Just a reminder to Health IT Developers the Cures Update criteria and New Cures criteria are due in 2022 and 2023 as part of the ONC Certification Program. The following is an overview of the ATL-ACB process and deadlines for both the Cures Update criteria and New Cures criteria.

Cures Update Criteria (ONC deadline 12/31/2022):

The following criteria will need to be updated and posted to the ONC CHPL by December 31, 2022.   The Cures Update criteria include:

• (b)(1) Transitions of care
• (b)(2) Clinical information reconciliation and incorporation
• (b)(3) Electronic prescribing
• (b)(7) Data segmentation for privacy – send
• (b)(8) Data segmentation for privacy – receive
• (b)(9) Care plan
• (c)(3) CQMs – report
• (d)(2) Auditable events and tamper-resistance
• (d)(3) Audit report(s)
• (d)(10) Auditing actions on health information
• (e)(1) View, download, and transmit to 3rd party
• (f)(5) Transmission to public health agencies – electronic case reporting
• (g)(6) Consolidated CDA creation performance
• (g)(9) Application access – all data request

If you have any of these listed criteria in your current 2015 Edition certified product scope, you will need to complete the Cures Update process.

The Cures Update process is completed by attesting to the new standards.  When a Health IT developer is ready to attest to the Cures Update, please contact SLI Compliance ACB Team at ACB@slicompliance.com

1. The Cures Update attestation forms will be provided by the SLI Compliance ACB Team.
2. Health IT developers will complete Cures Update attestation form(s) for their scope.
3. Submit the completed Cures Update attestation forms to ACB@slicompliance.com.
4. The completed Cures Update attestation forms will go through ACB Certification review by the SLI Compliance ACB Team.

The ACB certification review process for Cures Update criteria is included in the annual ACB Maintenance fee.

Cures New Criteria (ONC deadline 12/31/2022):

Per the ONC, all Health IT developers are required to include (d)(12) Encrypt Authentication Credentials  and (d)(13) Multi-factor Authentication in scope and posted to the ONC CHPL by December 31, 2022.

The ONC requires attestation and certification for the New Cures criterion (d)(12) and (d)(13).  The criteria additions are done as an ACB Certified Product Update, for which the Health IT developer will complete attestation and certification of the criteria.

Per the ONC, (g)(8) Application Access – data category request is time limited criterion. If Health IT developer has this criterion in their current 2015 Edition certified product scope, you will need to include the New Cures criterion, (g)(10) Standardized API for patient and population services in scope and posted to the ONC CHPL by December 31, 2022.

The ONC requires testing and certification for the New Cures criterion (g)(10).  The criterion addition is done as ACB Certified Product Update, for which the Health IT developer will complete testing and certification of the criterion.

When ready to attest, test and certify to the any of the new criteria (d)(12), (d)(13) and/or (g)(10), please contact Melissa Rogers at mrogers@slicompliance.com  to start the ACB Certified Product Update process.

• SLI Compliance will provide the Client with an ACB Certified Product Update change order, for the addition of the new criteria. There are fees for attesting, testing and certification of the new Cures criteria.
• Once the change order is signed, the ONC-ATL team will provide the Client with the ATL Vendor Packet for attestation and/or testing; this includes information on the Inferno tool for (g)(10). The ATL Vendor Packet will be posted on your SLI Client Portal account page, and you will be assigned your ATL Test Proctor for testing (g)(10), if applicable to your scope.
• For criterion (g)(10) please schedule your ATL testing. We recommend scheduling testing when signing the change order.  The ATL testing of criterion (g)(10) will take one (1) day of remote interactive testing with the ATL Test Proctor.  The ACB certification typically takes about 2 weeks.
• For criteria (d)(12) and (d)(13) no scheduled testing is required. There will be an offline validation process completed by the SLI team. The ACB certification typically takes about 2 weeks.

SLI Compliance is scheduling testing on a “first come, first served” basis. Due to the high volume of Health IT developers required to test (g)(10) this year, it’s important to reserve your spot on the calendar as soon as you can, prior to the testing date.

Cures New Criterion (ONC deadline 12/31/2023):

If Health IT developer has criterion (b)(6) Data Export in their current 2015 Edition certified product scope,  AND/OR  If a Health IT developer’s current 2015 Edition certified product has the capability to store any EHI in their system, the Health IT developer will need to include the New Cures criterion, (b)(10) Electronic Health Information (EHI) Export in scope and posted to the ONC CHPL by December 31, 2023.

The ONC requires attestation and certification for the New Cures criterion (b)(10).  The criterion addition is done as an ACB Certified Product Update, for which the Health IT developer will complete an attestation and certification of the criterion.  Please note, if you are adding (d)(12), (d)(13), and/or (g)(10) to your certified product scope, you can choose to attest and certify (b)(10) the same time in 2022 under one change order.

When ready to attest and certify to the new criterion (b)(10), please contact Melissa Rogers at mrogers@slicompliance.com to start the ACB Certified Product Update process.

• SLI Compliance will provide the Client with ACB Certified Product Update change order, for the addition of the new criterion. There are fees for attesting and certification of the new Cures criterion.
• Once the change order is signed, the ONC-ACB will provide the Client with the attestation form.
• Schedule your test day for (b)(10); we recommend scheduling your testing when signing the change order.
• The ACB certification typically takes about 2 weeks.