HHS-OIG’s New Health Information Blocking Rule: Covered Actors; Costly Violations; Federal Interagency Coordination
Priority of Investigations; CMP Assessment; Best Practices for Compliance

Course Details
- smart_display Format
On-Demand
- signal_cellular_alt Difficulty Level
Intermediate
- work Practice Area
Health
- event Date
Thursday, October 12, 2023
- schedule Time
1:00 p.m. ET./10:00 a.m. PT
- timer Program Length
90 minutes
-
This 90-minute webinar is eligible in most states for 1.5 CLE credits.
This CLE webinar will discuss the recently published rule that empowers the Department of Health and Human Services Office of Inspector General (HHS-OIG) to impose civil monetary penalties (CMPs) of up to $1 million per violation for unlawful acts of information blocking beginning Sept. 1, 2023. The panel will describe who is subject to the new rule, OIG's enforcement priorities, interagency cooperation, and how CMPs may be assessed. The panel will also provide key considerations and best practices for compliance.
Faculty

Ms. Metnick is a partner in the Corporate Practice Group in the firm's Chicago office and a member of the Healthcare and Privacy & Cybersecurity Teams. She represents a range of healthcare industry clients, including hospitals and health systems, physician organizations and digital health companies. Ms. Metnick advises on healthcare regulatory and transactional matters with a focus on health information privacy and security. She is the founder and leader of Sheppard Mullin Healthy AI, which is an initiative focused on legal issues relates to the use of AI in healthcare. Ms. Metnick counsels healthcare clients on issues relating to AI, including governance, contractual matters, and data related issues. She advises clients on a range of privacy and security laws, including HIPAA and other federal and state privacy laws. Ms. Metnick also counsels businesses in data breach investigations and compliance with federal and state breach notification laws. She is a Certified Information Privacy Professional/United States (CIPP/ US) and a Certified Information Privacy Professional/Europe (CIPP/E).

Mr. Ouellette focuses his practice on representing healthcare organizations and is a Certified Information Privacy Professional–US (CIPP–US). He advises clients on a broad spectrum of healthcare regulatory, clinical trial, data privacy, PBM, healthcare technology, and transactional matters. Mr. Ouellette has experience drafting and negotiating healthcare services agreements and with technology transactions as well as counseling clients on state licensure rules, compliance with fraud and abuse laws, privacy and data protection issues, and the Interoperability and Information Blocking Rules under the 21st Century Cures Act.
Description
On July 3, 2023, HHS-OIG issued a final rule (CMP Rule) that empowers the agency to impose CMPs of up to $1 million per violation for unlawful acts of information blocking in violation of the 21st Century Cures Act. Enforcement begins Sept. 1, 2023.
Under the CMP Rule, any health information network and exchange (HIN/HIE), health IT developer, or healthcare provider that meets the statutory definition of one of these actors, who knows, or should know, that it engaged in a practice that is likely to interfere with access, exchange, or use of electronic health information (unless an exception applies) may be subject to a costly CMP. This means that penalties may be imposed whether or not any actual interference occurs as long as the party has the requisite intent.
OIG's enforcement will be complaint-driven and involve coordination with other regulatory agencies where information blocking violations raise issues within the other agencies' purview. Therefore, counsel should ensure their clients' business practices are compliant across their organizations.
Although the CMP Rule does not apply to healthcare providers generally, counsel should determine whether their healthcare provider clients meet the statutory definition of a developer or HIN/HIE subject to CMPs. Additionally, counsel should be aware of an upcoming HHS proposed rule that would make healthcare providers subject to “appropriate disincentives” set forth by HHS.
Listen as our expert panel discusses the final CMP Rule including who qualifies as information blocking actors and how OIG will prioritize and enforce complaints. The panel will also address interagency cooperation and how it may impact regulated entities, as well as provide best practices for assisting clients with organizational compliance.
Outline
- Overview of 21st Century Cures Act
- Definition of information blocking
- Exceptions
- Information blocking actors
- The final CMP Rule
- Purpose
- Information blocking actors
- Complaint enforcement
- Prioritizing investigations
- Interagency coordination
- ONC
- OCR
- FTC
- Others
- Assessing CMPs
- Why healthcare providers should pay attention
- Future rulemaking related to information blocking
- Best practices for compliance
Benefits
The panel will review these and other important issues:
- Who is subject to the CMP Rule?
- How does the CMP Rule affect healthcare providers?
- What will be the effect of interagency cooperation?
- How can counsel help clients prepare for compliance across their organizations?
- What is the status of ongoing rulemaking related to information blocking?
Unlimited access to premium CLE courses:
- Annual access
- Available live and on-demand
- Best for attorneys and legal professionals
Unlimited access to premium CPE courses.:
- Annual access
- Available live and on-demand
- Best for CPAs and tax professionals
Unlimited access to premium CLE, CPE, Professional Skills and Practice-Ready courses.:
- Annual access
- Available live and on-demand
- Best for legal, accounting, and tax professionals
Related Courses

The ACA and the New Administration: CMS Proposed Rule Impacting Marketplace Eligibility and Other Notable Actions
Tuesday, April 22, 2025
1:00 p.m. ET./10:00 a.m. PT

Healthcare Speaker Programs and AKS Compliance: Regulatory Update, Lessons Learned From Recent Settlements
Tuesday, May 27, 2025
1:00 p.m. ET./10:00 a.m. PT

HIPAA and Beyond: Health Information Privacy Updates
Tuesday, May 27, 2025
1:00 p.m. ET./10:00 a.m. PT
Recommended Resources
Navigating Modern Legal Challenges: A Comprehensive Guide
- Business & Professional Skills
- Career Advancement