CMS Recognizes EHNAC Program as Evidence of Appropriate Security for Data at the Point of Care Program

EHNAC HNAP Accredited Organizations Now Meet Security Requirements for the Pilot Program

FARMINGTON, CT – May 7, 2020 – The Electronic Healthcare Network Accreditation Commission (EHNAC), a non-profit federally recognized standards development organization and accrediting body for organizations that electronically exchange healthcare data, today announced its HNAP program has been recognized as evidence that an organization has met the security requirements for the Data at the Point of Care pilot. In order to use the program’s Data APIs, CMS has mandated that providers must provide evidence that their EHR software meets one or more specific security requirements, which includes achieving EHNAC HNAP accreditation.

“Earlier this year, CMS issued a transformative rule that will provide Medicare beneficiaries with unprecedented safe, secure access to their health data so they can make informed healthcare decisions and better manage their care. Data at the Point of Care is an important program aimed at meeting that goal by driving EHR interoperability across all CMS initiatives,” said Lee Barrett, CEO and Executive Director, EHNAC. “We are pleased that EHNAC’s HNAP program has been recognized as a means to ensure secure patient and provider access to Medicare claims data, while adhering to stringent industry-established standards along with HIPAA regulations.”

Part of the MyHealthEData initiative, Data at the Point of Care builds on the agency’s Blue Button 2.0 work and enables providers to deliver high quality care directly to Medicare beneficiaries by making a patient’s Medicare claims data available to the provider for treatment needs. The information can be accessed in existing workflows without logging into another application or portal. Claims data can be used to confirm information, fill in gaps in care, and improve patient safety. The claims data is provided using the industry-standard HL7 Fast Healthcare Interoperability Resources (FHIR) resources, specifically the Bulk FHIR specification.

“Significant progress has been made with adoption of FHIR as the industry works collaboratively towards achieving the important goal of interoperability. For the Data at the Point of Care program, CMS has recognized that FHIR is an industry standard that best supports an EHR’s ability to securely share data between patients and providers,” added Barrett who also serves as a member of the Executive Steering Committee for ONC’s Payer + Provider FAST FHIR Task Force.

The EHNAC criteria for each of its accreditation programs establishes the foundational requirements for measuring an organization’s ability to meet federal and state healthcare reform mandates such as HIPAA, 21st Century Cures, Omnibus, ARRA/HITECH, ACA and other mandates for covered entities and business associates focusing on the areas of privacy, security, confidentiality, best practices, procedures and assets. Healthcare industry stakeholders are encouraged to regularly visit to download and review the latest EHNAC criteria versions in full detail.

The Electronic Healthcare Network Accreditation Commission (EHNAC) is a voluntary, self-governing standards development organization (SDO) established to develop standard criteria and accredit organizations that electronically exchange healthcare data. These entities include accountable care organizations, data registries, electronic health networks, EPCS vendors, e-prescribing solution providers, financial services firms, health information exchanges, health information service providers, management service organizations, medical billers, outsourced service providers, payers, practice management system vendors, third-party administrators and trusted networks. The Commission is an authorized HITRUST External Assessor, making it the only organization able to provide both EHNAC accreditation as well as to conduct HITRUST CSF assessment services.

EHNAC was founded in 1993 and is a tax-exempt 501(c)(6) nonprofit organization. Guided by peer evaluation, the EHNAC accreditation process promotes quality service, innovation, cooperation and open competition in healthcare. To learn more, visit, contact, or follow us on TwitterLinkedIn and YouTube.