What is Centers for Medicare & Medicaid Services’s Patient Access Rule?

The Interoperability and Patient Access Rule calls on Medicare, Medicaid and CHIP health plans, as well as thosesold on the federal exchanges, to grant electronic access to patient claims data. The Rule puts patients first, giving them access to their health information when they need it most and in a way they can best use it.
This rule is part of the cross-agency MyHealthEData initiative started in 2018 to facilitate data-sharing acrosspublic payers and provider organizations.

Who is it for?

Users of Medicare Advantage (MA) plans, state Medicaid programs [both fee-forservice(FFS) and managed care], Children’s Health Insurance Plans (CHIP) (includingFFS and managed care), and Qualified Health Insurance Plan (QHP) in the healthinsurance exchanges established by the Affordable Care Act (ACA).

How will it work?

Last year, CMS established an “open” Application Programming Interface (API) fordevelopers to create apps that can help beneficiaries access their data and to helphealth care systems exchange information in an interoperable format. This “Blue Button2.0 API” is similar to an app store for a smart phone except it is designed for healthcaresystems instead. Openly-published APIs are accessible to third-party applications anddevelopers. CMS says that over 1,500 developers are building apps with variouspurposes within this API.
The CMS and ONC proposed rules would require Medicare Advantage (MA) organizations, state Medicaid and CHIP FFS programs, Medicaid managed care plans, CHIP managed care entities, and health insurers issuing plans on the Federal HealthInsurance Exchange to implement an API using the HL7 Fast Healthcare Interoperability Resources (FHIR) programming standard. The Administration is not proposing to requirestate CHIP programs that do not operate a FFS program to establish an API.

What do you need to do?

Learn about how you can prepare yourself
Cat Woman

• Stay informed about ways to ensure the apps protect your privacy.


• Select the app of your choice once available in accordance with thesecurity and privacy guidelines.

Why is CMS doing it? / Why is it important?

To promote interoperability and patient empowerment

CMS describes the intent of the API, “Consumers routinely perform many daily tasks on their mobile phones – banking, shopping, paying bills, scheduling – using secure applications. We believe thatobtaining their health information should be just as easy, convenient, and user-friendly.”

The interoperability rules call for healthcare organizations to give patients better access to their personal health data and clearer information about cost, empowering them to make informeddecisions about what care they receive and where.

With secure, standards-based application programming interface (API) requirements, you could have access to and control over your health information, through whatever device or app you choose. Thegoal is to foster choice and competition in health care.


App Developers API Support

Explore and test our APIs, view documentation, connect with a community of developers, and more.