(C)
Health information technology for medical specialties and sites of service
(ii)
Specific medical specialties
(iii)
Health information technology for pediatrics
(D)
Conditions of certification
Not later than 1 year after December 13, 2016, the Secretary, through notice and comment rulemaking, shall require, as a condition of certification and maintenance of certification for programs maintained or recognized under this paragraph, consistent with other conditions and requirements under this subchapter, that the health information technology developer or entity—
(ii)
provides assurances satisfactory to the Secretary that such developer or entity, unless for legitimate purposes specified by the Secretary, will not take any action described in clause (i) or any other action that may inhibit the appropriate exchange, access, and use of electronic health information;
(iii)
does not prohibit or restrict communication regarding—
(I)
the usability of the health information technology;
(II)
the interoperability of the health information technology;
(III)
the security of the health information technology;
(IV)
relevant information regarding users’ experiences when using the health information technology;
(V)
the business practices of developers of health information technology related to exchanging electronic health information; and
(VI)
the manner in which a user of the health information technology has used such technology;
(iv)
has published application programming interfaces and allows health information from such technology to be accessed, exchanged, and used without special effort through the use of application programming interfaces or successor technology or standards, as provided for under applicable law, including providing access to all data elements of a patient’s electronic health record to the extent permissible under applicable privacy laws;
(v)
has successfully tested the real world use of the technology for interoperability (as defined in
section 300jj of this title) in the type of setting in which such technology would be marketed;
(vi)
provides to the Secretary an attestation that the developer or entity—
(I)
has not engaged in any of the conduct described in clause (i);
(II)
has provided assurances satisfactory to the Secretary in accordance with clause (ii);
(III)
does not prohibit or restrict communication as described in clause (iii);
(IV)
has published information in accordance with clause (iv);
(V)
ensures that its technology allows for health information to be exchanged, accessed, and used, in the manner described in clause (iv); and
(VI)
has undertaken real world testing as described in clause (v); and