In a significant pivot toward deregulation, the U.S. Department of Health and Human Services (HHS), through the Office of the National Coordinator for Health Information Technology (ONC), has finalized the Health Data, Technology, and Interoperability (HTI-5) rule. The policy is designed to overhaul the federal health IT certification program, with officials projecting that the changes will save the industry approximately $1.5 billion in regulatory compliance costs. By stripping away specific administrative hurdles, the administration aims to pivot developer resources toward more impactful advancements, such as user experience and system interoperability.
Main Facts: The Scope of the HTI-5 Final Rule
The HTI-5 final rule serves as a critical update to the voluntary ONC Health IT Certification Program. While the certification itself is technically optional, it functions as a de facto requirement for many providers, as participation in high-stakes federal initiatives—such as the Medicare Promoting Interoperability Program—mandates the use of certified technology.
Key provisions of the final rule include:
- Removal of Certification Criteria: The final rule eliminates 14 specific certification criteria, a scaled-back version of the 34 criteria initially proposed in December 2025.
- Relaxed Testing Requirements: Health IT developers are no longer required to submit annual plans for "real-world testing," which previously compelled vendors to prove their tools functioned as intended within clinical environments.
- AI Transparency Rollback: The rule rescinds the requirement for "AI model cards." Previously, developers were obligated to disclose training data, performance metrics, and validation information for any artificial intelligence or machine learning components embedded in their software.
- Implementation Timeline: Most changes are slated to take effect 60 days following the rule’s publication in the Federal Register, with some provisions staggered for a January 1 effective date.
Chronology: A Shift in Regulatory Philosophy
The HTI-5 rule is the latest chapter in a broader shift in healthcare policy that began in early 2025. Following the change in presidential administration, the federal government initiated a rigorous review of existing healthcare regulations, aiming to reduce the "red tape" that officials argue stifles private-sector innovation.
- 2023–2024 (The Foundation): The ONC previously introduced the HTI-4 rule, which established foundational requirements for electronic prior authorization, e-prescribing, and real-time prescription benefit checks. These rules were viewed as necessary to curb administrative burden for clinicians but added significant development requirements for vendors.
- December 2025 (The Proposal): The ONC released a sweeping proposal for HTI-5, suggesting the removal of 34 criteria. This was met with both support from industry groups seeking relief and concern from patient advocates regarding the potential loss of transparency.
- Early 2026 (The Final Rule): HHS moved to finalize a more moderate version of the proposal, opting to cut 14 criteria while preserving certain privacy and security standards that were initially under review for potential elimination.
The current administration has consistently framed these actions as a "deregulatory agenda," moving to rescind earlier directives on health AI oversight and standardizing agency rulemaking processes to prioritize speed and efficiency over granular federal intervention.
Supporting Data and Financial Implications
The $1.5 billion savings projection is the centerpiece of the administration’s justification for the rule. According to the ONC, the cost of compliance with the previous certification regime had become a significant barrier to entry for smaller health tech startups.
By removing the annual real-world testing requirement and the administrative overhead associated with maintaining the 14 eliminated criteria, developers can theoretically reallocate their engineering talent toward "value-add" features. The ONC argues that when developers spend less time on documentation for government audits, they spend more time building tools that facilitate data exchange and clinical workflow automation.
However, the financial impact is not purely positive. Critics argue that the loss of mandatory AI model cards creates a "black box" environment. Without standardized reporting on how AI models are trained and validated, healthcare organizations may face higher internal costs to conduct their own risk assessments before implementing these tools. Thus, the $1.5 billion in industry savings may be partially offset by increased due diligence costs at the hospital and clinic level.
Official Responses: Balancing Progress and Compliance
Dr. Tom Keane, the National Coordinator for Health IT, has been the primary voice for the administration’s new approach. In an official statement accompanying the rule’s release, Keane emphasized that the agency is prioritizing "decisive action" over bureaucratic inertia.
"Through HTI-5, we have taken decisive action to significantly lower the administrative compliance burden for developers so that they can spend more of their time developing solutions that improve interoperability, automation, and better healthcare for Americans," Dr. Keane noted.
Conversely, the industry response has been bifurcated. Major health IT vendors, who have long advocated for a reduction in the cadence of certification updates, have generally praised the rule as a "common-sense" adjustment. On the other hand, some health policy think tanks and patient advocacy groups have expressed caution. The decision to "punt" on information-blocking definitions—specifically regarding how autonomous AI systems should be governed—has left many stakeholders in a state of regulatory limbo.
The ONC confirmed that while they proposed updating the definitions of "access" and "use" to encompass autonomous AI, those proposals remain under consideration. This indicates that while the administration is aggressive about cutting existing rules, it is taking a more cautious, deliberate approach to establishing new frameworks for emerging technology.
Implications: What This Means for the Future of Health IT
The implications of the HTI-5 rule are far-reaching, affecting everything from cybersecurity to clinical decision-making.
The Privacy and Security Tug-of-War
The ONC’s decision to retain privacy and security certification criteria—specifically those ensuring compliance with HIPAA—is a signal that the agency is not abandoning its core mission of data protection. Despite calls from some factions to streamline these requirements further, the agency appears to have drawn a line in the sand. Ensuring that certified health IT remains a benchmark for safety remains a top priority.
The AI Governance Gap
The removal of AI model card requirements marks a significant transition in how the federal government views artificial intelligence. By removing this requirement, the government is essentially shifting the burden of trust from the vendor to the provider. Hospitals purchasing AI tools will now have to demand their own transparency data from vendors, rather than relying on a standardized federal disclosure template. This could lead to a fragmented landscape where only well-resourced health systems have the capacity to properly vet the AI tools they purchase.
Interoperability vs. Autonomy
The ongoing debate over information blocking and the role of autonomous AI highlights a tension between the goal of universal data access and the need to protect the integrity of the clinical record. By deferring the final decision on these definitions, the ONC is acknowledging that the technology is evolving faster than the current regulatory framework can accommodate.
The "Voluntary" Paradox
Finally, the industry must grapple with the fact that while the program is "voluntary," the market pressure to be ONC-certified is immense. As the criteria evolve, the certification becomes less of a baseline for safety and more of a flexible, modern framework. For developers, this means that while the immediate burden of compliance has lessened, the long-term pressure to demonstrate the efficacy and interoperability of their products in a competitive market remains high.
As the industry prepares for the 60-day rollout of the new rule, the focus will shift toward how these changes manifest in clinical settings. Will the reduction in documentation lead to a boom in meaningful innovation, or will it create gaps in the reliability of the tools that power modern medicine? For now, the HTI-5 rule stands as a bold, if controversial, step in the administration’s effort to redefine the relationship between the federal government and the digital health economy.
