The 21st Century Cures Act's information blocking provisions (effective April 5, 2021) mandate that healthcare providers, health IT developers, and health information networks cannot knowingly and unreasonably interfere with the access, exchange, or use of electronic health information (EHI).

While not a single new policy, ongoing interpretations and enforcement of the HIPAA Privacy Rule continue to shape how Protected Health Information (PHI) is handled, especially with the rise of digital health tools and data sharing, with recent guidance emphasizing app and wearable data.

The Centers for Medicare & Medicaid Services (CMS) has permanently expanded telehealth services covered by Medicare post-Public Health Emergency, including audio-only services for mental health and substance use disorder treatment, and increased flexibility for remote patient monitoring.