JUDGMENT OF RECORD ·
The contest in health tech is shifting to who can pull the patient record. App makers are pressing CMS for one-time consent access, as Epic patches AI-found flaws.
On Oct 9 KFF reported that a CMS run Slack workspace has grown to about 1,700 members, few of them doctors or patient advocates. Tech firms there seek to have apps treated as acting for the patient when pulling records through TEFCA, ongoing access after one time consent, and Medicare payment for AI services. CMS called it an open, voluntary collaboration.
On Oct 7 WPR reported that Epic used Anthropic's Claude Mythos to find security flaws that could expose patient records, and that Epic paused some new product work to patch them. Epic holds nearly 44% of the US acute care EHR market, per KLAS. On Oct 8 Solera Health launched a cancer care network that routes plan members to outside services.
The layer moving is regulation. Whoever wins the consent rules decides whether apps or EHR vendors control access to the record. Distribution Capture governs. Confidence is Low: the lobbying is documented, but CMS has issued no rule.
- CONFIDENCE
- Low
- HORIZON
- 6 to 12 months
- VS. PRIOR CALL
- New call
WHAT WOULD PROVE THIS WRONG
CMS or ONC rejects one-time consent record access for consumer apps, or issues no proposal on it before June 30, 2027.