The U.S. Department of Health and Human Services (HHS) introduced new TEFCA oversight measures to monitor the Trusted Exchange Framework and Common Agreement. This regulatory update was announced alongside data showing that the total volume of health record exchange has surpassed 1 billion instances. This figure represents a significant increase from the 10 million records documented in early 2005. To manage this expansion, the Office of the National Coordinator for Health Information Technology (ONC) has engaged Alliance Global Tech Inc. through a five-year contract valued at up to $5.62 million. This federal IT contractor is tasked with providing audit, review, and compliance support to ensure that organizations participating in the framework adhere to established policies. The initiative, which went live in December 2023 following the 2016 mandate of the 21st Century Cures Act, is now undergoing rigorous reviews of Qualified Health Information Networks (QHINs) to maintain network integrity.
HHS Secretary Robert F. Kennedy, Jr. emphasized the importance of individual data control in a formal statement, noting: “Americans deserve secure, timely access to their health records. We are strengthening TEFCA to put patients in control of their health information, improve care coordination, and ensure health data moves securely where it is needed. Access to your own health records is a fundamental right.” This administrative push comes as healthcare technology leaders and more than 75 health systems expressed concerns regarding bad actors potentially exploiting the system. Critics have argued that the current reliance on self-attestation and decentralized monitoring is insufficient to prevent the unauthorized monetization of patient data under the guise of the treatment pathway. Consequently, the new contract with Alliance Global Tech Inc. includes a baseline year of approximately $1.28 million to establish centralized scrutiny and verify compliance among participants.
Beyond network monitoring, the administration is intensifying its stance against information blocking, with potential penalties reaching $1 million per violation for developers and the loss of Medicare payments for providers. Thomas Keane, M.D., National Coordinator for Health IT, informed HIMSS26 attendees in March that the department has received over 1,500 complaints via its specialized portal. Highlighting the clinical necessity of these rules, Chris Klomp, HHS Chief Counselor and Director of the Center for Medicare, stated: “Seamless interoperability is essential for quality care; health records must flow easily between providers and patients. When critical health information is blocked or withheld, patients suffer the consequences. We are fully committed to using every appropriate regulatory and policy tool available to root out information blocking and protect patients’ right to access their own health data.” If behaviors indicating fraud or criminal activity are identified, the ONC plans to refer cases to the Department of Justice, the HHS Office of Inspector General, or the HHS Office for Civil Rights for further investigation. Through these combined efforts, the administration aims to facilitate a more robust health record exchange while protecting the legal rights of individuals to access their information securely.
