Understanding ONC Certification for Health IT
Introduction: What Is ONC Certification and Why Does It Matter?
ONC Certification is the official process by which electronic health record (EHR) and health IT products are tested and certified to meet U.S. federal standards for patient safety, interoperability, and regulatory compliance. Required for participation in programs like Promoting Interoperability (formerly Meaningful Use), ONC certification ensures that health IT products support safe, effective care, protect patient data, and enable seamless data exchange across the healthcare system.
What Is the ONC Health IT Certification Program?
The ONC Health IT Certification Program is managed by the Office of the National Coordinator for Health IT (ONC). Its main objectives are:
- Drive adoption of certified health IT across the U.S. healthcare system
- Ensure interoperability and secure health data exchange
- Protect electronic health information and support patient safety
Core ONC Certification Criteria (2025)
The current ONC Health IT Certification Criteria (see 45 CFR § 170.315 and the HTI-1 rule) cover a broad range of requirements. Key categories include:
| Category | Sample Requirement (2025) | Why It Matters |
|---|---|---|
| Clinical | CPOE, drug-allergy checks | Prevents errors, supports clinical decision-making |
| Interoperability | Electronic case reporting (HL7) | Enables reporting to public health, care coordination |
| Security & Privacy | Access control, audit logs | Safeguards patient data |
| Decision Support | Clinical Decision Support Interventions (DSI), AI transparency | Improves care quality, ensures transparency in AI/ML |
| Real-World Testing | Annual real-world interoperability testing | Verifies performance in live settings |
Recent updates: The 2025 HTI-1 rule introduces ongoing updates to criteria, new requirements for decision support interventions (DSI), AI transparency, and expanded real-world testing. See HealthIT.gov for the latest details.
Latest Regulatory Changes: 2025 HTI-1 Final Rule
- No more "editions"—criteria are now continuously updated as rules change
- Health IT developers must update products whenever a criterion changes
- New requirements for patient data access, reporting, and AI transparency
- Temporary enforcement discretion for some real-world testing and maintenance requirements
For official updates, see the ONC Health IT Certification Program Updates page.
Conditions and Maintenance of Certification
After initial certification, developers must meet ongoing Conditions & Maintenance of Certification requirements. These include preventing information blocking, maintaining up-to-date compliance, and supporting transparency.
- Seven Conditions of Certification (see official list):
- User-centered design
- Real-world testing
- API access
- Information blocking prevention
- Assurances and communications
- Attestations and reporting
- Ongoing compliance and updates
Some conditions apply to developers, others to certified products. Ongoing compliance is essential to retain certification and market access.
Who Needs ONC Certification—and Why?
- EHR and health IT modules used in CMS-regulated care or reporting
- Vendors seeking to participate in Promoting Interoperability or other federal programs
- Hospitals, clinics, and providers needing compliant, trusted solutions
ONC certification is critical for compliance, eligibility for incentives, and trust in the health IT marketplace.
The ONC Certification Process: Step by Step
- Choose applicable certification criteria/modules
- Develop, document, and test to ONC standards
- Engage ONC-Authorized Testing Labs (ATLs) and Certification Bodies (ACBs)
- Complete successful testing and submit for certification
- Maintain certification with ongoing updates as criteria change
Typical timeline: 3–9 months, depending on product complexity.
Costs: Vary by scope and testing needs.
Resource: Certified Health IT Product List (CHPL)
Frequently Asked Questions (FAQs)
- What is ONC certification?
It is the official federal process for certifying EHR and health IT products to meet standards for safety, interoperability, and compliance. - What are the ONC criteria for 2025?
Criteria are continuously updated; see HealthIT.gov for the latest list. - Who must comply with ONC certification?
Vendors and developers of EHR/health IT modules used in CMS-regulated care or reporting. - How is AI addressed in ONC-certified health IT?
Recent rules require transparency for decision support interventions (DSI) and AI/ML features. - What happens if certification is lost?
Products may be removed from the CHPL and become ineligible for federal programs. - Where can I find official guidance?
See HealthIT.gov and 45 CFR § 170.315.
Resources & Next Steps
- ONC Health IT Certification Program Overview
- Latest Regulatory Updates (HealthIT.gov)
- Certified Health IT Product List (CHPL)
- Downloadable Compliance Checklists (PDF)
Need help? Request expert guidance, subscribe for regulatory updates, or book a certification consult with our team.