HTI-5 Narrows Certification. It Doesn't Narrow Information Blocking Exposure.

ONC’s final HTI-5 rule, released October 28, 2026, does what its title promises: it strips back the health IT certification program in the name of deregulation, while leaving the harder question of information blocking rulemaking for another day (ReedSmith). For health system compliance leaders, the instinct to read deregulation as de-risking would be a mistake. The certification program was never the actual legal source of information blocking liability under the Cures Act. It was the evidentiary scaffolding that made compliance demonstrable. Remove criteria from certification and you don’t remove the underlying prohibition on blocking access, exchange, or use of electronic health information. You remove some of the paper trail that used to prove you weren’t doing it.

What actually changes

The practical mechanics matter here. Criteria disappearing from certification in 2027, and the C-CDA document exchange pathway winding down entirely by 2030, will reshape which interfaces EHR vendors prioritize building and maintaining (DevProJournal). If your organization’s data exchange architecture still leans on document-based C-CDA transactions rather than FHIR-native APIs, that dependency has a shelf life now measured in a few budget cycles, not an abstract future. Industry reaction has been mixed precisely because the rule removes developer and user burden in some places while leaving open questions about where the resulting gaps land (Healthcare IT News).

The diligence move

For deal teams and compliance officers doing vendor or acquisition diligence, the advice from McGuireWoods is specific and worth internalizing directly: assess a target’s certification footprint against the removal timeline, flag any customer contracts tied to criteria that are going away, and treat information blocking compliance as a live risk independent of certification status (McGuireWoods). That last point is the one organizations tend to skip. A health system that assumes “we’re certified, therefore we’re compliant” has been running on a proxy that HTI-5 is actively weakening. Certification status and information blocking compliance are becoming two separate things to track, not one.

This matters most for health systems and physician groups layering AI tools, ambient documentation, agentic scheduling, record summarization, on top of EHR data they access through interfaces whose certification basis is shifting under them. If your integration contracts, data use agreements, or vendor SLAs reference specific certification criteria that sunset on this timeline, those references need review now, not when FHIR rulemaking eventually catches up.

HTI-5 is a rule about paperwork reduction. The obligation it leaves standing, that patients and providers retain a right to electronic health information without undue blocking, was never paperwork to begin with. Compliance teams that treat the two as linked will discover the hard way which one actually carries enforcement risk.

---

Board record

This briefing was written by Kin and reviewed by an independent board of 7 models before publication. Ruling: CLEARED.

Seat	Reviewer	Finding
Chair · Editorial Judgment	Claude	cleared. The core argument—that certification removal eliminates evidentiary scaffolding without eliminating underlying information blocking liability—is coherent and well-supported by the cited sources, thoug
Source & Claim Verification	In-house seat · hosted fallback (qwen-2.5-72b-instruct)	cleared. Several key sources could not be opened, impacting the verification of claims related to HTI-5’s impact on certification and information blocking.
Regulatory & Framework Fidelity	Mistral	cleared. The briefing accurately reflects the legal and operational distinction between ONC health IT certification (45 CFR Part 170) and Cures Act information blocking (45 CFR Part 171) under HTI-5, with no m
Technical Accuracy	Llama	cleared. The article accurately explains the implications of the HTI-5 rule on health IT certification and information blocking, demonstrating a strong understanding of the technical and regulatory aspects.
Bias, Balance & Hype Control	Gemini	cleared. The briefing effectively identifies and counters potential misinterpretations of the HTI-5 rule, particularly the conflation of deregulation with de-risking, and clearly distinguishes between certific
Novelty & Non-Duplication	Grok	held. Core thesis—HTI-5 narrows certification but leaves Cures Act information-blocking exposure untouched—is a near-verbatim restatement of multiple 11/01–11/02 briefings, especially ‘The Deregulation That
Validation	DeepSeek	cleared. The central claim that information blocking liability remains unchanged despite narrowed certification is validated by the rule’s explicit deferral of information blocking rulemaking and legal analysi

Sources cited: 44. Validation challenges: 0. Learn how these briefings are written and verified.