vault backup: 2024-07-16 15:20:09

legal/information-blocking-faqs.md

@@ -145,14 +145,18 @@ TODO:
 
 https://www.healthit.gov/sites/default/files/page2/2020-03/ConditionsofCertificationWebinar.pdf
 
+This is the 5 day / 10 day rule 
+https://www.ecfr.gov/current/title-45/part-170#p-170.404(b)(1)
+
 **Authenticity Verification**
 - A Certified API Developer is permitted to institute a process to verify the authenticity
 of API Users so long as such process is objective and the same for all API Users and
-completed within ten business days.
+completed within **ten business days.**
 
 **Application Registration**
 -  A Certified API Developer must register and enable all applications for production use
-within five business days of completing its verification of an API User’s authenticity.
+within **five business days** of completing its verification of an API User’s authenticity.
+
 
 ## What kind of Security Review can be used to delay access?
 <a id="security_review"/>
@@ -171,6 +175,7 @@ To submit questions or comments to ONC please use our [Inquiry Portal](https://w
 
 [Information Blocking Portal](https://inquiry.healthit.gov/support/plugins/servlet/desk/portal/6)
 
+
 ## How can I file a Privacy Rule Complaint
 
 If you believe that a HIPAA-covered entity or its business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.