Opinion
HHS finalized removal of health-tool disclosure and predictive-risk obligations on October 28. The agency models $7,361,579 to $53,275,503 in undiscounted annual savings from this revision. Hospitals will need to establish what information and risk-management commitments their vendors will keep when certification no longer requires this work.
The final rule's amendment 11(g), page 246, removes § 170.315(b)(11)(iv) through (vi). Those paragraphs address source information, access and modification, and predictive intervention risk management. Amendment 13 removes the related maintenance provision in § 170.402(b)(4).
These are duties that help purchasers examine tools informing clinical care. Removing them makes the terms a hospital negotiates with its vendor more consequential. A hospital needs to understand whether a tool fits the circumstances in which it will be used; patients have a stake in the answer.
What certification required
The earlier ONC Decision Support Interventions guide, issued March 11, 2024 and updated May 5, 2026, explains the obligations. Identified users needed access to current plain-language source information and capabilities to record or change it. Developers needed risk analysis, mitigation and governance for predictive interventions they supplied as part of their module.
The old framework allowed specified validation or performance information to be identified as unavailable. It did not establish specific measures of validity or fairness. The framework did not guarantee that every algorithm had been independently proved safe.
The December 29, 2025 proposed rule, page 11, contemplated removing 34 of 60 certification criteria, revising seven and leaving 19 unchanged. Secretary Robert F. Kennedy, Jr., signed that proposal. The October 28 final rule divides the same 60 into 14 removed, seven revised and 39 unchanged.
The comparison yields 20 fewer removals and an unchanged share of 39 ÷ 60 × 100 = 65%. Those counts do not weight the clinical importance of each criterion. They also do not establish that 20 particular safeguards were restored: safety-enhanced design, for example, moved from proposed removal to revision.
How ONC calculates the savings
ONC's page 215 economic analysis uses 251 certified products from 206 developers, based on program data analyzed as of April 1, 2026. It models 211 to 1,527 annual labor hours saved per product. Multiplying gives 251 × 211 = 52,961 hours and 251 × 1,527 = 383,277 hours.
ONC applies an assumed $139 hourly labor cost. The lower estimate is 52,961 × $139 = $7,361,579. The upper estimate is 383,277 × $139 = $53,275,503. The hourly input doubles its cited May 2024 wage of $69.50 to include assumed indirect costs.
The model estimates baseline annual maintenance at 12% of initial development costs and assumes the revision reduces those maintenance costs by 80%. The arithmetic reproduces the displayed inputs; it does not validate the assumptions or establish realized savings.
On page 208, the agency assumes developers will invest savings in innovation and emerging technology rather than directly reduce prices for end users. That is a modeled benefit to developers. Actual corporate profits, additional hospital bills and patient cash savings remain unverified.
The agency's case, and the remaining question
ONC's counterargument is substantial: it says it could not identify published evidence that these transparency requirements improved patient care or health-care organizations' evaluation of the tools. It expects useful information to be shared voluntarily and disputes a significant shift of evaluation work to providers.
That expectation can be tested against actual commitments. Enforceable promises to retain disclosures and risk practices would weaken the concern about lost information; documented withdrawal or measurable additional purchaser work would strengthen it. No such vendor outcomes are established here.
The final rule also retains patient view, download and transmission capabilities, an encrypted-transmission option, activity-history logging and restriction-request capability. Clinical reconciliation continues to require correct-patient matching and user review. The rollback does not abolish all patient access or privacy protections.
January 1, 2027 is an explicit effective date for amendment 12's seven separate criterion removals or reservations. The examined first-page clause leaves the general effective date as a publication-relative instruction; it does not establish a calendar effective date for the decision-support deletion. Those dates must not be merged.
Ask your care organization's technology or clinical-governance team what written policy requires vendors to supply validation, limitations and risk-management information. Which vendors and hospitals will retain enforceable commitments after certification changes remains the unanswered question.
A vendor's savings cannot answer a patient's questions.