).

(3) Standard. HL7 Implementation Guide for CDA® Release 2: IHE Health Story Consolidation, (incorporated by reference in § 170.299). The use of the “unstructured document” document-level template is prohibited.

207(a)(3)Standard. IHTSDO SNOMED CT® International Release July 2012 (incorporated by reference in § 170.299) and US Extension to SNOMED CT® March 2012 Release (incorporated by reference in § 170.299).

207(d) (2) Standard. RxNorm, a standardized nomenclature for clinical drugs produced by the United States National Library of Medicine, August 6, 2012 Release (incorporated by reference in § 170.299).
17
(14)(i) Objective. The EP who transitions their patient to another setting of care or provider of care or refers their patient to another provider of care provides a summary care record for each transition of care or referral. (ii) Measures. (A) Subject to paragraph (c) of this section, the EP that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals;
(B) Subject to paragraph (c) of this section, the EP that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 10 percent of such transitions and referrals either--
(1) Electronically transmitted using Certified EHR Technology to a recipient; or
(2) Where the recipient receives the summary of care record via exchange facilitated by

an organization that is a NwHIN Exchange participant or in a manner that is consistent with the governance mechanism ONC establishes for the nationwide health information network, and
(C) Subject to paragraph (c) of this section an EP must satisfy one of the following:
(1) Conducts one or more successful electronic exchanges of a summary of care record meeting the measure specified in paragraph (j)(14)(ii)(B) of this section with a recipient using technology to receive the summary of care record that was designed by a different EHR developer than the sender's EHR technology certified at 45 CFR 107.314(b)(2); or
(2) Conducts one or more successful tests with the CMS designated test EHR during the EHR reporting period.
(iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who transfers a patient to another setting or refers a patient to another provider less than 100 times during the EHR reporting period. (11)(i) Objective. The eligible hospital or CAH that transitions their patient to another setting of care or provider of care or refers their patient to another provider of care provides a summary care record for each transition of care or referral. (ii) Measures. (A) Subject to paragraph (c) in this section, the eligible hospital or CAH that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals,
(B) Subject to paragraph (c) in this section, the eligible hospital or CAH that transitions their patient to another setting of care or provider of care provides a summary of care record for more than 10 percent of such transitions and referrals either--
(1) Electronically transmitted using Certified EHR Technology to a recipient; or
(2) Where the recipient receives the summary of care record via exchange facilitated by an organization that is a NwHIN Exchange participant or in a manner that is consistent with the
governance mechanism ONC establishes for the nationwide health information network; and
(C) Subject to paragraph (c) of this section an eligible hospital or CAH must satisfy one of the following:
(1) Conducts one or more successful electronic exchanges of a summary of care record meeting the measure specified in paragraph (l)(11)(ii)(B) of this section with a recipient using technology to receive the summary of care record that was designed by a different EHR developer than the sender's EHR technology certified at 45 CFR 107.314(b)(2); or
(2) Conducts one or more successful tests with the CMS designated test EHR during the EHR reporting period.
(b)(2) Transitions of care – create and transmit transition of care/referral summaries. (i) Create. Enable a user to electronically create a transition of care/referral summary formatted according to the standard adopted at § 170.205(a)(3) that includes, at a minimum, the Common MU Data Set and the following data expressed, where applicable, according to the specified standard(s):
(A) Encounter diagnoses. The standard specified in § 170.207(i) or, at a minimum, the version of the standard specified § 170.207(a)(3);
(B) Immunizations. The standard specified in § 170.207(e)(2);
(C) Cognitive status;
(D) Functional status; and
(E) Ambulatory setting only. The reason for referral; and referring or transitioning provider’s name and office contact information.
(F) Inpatient setting only. Discharge instructions.

(ii) Transmit. Enable a user to electronically transmit the transition of care/referral summary created in paragraph (b)(2)(i) of this section in accordance with:
(A) The standard specified in § 170.202(a).
(B) Optional. The standards specified in § 170.202(a) and (b).
(C) Optional. The standards specified in § 170.202(b) and (c).
207 (i) Encounter diagnoses. Standard. The code set specified at 45 CFR 162.1002(c)(2) for the indicated conditions.

45 CFR 162.1002(c)(2) International Classification of Diseases, 10th Revision, Clinical Modification (ICD–10–CM) (including The Official ICD–10–CM Guidelines for Coding and Reporting), as maintained and distributed by HHS, for the following conditions:
(i) Diseases.
(ii) Injuries.
(iii) Impairments.
(iv) Other health problems and their manifestations.
(v) Causes of injury, disease, impairment, or other health problems.

207(a)(3) Standard. IHTSDO SNOMED CT® International Release July 2012 (incorporated by reference in § 170.299) and US Extension to SNOMED CT® March 2012 Release (incorporated by reference in § 170.299).

207(e)(2) Standard. HL7 Standard Code Set CVX -- Vaccines Administered, updates through July 11, 2012 (incorporated by reference in § 170.299).

§ 170.202 Transport standards. The Secretary adopts the following transport standards:
(a) Standard. ONC Applicability Statement for Secure Health Transport (incorporated by reference in § 170.299).
(b) Standard. ONC XDR and XDM for Direct Messaging Specification (incorporated by reference in § 170.299).
(c) Standard. ONC Transport and Security Specification (incorporated by reference in § 170.299).
18
(15)(i) Objective. Capability to submit electronic data to immunization registries or immunization information systems except where prohibited, and in accordance with applicable law and practice. (ii) Measure. Successful ongoing submission of electronic immunization data from Certified EHR Technology to an immunization registry or immunization information system for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP that meets one or more of the following criteria:
(A) Does not administer any of the immunizations to any of the populations for which data is collected by their jurisdiction's immunization registry or immunization information system during the EHR reporting period.
(B) Operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required for Certified EHR Technology at the start of his or her EHR reporting period.
(C) Operates in a jurisdiction where no immunization registry or immunization information system provides information timely on capability to receive immunization data.
(D) Operates in a jurisdiction for which no immunization registry or immunization information system that is capable of accepting the specific standards required by Certified EHR Technology at the start of his or her EHR reporting period can enroll additional EPs.
 (12)(i) Objective. Capability to submit electronic data to immunization registries or immunization information systems except where prohibited, and in accordance with applicable law and practice. (ii) Measure. Successful ongoing submission of electronic immunization data from Certified EHR Technology to an immunization registry or immunization information system for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that meets one or more of the following criteria:
(A) The eligible hospital or CAH does not administer any of the immunizations to any of the populations for which data is collected by their jurisdiction's immunization registry or immunization information system during the EHR reporting period.
(B) The eligible hospital or CAH operates in a jurisdiction for which no immunization registry or immunization information system is capable of accepting the specific standards required for Certified EHR Technology at the start of their EHR reporting period.
(C) The eligible hospital or CAH operates in a jurisdiction where no immunization registry or immunization information system provides information timely on capability to receive immunization data.
(D) Operates in a jurisdiction for which no immunization registry or immunization information system that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional eligible hospitals or CAHs.
(f) Public health. (1) Immunization information. Enable a user to electronically record, change, and access immunization information.
(2) Transmission to immunization registries. EHR technology must be able to electronically create immunization information for electronic transmission in accordance with:
(i) The standard and applicable implementation specifications specified in § 170.205(e)(3); and
(ii) At a minimum, the version of the standard specified in § 170.207(e)(2).
205(e)(3)Standard. HL7 2.5.1 (incorporated by reference in § 170.299). Implementation specifications. HL7 2.5.1 Implementation Guide for Immunization Messaging, Release 1.4, (incorporated by reference in § 170.299).

207(e)(2) Standard. HL7 Standard Code Set CVX -- Vaccines Administered, updates through July 11, 2012 (incorporated by reference in § 170.299).
19
 (16)(i) Objective. Protect electronic health information created or maintained by the Certified EHR Technology through the implementation of appropriate technical capabilities. (ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the encryption/security of data stored in Certified EHR Technology in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary and correct identified security deficiencies as part of the EP's risk management process. (13)(i) Objective. Capability to submit electronic reportable laboratory results to public health agencies, where except where prohibited, and in accordance with applicable law and practice. (ii) Measure. Successful ongoing submission of electronic reportable laboratory results from Certified EHR Technology to a public health agency for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that meets one or more of the following criteria:
(A) Operates in a jurisdiction for which no public health agency is capable of receiving electronic reportable laboratory results in the specific standards required for Certified EHR Technology at the start of their EHR reporting period.
(B) Operates in a jurisdiction for which no public health agency provides information timely on capability to receive electronic reportable laboratory results.
(C) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional eligible hospitals or CAHs.
(d) Privacy and security. (1) Authentication, access control, and authorization. (i) Verify against a unique identifier(s) (e.g., username or number) that a person seeking access to electronic health information is the one claimed; and
(ii) Establish the type of access to electronic health information a user is permitted based on the unique identifier(s) provided in paragraph (d)(1)(i) of this section, and the actions the user is permitted to perform with the EHR technology.

(2) Auditable events and tamper-resistance. (i) Record actions. EHR technology must be able to:
(A) Record actions related to electronic health information in accordance with the standard specified in § 170.210(e)(1);
(B) Record the audit log status (enabled or disabled) in accordance with the standard specified in § 170.210(e)(2) unless it cannot be disabled by any user; and
(C) Record the encryption status (enabled or disabled) of electronic health information locally stored on end-user devices by EHR technology in accordance with the standard specified in § 170.210(e)(3) unless the EHR technology prevents electronic health information from being locally stored on end-user devices (see 170.314(d)(7) of this section).
(ii) Default setting. EHR technology must be set by default to perform the capabilities
specified in paragraph (d)(2)(i)(A) of this section and, where applicable, paragraphs
(d)(2)(i)(B) or (C), or both paragraphs (d)(2)(i)(B) and (C).

(iii) When disabling the audit log is permitted. For each capability specified in paragraphs (d)(2)(i)(A) through (C) of this section that EHR technology permits to be disabled, the ability to do so must be restricted to a limited set of identified users.
(iv) Audit log protection. Actions and statuses recorded in accordance with paragraph (d)(2)(i) of this section must not be capable of being changed, overwritten, or deleted by the EHR technology.
(v) Detection. EHR technology must be able to detect whether the audit log has been altered.

(3) Audit report(s). Enable a user to create an audit report for a specific time period and to sort entries in the audit log according to each of the data specified in the standards at § 170.210(e).
210(e) Record actions related to electronic health information, audit log status, and encryption of end-user devices. (1)(i) The audit log must record the information specified in sections 7.2 through 7.4, 7.6, and 7.7 of the standard specified at § 170.210(h) when EHR technology is in use.
(ii) The date and time must be recorded in accordance with the standard specified at §
170.210(g). (2)(i) The audit log must record the information specified in sections 7.2 and 7.4 of the standard specified at § 170.210(h) when the audit log status is changed.
(ii) The date and time each action occurs in accordance with the standard specified at § 170.210(g).
(3) The audit log must record the information specified in sections 7.2 and 7.4 of the standard specified at § 170.210(h) when the encryption status of electronic health information locally stored by EHR technology on end-user devices is changed. The date and time each action occurs in accordance with the standard specified at § 170.210(g).

210(g) Synchronized clocks. The date and time recorded utilize a system clock that has been synchronized following (RFC 1305) Network Time Protocol, (incorporated by reference in § 170.299) or (RFC 5905) Network Time Protocol Version 4, (incorporated by reference in § 170.299).
210(h) Audit log content. ASTM E2147-01(Reapproved 2009), (incorporated by reference in § 170.299)
20
 (17)(i) Objective. Use secure electronic messaging to communicate with patients on relevant health information. (ii) Measure. A secure message was sent using the electronic messaging function of Certified EHR Technology by more than 5 percent of unique patients (or their authorized representatives) seen by the EP during the EHR reporting period. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following criteria:
(A) Has no office visits during the EHR reporting period.
(B) Who conducts 50 percent or more of his or her patient encounters in a county that does not have 50 percent or more of its housing units with 3Mbps broadband availability according to the latest information available from the FCC on the first day of their EHR reporting period.
(e)(3) Ambulatory setting only—secure messaging. Enable a user to electronically send messages to, and receive messages from, a patient in a manner that ensures:
(i) Both the patient (or authorized representative) and EHR technology user are authenticated; and
(ii) The message content is encrypted and integrity-protected in accordance with the standard for encryption and hashing algorithms specified at § 170.210(f).
210 (f) Encryption and hashing of electronic health information. Any encryption and hashing algorithm identified by the National Institute of Standards and Technology (NIST) as an approved security function in Annex A of the FIPS Publication 140-2 (incorporated by reference in § 170.299).

Essentially TLS with RSA/SHA and Triple-DES or AES Encryption. Might as well just apply IHE ATNA.
21
(14)(i) Objective. Capability to submit electronic syndromic surveillance data to public health agencies, except where prohibited, and in accordance with applicable law and practice. (ii) Measure. Successful ongoing submission of electronic syndromic surveillance data from Certified EHR Technology to a public health agency for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that meets one or more of the following criteria:
(A) Does not have an emergency or urgent care department.
(B) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required for Certified EHR Technology at the start of their EHR reporting period or can enroll additional eligible hospitals or CAHs.
(C) Operates in a jurisdiction for which no public health agency provides information timely on capability to receive syndromic surveillance data.
(D) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional eligible hospitals or CAHs.
(f)(3) Transmission to public health agencies – syndromic surveillance. EHR technology must be able to electronically create syndrome-based public health surveillance information for electronic transmission in accordance with:
(i) Ambulatory setting only. (A) The standard specified in § 170.205(d)(2).
(B) Optional. The standard (and applicable implementation specifications) specified in § 170.205(d)(3).
(ii) Inpatient setting only. The standard (and applicable implementation specifications) specified in § 170.205(d)(3).
205(d)(2) Standard. HL7 2.5.1 (incorporated by reference in §170.299).

205(d)(3) Standard. HL7 2.5.1 (incorporated by reference in § 170.299). Implementation specifications. PHIN Messaging Guide for Syndromic Surveillance (incorporated by reference in § 170.299) and Conformance Clarification for EHR Certification of Electronic Syndromic Surveillance, Addendum to PHIN Messaging Guide for Syndromic Surveillance (incorporated by reference in § 170.299).
22
 (15)(i) Objective. Protect electronic health information created or maintained by the Certified EHR Technology through the implementation of appropriate technical capabilities. (ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1), including addressing the encryption/security of data stored in Certified EHR Technology in accordance with requirements under 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3), and implement security updates as necessary and correct identified security deficiencies as part of the eligible hospital's or CAH's risk management process. (a) (12) Image results. Electronically indicate to a user the availability of a patient’s images and narrative interpretations (relating to the radiographic or other diagnostic test(s)) and enable electronic access to such images and narrative interpretations.
23
 (16)(i) Objective. Automatically track medications from order to administration using assistive technologies in conjunction with an electronic medication administration record (eMAR). (ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of medication orders created by authorized providers of the eligible hospital’s or CAH’s inpatient or emergency department (POS 21 or 23) during the EHR reporting period for which all doses are tracked using eMAR. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH with an average daily inpatient census of fewer than 10 patients.
24
 (k) Stage 2 menu set criteria for EPs. (m) Stage 2 menu set criteria for eligible hospitals or CAHs.An eligible hospital or CAH must meet the measure criteria for three of the following objectives and associated measures.
25
 (1)(i) Objective. Record whether a patient 65 years old or older has an advance directive. (ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 65 years old or older admitted to the eligible hospital's or CAH's inpatient department (POS 21) during the EHR reporting period have an indication of an advance directive status recorded as structured data. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that admits no patients age 65 years old or older during the EHR reporting period. (a)(17) Inpatient setting only—advance directives. Enable a user to electronically record whether a patient has an advance directive.
26
 (1)(i) Objective. Imaging results consisting of the image itself and any explanation or other accompanying information are accessible through Certified EHR Technology. (ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of all tests whose result is one or more images ordered by the EP during the EHR reporting period are accessible through Certified EHR Technology. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following criteria.
(A) Orders less than 100 tests whose result is an image during the EHR reporting period.
(B) Has no access to electronic imaging results at the start of the EHR reporting period. 		(2)(i) Objective. Imaging results consisting of the image itself and any explanation or other accompanying information are accessible through Certified EHR Technology. (ii) Measure. Subject to paragraph (c) of this section, more than 10 percent of all tests whose result is an image ordered by an authorized provider of the eligible hospital or CAH for patients admitted to its inpatient or emergency department (POS 21 or 23) during the EHR reporting period are accessible through Certified EHR Technology. (a)(12) Image results. Electronically indicate to a user the availability of a patient’s images and narrative interpretations (relating to the radiographic or other diagnostic test(s)) and enable electronic access to such images and narrative interpretations.
27
(2)(i) Objective. Record patient family health history as structured data. (ii) Measure. More than 20 percent of all unique patients seen by the EP during the EHR reporting period have a structured data entry for one or more first-degree relatives. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who has no office visits during the EHR reporting period. (3)(i) Objective. Record patient family health history as structured data. (ii) Measure. More than 20 percent of all unique patients admitted to the eligible hospital or CAH's inpatient or emergency department (POS 21 or 23) during the EHR reporting period have a structured data entry for one or more first-degree relatives. (a) (13) Family health history. Enable a user to electronically record, change, and access a patient’s family health history according to:
(i) At a minimum, the version of the standard specified in § 170.207(a)(3); or
(ii) The standard specified in § 170.207(j).
207(a)(3) Standard. IHTSDO SNOMED CT® International Release July 2012 (incorporated by reference in § 170.299) and US Extension to SNOMED CT® March 2012 Release (incorporated by reference in § 170.299).
207(j) Family health history. HL7 Version 3 Standard: Clinical Genomics; Pedigree, (incorporated by reference in § 170.299).

207(j) Family health history. HL7 Version 3 Standard: Clinical Genomics; Pedigree, (incorporated by reference in § 170.299).
28
 (4)(i) Objective. Generate and transmit permissible discharge prescriptions electronically (eRx). (ii) Measure. More than 10 percent of hospital discharge medication orders for permissible prescriptions (for new, changed and refilled prescriptions) are queried for a drug formulary and transmitted electronically using Certified EHR Technology. (iii) Exclusion in accordance with paragraph (i)(2) of this section. Any eligible hospital or CAH that does not have an internal pharmacy that can accept electronic prescriptions and there are no pharmacies that accept electronic prescriptions within 10 miles at the start of its EHR reporting period. (a) (10) Drug-formulary checks. EHR technology must automatically and electronically check whether a drug formulary (or preferred drug list) exists for a given patient and medication.
(b)(3) Electronic prescribing. Enable a user to electronically create prescriptions and prescription-related information for electronic transmission in accordance with:
(i) The standard specified in § 170.205(b)(2); and
(ii) At a minimum, the version of the standard specified in § 170.207(d)(2).
205(b)(2)Standard. NCPDP SCRIPT Standard, Implementation Guide, Version 10.6 (incorporated by reference in §170.299).

207(d)(2) Standard. RxNorm, a standardized nomenclature for clinical drugs produced by the United States National Library of Medicine, August 6, 2012 Release (incorporated by reference in § 170.299).
29
(3)(i) Objective. Capability to submit electronic syndromic surveillance data to public health agencies, except where prohibited, and in accordance with applicable law and practice.(ii) Measure. Successful ongoing submission of electronic syndromic surveillance data from Certified EHR Technology to a public health agency for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP that meets one or more of the following criteria:
(A) Is not in a category of providers who collect ambulatory syndromic surveillance information on their patients during the EHR reporting period.
(B) Operates in a jurisdiction for which no public health agency is capable of receiving electronic syndromic surveillance data in the specific standards required for Certified EHR Technology at the start of their EHR reporting period.
(C) Operates in a jurisdiction where no public health agency provides information timely on capability to receive syndromic surveillance data.
(D) Operates in a jurisdiction for which no public health agency that is capable of accepting the specific standards required by Certified EHR Technology at the start of their EHR reporting period can enroll additional EPs. 		(f)(3) Transmission to public health agencies – syndromic surveillance. EHR technology must be able to electronically create syndrome-based public health surveillance information for electronic transmission in accordance with:
(i) Ambulatory setting only. (A) The standard specified in § 170.205(d)(2).
(B) Optional. The standard (and applicable implementation specifications) specified in § 170.205(d)(3).
(ii) Inpatient setting only. The standard (and applicable implementation specifications) specified in § 170.205(d)(3).
205(d)(2) Standard. HL7 2.5.1 (incorporated by reference in §170.299).

205(d)(3) Standard. HL7 2.5.1 (incorporated by reference in § 170.299). Implementation specifications. PHIN Messaging Guide for Syndromic Surveillance (incorporated by reference in § 170.299) and Conformance Clarification for EHR Certification of Electronic Syndromic Surveillance, Addendum to PHIN Messaging Guide for Syndromic Surveillance (incorporated by reference in § 170.299).
30
 (4)(i) Objective. Capability to identify and report cancer cases to a public health central cancer registry, except where prohibited, and in accordance with applicable law and practice. (ii) Measure. Successful ongoing submission of cancer case information from Certified EHR Technology to a public health central cancer registry for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following--
(A) Does not diagnose or directly treat cancer.
(B) Operates in a jurisdiction for which no public health agency is capable of receiving electronic cancer case information in the specific standards required for Certified EHR Technology at the start of their EHR reporting period.
(C) Operates in a jurisdiction where no public health agency provides information timely on capability to receive electronic cancer case information.
(D) Operates in a jurisdiction for which no public health agency that is capable of receiving electronic cancer case information in the specific standards required for Certified EHR Technology at the beginning of their EHR reporting period can enroll additional EPs.
(f)(5) Optional—ambulatory setting only—cancer case information. Enable a user to electronically record, change, and access cancer case information.
(f)(6) Optional—ambulatory setting only—transmission to cancer registries. EHR technology must be able to electronically create cancer case information for electronic transmission in accordance with:
(i) The standard (and applicable implementation specifications) specified in § 170.205(i); and
(ii) At a minimum, the versions of the standards specified in § 170.207(a)(3) and (c)(2).
205(i) Cancer information. Standard. HL7 Clinical Document Architecture (CDA), Release 2.0, Normative Edition (incorporated by reference in § 170.299). Implementation specifications. Implementation Guide for Ambulatory Healthcare Provider Reporting to Central Cancer
Registries, HL7 Clinical Document Architecture (CDA), (incorporated by reference in § 170.299).

207(a)(3) Standard. IHTSDO SNOMED CT® International Release July 2012 (incorporated by reference in § 170.299) and US Extension to SNOMED CT® March 2012 Release (incorporated by reference in § 170.299).
207(j) Family health history. HL7 Version 3 Standard: Clinical Genomics; Pedigree, (incorporated by reference in § 170.299).

207(c)(2) Standard. Logical Observation Identifiers Names and Codes (LOINC®) Database version 2.40, a universal code system for identifying laboratory and clinical observations produced by the Regenstrief Institute, Inc. (incorporated by reference in § 170.299).
31
 (5)(i) Objective. Capability to identify and report specific cases to a specialized registry (other than a cancer registry), except where prohibited, and in accordance with applicable law and practice. (ii) Measure. Successful ongoing submission of specific case information from Certified EHR Technology to a specialized registry for the entire EHR reporting period. (iii) Exclusion in accordance with paragraph (h)(2) of this section. Any EP who meets one or more of the following criteria:
(A) Does not diagnose or directly treat any disease associated with a specialized registry sponsored by a national specialty society for which the EP is eligible, or the public health agencies in their jurisdiction;
(B) Operates in a jurisdiction for which no specialized registry sponsored by a public health agency or by a national specialty society for which the EP is eligible is capable of receiving electronic specific case information in the specific standards required by Certified EHR Technology at the beginning of their EHR reporting period;
(C) Operates in a jurisdiction where no public health agency or national specialty society for which the EP is eligible provides information timely on capability to receive information into their specialized registries; or
(D) Operates in a jurisdiction for which no specialized registry sponsored by a public health agency or by a national specialty society for which the EP is eligible that is capable of receiving electronic specific case information in the specific standards required by Certified EHR Technology at the beginning of his or her EHR reporting period can enroll additional EPs.
32
 (6)(i) Objective. Record electronic notes in patient records. (ii) Measure. Enter at least one electronic progress note created, edited, and signed by an EP for more than 30 percent of unique patients with at least one office visit during the EHR reporting period. The text of the electronic note must be text-searchable and may contain drawings and other content.(5)(i) Objective. Record electronic notes in patient records. (ii) Measure: Enter at least one electronic progress note created, edited and signed by an authorized provider of the eligible hospital’s or CAH’s inpatient or emergency department (POS 21 or 23) for more than 30 percent of unique patients admitted to the eligible hospital or CAH’s inpatient or emergency department during the EHR reporting period. The text of the electronic note must be text-searchable and may contain drawings and other content. (a)(9) Electronic notes. Enable a user to electronically record, change, access, and search electronic notes.
33
 (6)(i) Objective. Provide structured electronic lab results to ambulatory providers. (ii) Measure. Hospital labs send structured electronic clinical lab results to the ordering provider for more than 20 percent of electronic lab orders received. (b)(6) Inpatient setting only – transmission of electronic laboratory tests and values/results to ambulatory providers. EHR technology must be able to electronically create laboratory test reports for electronic transmission in accordance with the standard specified in § 170.205(j) and with laboratory tests expressed in accordance with, at a minimum, the version of the standard specified in § 170.207(c)(2). 205(j) Electronic incorporation and transmission of lab results. Standard. HL7 Version 2.5.1 Implementation Guide: S&I Framework Lab Results Interface, (incorporated by reference in § 170.299).

207(c)(2) Standard. Logical Observation Identifiers Names and Codes (LOINC®) Database version 2.40, a universal code system for identifying laboratory and clinical observations produced by the Regenstrief Institute, Inc. (incorporated by reference in § 170.299).