Reminder: Do not include any PHI or PII in Confluence. If you require 508 accessibility assistance or any other support for this system, then please send an email to onc-jira-questions@healthit.gov
Master Table of Related and Required Criteria
The Master Table of Related and Required Criteria found below indicates which criteria are required for Privacy and Security (PS) and Conditional (C) certification. The last column of related criteria lists out the criteria for gap certification eligibility.
Table
Criteria | § 170.315 (d)(1) Authentication, Access Control, Authorization | § 170.315 (d)(2) Auditable Events and Tamper-resistance | § 170.315 (d)(3) Audit Report(s) | § 170.315 (d)(4) Amendments | § 170.315 (d)(5) Automatic Access Time-out | § 170.315 (d)(6) Emergency Access | § 170.315 (d)(7) End-User Device Encryption | § 170.315 (d)(8) Integrity | § 170.315 (d)(9) Trusted Connection | § 170.315 (d)(10) Auditing Actions on Health Information | § 170.315 (g)(1) Automated Numerator Recording | § 170.315 (g)(2) Automated Measure Calculation | § 170.315 (g)(3) Safety-enhanced Design | § 170.315 (g)(4) Quality Management System | § 170.315 (g)(5) Accessibility-centered Design | § 170.315 (g)(6) Consolidated CDA Creation Performance | § 170.315 (g)(7) Application Access-patient selection | § 170.315 (g)(8) Application Access-data category request | § 170.315 (g)(9) Application Access-all data request | CCDS | Related Criteria (For Gap Certification Eligibility) |
§ 170.315 (a)(1) Computerized Provider Order Entry (CPOE) - medication | PS | PS | PS | PS | PS | PS | PS | C | C | C | § 170.314(a)(1) -- § 170.314(a)(18) | ||||||||||
§ 170.315 (a)(2) CPOE - laboratory | PS | PS | PS | PS | PS | PS | PS | C | C | C | § 170.314(a)(2) -- § 170.314(a)(19) | ||||||||||
§ 170.315 (a)(3) CPOE - diagnostic imaging | PS | PS | PS | PS | PS | PS | PS | C | C | C | § 170.314(a)(1) -- § 170.314(a)(20) | ||||||||||
§ 170.315 (a)(4) Drug-drug, Drug-allergy Interaction Checks for CPOE | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (a)(5) Demographics | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (a)(6) Problem List | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (a)(7) Medication List | PS | PS | PS | PS | PS | PS | PS | C | C | C | § 170.314(a)(6) | ||||||||||
§ 170.315 (a)(8) Medication Allergy List | PS | PS | PS | PS | PS | PS | PS | C | C | C | § 170.314(a)(7) | ||||||||||
§ 170.315 (a)(9) Clinical Decision Support | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (a)(10) Drug-formulary and Preferred Drug List Checks | PS | PS | PS | PS | PS | PS | PS | C | C | ||||||||||||
§ 170.315 (a)(11) Smoking Status | PS | PS | PS | PS | PS | PS | PS | C | C | ||||||||||||
§ 170.315 (a)(12) Family Health History | PS | PS | PS | PS | PS | PS | PS | C | C | ||||||||||||
§ 170.315 (a)(13) Patient-specific Education Resources | PS | PS | PS | PS | PS | PS | PS | C | C | ||||||||||||
§ 170.315 (a)(14) Implantable Device List | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (a)(15) Social, Psychological, and Behavioral Data | PS | PS | PS | PS | PS | PS | PS | C | C | ||||||||||||
§ 170.315 (b)(1) Transitions of Care | PS | PS | PS | PS | PS | PS | PS | C | C | C | C | ||||||||||
§ 170.315 (b)(2) Clinical Information Reconciliation and Incorporation | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (b)(3) Electronic Prescribing | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (b)(4) Common Clinical Data Set Summary Record - create | PS | PS | PS | PS | PS | PS | PS | C | C | C | C | ||||||||||
§ 170.315 (b)(5) Common Clinical Data Set Summary Record - receive | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (b)(6) Data Export | PS | PS | PS | PS | PS | PS | PS | C | C | C | C | ||||||||||
§ 170.315 (b)(7) Data Segmentation for Privacy – send | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (b)(8) Data Segmentation for Privacy – receive | PS | PS | PS | PS | PS | PS | PS | C | C | ||||||||||||
§ 170.315 (b)(9) Care Plan | PS | PS | PS | PS | PS | PS | PS | C | C | C | |||||||||||
§ 170.315 (c)(1) Clinical Quality Measures – record and export | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (c)(2) Clinical Quality Measures – import and calculate | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (c)(3) Reserved for Clinical Quality Measures - record | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (c)(4) Clinical Quality Measures – filter | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (d)(1) Authentication, Access Control, Authorization | C | C | § 170.314(d)(1) | ||||||||||||||||||
§ 170.315 (d)(2) Auditable Events and Tamper-resistance | C | C | § 170.314(d)(2) | ||||||||||||||||||
§ 170.315 (d)(3) Audit Report(s) | C | C | § 170.314(d)(3) | ||||||||||||||||||
§ 170.315 (d)(4) Amendments | C | C | § 170.314(d)(4) | ||||||||||||||||||
§ 170.315 (d)(5) Automatic Access Time-out | C | C | § 170.314(d)(5) | ||||||||||||||||||
§ 170.315 (d)(6) Emergency Access | C | C | § 170.314(d)(6) | ||||||||||||||||||
§ 170.315 (d)(7) End-User Device Encryption | C | C | § 170.314(d)(7) | ||||||||||||||||||
§ 170.315 (d)(8) Integrity | C | C | § 170.314(d)(8) | ||||||||||||||||||
§ 170.315 (d)(9) Trusted Connection | C | C | |||||||||||||||||||
§ 170.315 (d)(10) Auditing Actions on Health Information | C | C | |||||||||||||||||||
§ 170.315 (d)(11) Accounting of Disclosures | C | C | § 170.314(d)(9) | ||||||||||||||||||
§ 170.315 (e)(1) View, Download, and Transmit to 3rd Party | PS | PS | PS | PS | PS | PS | C | C | C | C | |||||||||||
§ 170.315 (e)(2) Secure Messaging | PS | PS | PS | PS | PS | C | C | § 170.314(e)(3) | |||||||||||||
§ 170.315 (e)(3) Patient Health Information Capture | PS | PS | PS | PS | PS | C | C | ||||||||||||||
§ 170.315 (f)(1) Transmission to Immunization Registries | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (f)(2) Transmission to Public Health Agencies – syndromic surveillance | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (f)(3) Transmission to Public Health Agencies – reportable laboratory tests and values/results | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (f)(4) Transmission to Cancer Registries | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (f)(5) Transmission to Public Health Agencies – case reporting | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (f)(6) Transmission to Public Health Agencies – antimicrobial use and resistance reporting | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (f)(7) Transmission to Public Health Agencies – health care surveys | PS | PS | PS | PS | C | C | |||||||||||||||
§ 170.315 (g)(1) Automated Numerator Recording | C | C | |||||||||||||||||||
§ 170.315 (g)(2) Automated Measure Calculation | C | C | |||||||||||||||||||
§ 170.315 (g)(6) Consolidated CDA Creation Performance | C | C | |||||||||||||||||||
§ 170.315 (g)(7) Application Access-patient selection | PS | PS OR § 170.315 (d)(10) | PS | PS OR § 170.315 (d)(2) | C | C | C | ||||||||||||||
§ 170.315 (g)(8) Application Access-data category request | PS | PS OR § 170.315 (d)(10) | PS | PS OR § 170.315 (d)(2) | C | C | C | ||||||||||||||
§ 170.315 (g)(9) Application Access-all data request | PS | PS OR § 170.315 (d)(10) | PS | PS OR § 170.315 (d)(2) | C | C | C | ||||||||||||||
§ 170.315 (h)(1) Direct Project | PS | PS | PS | C | C | § 170.314(b)(1)(i)(A) and § 170.314(b)(2)(ii)(A) -- § 170.314(h)(1) | |||||||||||||||
§ 170.315 (h)(2) Direct Project, Edge Protocol, and XDR/XDM | PS | PS | PS | C | C | § 170.314(b)(1)(i)(B), § 170.314(b)(2)(ii)(B), and § 170.314(b)(8) -- § 170.314(b)(8) and § 170.314(h)(2) |