ehr onc final certification - Department of Health Care Services
ehr onc final certification - Department of Health Care Services
ehr onc final certification - Department of Health Care Services
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
definition <strong>of</strong> author is consistent with our expectation. While we believe that in most<br />
cases a user will be a health care pr<strong>of</strong>essional performing an action using Certified EHR<br />
Technology, it is also possible that a device or another s<strong>of</strong>tware process or program could<br />
perform any one <strong>of</strong> these actions. We do not intend to preclude Complete EHR and EHR<br />
Module developers from including these and other types <strong>of</strong> specific features.<br />
Comment. One commenter stated that the audit alert criterion exceeds reasonable<br />
expectations for Certified EHR Technology to provide automatic alerts, and<br />
recommended that the audit criteria focus on record access rather than electronic alerts.<br />
Several commenters suggested that alerts are not well defined and should be removed<br />
from the criteria. Several commenters expressed c<strong>onc</strong>ern that the audit alerting criterion<br />
goes beyond what is required by HITECH and HIPAA and exceeds the current<br />
capabilities <strong>of</strong> products in the market, and recommends that the alerting criterion be<br />
eliminated from the <strong>final</strong> rule. Some commenters recommended against the adoption <strong>of</strong><br />
<strong>certification</strong> criterion that requires EHR systems to create an unlimited and open-ended<br />
series <strong>of</strong> rules to produce user-defined alerts, and suggested that we should clearly define<br />
which actions should be recorded and what alerts should be defined and provided in an<br />
audit log. Several commenters stated that the use <strong>of</strong> the phrase “based on user-defined<br />
events” in the criterion could be easily misinterpreted or misunderstood to extend beyond<br />
“entity-defined” events to include individual patient preferences. Some <strong>of</strong> the<br />
commenters that expressed c<strong>onc</strong>erns also contended that it would be difficult to test and<br />
certify this portion <strong>of</strong> the <strong>certification</strong> criterion.<br />
Response. Again, we appreciate the thoroughness <strong>of</strong> the commenters’<br />
suggestions. With respect to alerts based on user-defined events, we had intended for<br />
Page 106 <strong>of</strong> 228