Information Blocking Actors (45 CFR 171.102)
Three classes of actors subject to information blocking: health care providers, health IT developers of certified health IT, and health information networks/exchanges.
Primary source
45 CFR 171.102 — eCFR →https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-D/part-171/subpart-A/section-171.102
Verified May 23, 2026 · This is the authoritative regulator URL. The summary below is a research aid; the linked source controls.
45 CFR 171.102 defines three classes of actors subject to information blocking obligations.
Health care providers: broadly defined to include hospitals, ambulatory surgical centers, skilled nursing facilities, home health agencies, physicians, practitioners, and other clinicians — beyond the narrow Medicare provider definition. Coverage extends to entities that may not bill Medicare at all.
Health IT developers of certified health IT: any developer (or other person/entity) that has health IT certified under the ONC Health IT Certification Program, even with respect to non-certified products.
Health information networks (HINs) / health information exchanges (HIEs): entities that meet the regulatory definition based on whether they govern, manage, or enable EHI exchange among more than two unaffiliated entities not under common control.
The knowledge standard differs by actor. Providers face information blocking liability when they know a practice is unreasonable and likely to interfere with EHI access, exchange, or use. Developers and HINs/HIEs face liability under a "knows or should know" standard.
Provider scope continues to expand in interpretation: a small medical group, a solo dental practice, and a community pharmacy are all candidate actors when they create, receive, maintain, or transmit EHI.
Use this in your workspace
D3rx assembles the documentation linked to this regulation, walks the practical decisions in plain English, and stores the artifacts against the .gov sources cited above. It is an administrative research aid, not a substitute for counsel.
Related regulations
D3rx is a healthcare-billing and compliance research aid maintained by D3rx Inc. Articles are drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and reviewed for restraint and source fidelity by the D3rx team.
Reviewer status: a named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged. Until that engagement is finalized, this page does not claim credentialed review.
Related across the archive
- RegulationInformation Blocking Eight Exceptions (45 CFR 171.200-303)The eight regulatory exceptions to information blocking: preventing harm, privacy, security, infeasibility, health IT performance, content and manner, fees, and licensing.
- RegulationInformation Blocking Rule Overview (45 CFR Part 171)The 21st Century Cures Act information blocking provisions and the ONC rule prohibiting actions by providers, health IT developers, and HINs/HIEs that interfere with electronic health information access, exchange, or use.
- RegulationInformation Blocking Disincentives for Providers (42 CFR 414.1305, 412.140, 482.24)CMS finalized disincentives for providers found to have committed information blocking by HHS OIG, applied through the MIPS Promoting Interoperability category, hospital Promoting Interoperability program, and Medicare Shared Savings Program.
- RegulationInformation Blocking: Electronic Health Information Definition (45 CFR 171.102)EHI is the full electronic Designated Record Set as defined by HIPAA at 45 CFR 164.501 (since October 6, 2022), broader than the USCDI subset that applied during the initial phase.
Last reviewed May 23, 2026 · Citation verified May 23, 2026
Research aid, not legal advice. This summary is an administrative research aid prepared by D3rx. It does not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. For authoritative regulatory text follow the primary source link at the top of this page. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.