{"id":5186,"date":"2013-09-05T16:28:07","date_gmt":"2013-09-05T20:28:07","guid":{"rendered":"http:\/\/www.healthit.gov\/buzz-blog\/?p=5186"},"modified":"2025-07-14T20:52:49","modified_gmt":"2025-07-14T20:52:49","slug":"path-riskbased-regulatory-framework-health","status":"publish","type":"post","link":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","title":{"rendered":"The path toward a risk-based regulatory framework for health IT"},"content":{"rendered":"\n<p>zYesterday, the Health IT Policy Committee (HITPC) accepted and approved recommendations from the Food and Drug Administration Safety and Innovation Act (FDASIA) working group for a risk-based regulatory framework for health information technology. The working group\u2019s recommendations suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.<\/p>\n\n\n\n<p>Only six short months ago, the Food and Drug Administration (FDA), the Office of the National Coordinator for Health IT (ONC), and Federal Communications Commission (FCC) kicked off the FDASIA workgroup of the HITPC to provide stakeholder input into a report on a risk-based regulatory framework that promotes safety and innovation and reduces regulatory duplication, consistent with section 618 of FDASIA. This provision permitted the Secretary of Health and Human Services (HHS) to form a workgroup in order to obtain broad stakeholder input from across the health care, IT, patients and innovation spectrum. The FDA, ONC, and FCC actively participated in these discussions with stakeholders from across the health care, IT, patients and innovation spectrum. The working group met more than 28 times, and yesterday FDASIA workgroup chair, David Bates, presented the final recommendations to the HITPC.<\/p>\n\n\n\n<p>In recognition of this important milestone, and on behalf of the three agencies, we want to express our deep appreciation to the members of the workgroup (and a special thanks to David Bates) for committing themselves to this aggressive timeline and delivering a suite of thoughtful recommendations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-next-steps\"><strong>Next Steps<\/strong><\/h2>\n\n\n\n<p>As the FDASIA workgroup&#8217;s efforts conclude, the agencies\u2019 efforts now intensify. Over the next few months the FDA, ONC, and FCC will review the HIT Policy Committee\u2019s recommendations and the public comments submitted through the docket we opened on <a href=\"https:\/\/www.regulations.gov\/docketBrowser?rpp=50&amp;po=0&amp;dct=PS&amp;D=HHS-OS-2013-0003\">regulations.gov<\/a>. Using these thoughtful inputs, ONC, FDA, and FCC will work closely together to develop a report (by the January 2014 statutory deadline) that proposes an overarching health IT regulatory strategy and provides recommendations on ways to appropriately promote innovation, protect patient safety, and avoid regulatory duplication.<\/p>\n\n\n\n<p>We recognize the complex nature of health IT and its importance to our nation\u2019s health. Therefore, we intend to provide an opportunity for public comment and additional stakeholder input on the draft report following its publication in January 2014. We look forward to continued collaboration with all stakeholders as we advance our thinking on this important topic.<\/p>\n\n\n\n<p><em>&nbsp;<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>zYesterday, the Health IT Policy Committee (HITPC) accepted and approved recommendations from the Food and [&hellip;]<\/p>\n","protected":false},"author":619,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_selected_menu":"","_show_breadcrumbs":"true","_blog_show_featured_image":false,"footnotes":""},"categories":[],"archived-category":[689],"featured":[],"topics":[408,415,442,425],"class_list":["post-5186","post","type-post","status-publish","format-standard","hentry","archived-category-hit-policy-committee","topics-care-continuum","topics-clinical-quality-safety","topics-health-it-basics","topics-hit-policy"],"acf":{"blog_authors":[{"blog_author_profiles":"198454"},{"blog_author_profiles":"198607"},{"blog_author_profiles":"198608"}],"hp_news_hide":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.3 (Yoast SEO v24.8.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The path toward a risk-based regulatory framework for health IT - ONC Blog<\/title>\n<meta name=\"description\" content=\"ONC&#039;s Health IT policy committee suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The path toward a risk-based regulatory framework for health IT\" \/>\n<meta property=\"og:description\" content=\"ONC&#039;s Health IT policy committee suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\" \/>\n<meta property=\"og:site_name\" content=\"ONC Blog\" \/>\n<meta property=\"article:published_time\" content=\"2013-09-05T20:28:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-14T20:52:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/ONC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"sleigh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"sleigh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\"},\"author\":{\"name\":\"sleigh\",\"@id\":\"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7\"},\"headline\":\"The path toward a risk-based regulatory framework for health IT\",\"datePublished\":\"2013-09-05T20:28:07+00:00\",\"dateModified\":\"2025-07-14T20:52:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\"},\"wordCount\":395,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/healthit.gov\/blog\/#organization\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\",\"url\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\",\"name\":\"The path toward a risk-based regulatory framework for health IT - ONC Blog\",\"isPartOf\":{\"@id\":\"https:\/\/healthit.gov\/blog\/#website\"},\"datePublished\":\"2013-09-05T20:28:07+00:00\",\"dateModified\":\"2025-07-14T20:52:49+00:00\",\"description\":\"ONC's Health IT policy committee suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.\",\"breadcrumb\":{\"@id\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/healthit.gov\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The path toward a risk-based regulatory framework for health IT\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/healthit.gov\/blog\/#website\",\"url\":\"https:\/\/healthit.gov\/blog\/\",\"name\":\"ONC - Office of the National Coordinator for Health IT\",\"description\":\"Better health enabled by data\",\"publisher\":{\"@id\":\"https:\/\/healthit.gov\/blog\/#organization\"},\"alternateName\":\"ONC\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/healthit.gov\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/healthit.gov\/blog\/#organization\",\"name\":\"ONC - Office of the National Coordinator for Health IT\",\"alternateName\":\"ONC\",\"url\":\"https:\/\/healthit.gov\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png\",\"contentUrl\":\"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png\",\"width\":800,\"height\":176,\"caption\":\"ONC - Office of the National Coordinator for Health IT\"},\"image\":{\"@id\":\"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7\",\"name\":\"sleigh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/healthit.gov\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"caption\":\"sleigh\"},\"url\":\"https:\/\/healthit.gov\/blog\/author\/sleigh\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The path toward a risk-based regulatory framework for health IT - ONC Blog","description":"ONC's Health IT policy committee suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","og_locale":"en_US","og_type":"article","og_title":"The path toward a risk-based regulatory framework for health IT","og_description":"ONC's Health IT policy committee suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.","og_url":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","og_site_name":"ONC Blog","article_published_time":"2013-09-05T20:28:07+00:00","article_modified_time":"2025-07-14T20:52:49+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/ONC.jpg","type":"image\/jpeg"}],"author":"sleigh","twitter_card":"summary_large_image","twitter_misc":{"Written by":"sleigh","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#article","isPartOf":{"@id":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/"},"author":{"name":"sleigh","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7"},"headline":"The path toward a risk-based regulatory framework for health IT","datePublished":"2013-09-05T20:28:07+00:00","dateModified":"2025-07-14T20:52:49+00:00","mainEntityOfPage":{"@id":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/"},"wordCount":395,"commentCount":0,"publisher":{"@id":"https:\/\/healthit.gov\/blog\/#organization"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","url":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","name":"The path toward a risk-based regulatory framework for health IT - ONC Blog","isPartOf":{"@id":"https:\/\/healthit.gov\/blog\/#website"},"datePublished":"2013-09-05T20:28:07+00:00","dateModified":"2025-07-14T20:52:49+00:00","description":"ONC's Health IT policy committee suggest a scope for an IT framework, risk and innovation criteria, and approaches for avoiding regulatory duplication.","breadcrumb":{"@id":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/healthit.gov\/blog\/"},{"@type":"ListItem","position":2,"name":"The path toward a risk-based regulatory framework for health IT"}]},{"@type":"WebSite","@id":"https:\/\/healthit.gov\/blog\/#website","url":"https:\/\/healthit.gov\/blog\/","name":"ONC - Office of the National Coordinator for Health IT","description":"Better health enabled by data","publisher":{"@id":"https:\/\/healthit.gov\/blog\/#organization"},"alternateName":"ONC","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/healthit.gov\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/healthit.gov\/blog\/#organization","name":"ONC - Office of the National Coordinator for Health IT","alternateName":"ONC","url":"https:\/\/healthit.gov\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png","contentUrl":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png","width":800,"height":176,"caption":"ONC - Office of the National Coordinator for Health IT"},"image":{"@id":"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7","name":"sleigh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","caption":"sleigh"},"url":"https:\/\/healthit.gov\/blog\/author\/sleigh\/"}]}},"parsely":{"version":"1.1.0","canonical_url":"https:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","smart_links":{"inbound":0,"outbound":0},"traffic_boost_suggestions_count":0,"meta":{"@context":"https:\/\/schema.org","@type":"NewsArticle","headline":"The path toward a risk-based regulatory framework for health IT","url":"http:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/","mainEntityOfPage":{"@type":"WebPage","@id":"http:\/\/healthit.gov\/blog\/insights-updates\/path-riskbased-regulatory-framework-health\/"},"thumbnailUrl":"","image":{"@type":"ImageObject","url":""},"articleSection":"Insights &amp; Updates","author":[{"@type":"Person","name":"sleigh"}],"creator":["sleigh"],"publisher":{"@type":"Organization","name":"ONC Blog","logo":""},"keywords":[],"dateCreated":"2013-09-05T20:28:07Z","datePublished":"2013-09-05T20:28:07Z","dateModified":"2025-07-14T20:52:49Z"},"rendered":"<script type=\"application\/ld+json\" class=\"wp-parsely-metadata\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"NewsArticle\",\"headline\":\"The path toward a risk-based regulatory framework for health IT\",\"url\":\"http:\\\/\\\/healthit.gov\\\/blog\\\/insights-updates\\\/path-riskbased-regulatory-framework-health\\\/\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/healthit.gov\\\/blog\\\/insights-updates\\\/path-riskbased-regulatory-framework-health\\\/\"},\"thumbnailUrl\":\"\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"\"},\"articleSection\":\"Insights &amp; Updates\",\"author\":[{\"@type\":\"Person\",\"name\":\"sleigh\"}],\"creator\":[\"sleigh\"],\"publisher\":{\"@type\":\"Organization\",\"name\":\"ONC Blog\",\"logo\":\"\"},\"keywords\":[],\"dateCreated\":\"2013-09-05T20:28:07Z\",\"datePublished\":\"2013-09-05T20:28:07Z\",\"dateModified\":\"2025-07-14T20:52:49Z\"}<\/script>","tracker_url":"https:\/\/cdn.parsely.com\/keys\/healthit.gov\/p.js"},"_links":{"self":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/5186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/users\/619"}],"replies":[{"embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/comments?post=5186"}],"version-history":[{"count":16,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/5186\/revisions"}],"predecessor-version":[{"id":177266,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/5186\/revisions\/177266"}],"wp:attachment":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/media?parent=5186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/categories?post=5186"},{"taxonomy":"archived-category","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/archived-category?post=5186"},{"taxonomy":"featured","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/featured?post=5186"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/topics?post=5186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}