§170.315(b)(3) Electronic prescribing
Version # | Description of Change | Version Date |
---|---|---|
1.0 |
Final Test Procedure. |
06-01-2020
|
1.1 |
Regulation text updated per the IFR, Information Blocking and the ONC Health IT Certification Program: Extension of Compliance Dates and Timeframes in Response to the COVID-19 Public Health Emergency. |
11-02-2020
|
1.2 |
Test procedure updated to include a new medication history test scenario to support intermediary implementations. |
12-08-2021
|
§ 170.315(b)(3) Electronic prescribing.
(ii) For technology certified subsequent to June 30, 2020:
- Enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request and respond to cancel prescriptions (CancelRx, CancelRxResponse).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Request and receive medication history (RxHistoryRequest, RxHistoryResponse).
- Relay acceptance of a transaction back to the sender (Status).
- Respond that there was a problem with the transaction (Error).
- Respond that a transaction requesting a return receipt has been received (Verify).
- Optionally, enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create and respond to new prescriptions (NewRxRequest, NewRxResponseDenied).
- Send fill status notifications (RxFillIndicator).
- Ask the Mailbox if there are any transactions (GetMessage).
- Request to send an additional supply of medication (Resupply).
- Communicate drug administration events (DrugAdministration).
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse, RxTransferConfirm).
- Recertify the continued administration of a medication order (Recertification).
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, and PACancelResponse).
- For the following prescription-related transactions, the technology must be able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>:
- Required transactions
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request to cancel prescriptions (CancelRx).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Receive medication history (RxHistoryResponse).
- Optional transactions:
- Request to send an additional supply of medication (Resupply)
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse)
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, PACancelResponse).
- Required transactions
- Optional. For each transaction listed in paragraph (b)(3)(ii)(C) of this section, the technology must be able to receive and transmit reason for prescription using the <IndicationforUse> element in the Sig segment.
- Limit a user's ability to prescribe all oral liquid medications in only metric standard units of mL (i.e., not cc).
- Always insert leading zeroes before the decimal point for amounts less than one and must not allow trailing zeroes after a decimal point when a user prescribes medications.
- Resource Documents
- Revision History
-
Version # Description of Change Version Date 1.0 Final Test Procedure.
06-01-20201.1 Regulation text updated per the IFR, Information Blocking and the ONC Health IT Certification Program: Extension of Compliance Dates and Timeframes in Response to the COVID-19 Public Health Emergency.
11-02-20201.2 Test procedure updated to include a new medication history test scenario to support intermediary implementations.
12-08-2021 - Regulation Text
-
Regulation Text
§ 170.315(b)(3) Electronic prescribing.
(ii) For technology certified subsequent to June 30, 2020:
- Enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request and respond to cancel prescriptions (CancelRx, CancelRxResponse).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Request and receive medication history (RxHistoryRequest, RxHistoryResponse).
- Relay acceptance of a transaction back to the sender (Status).
- Respond that there was a problem with the transaction (Error).
- Respond that a transaction requesting a return receipt has been received (Verify).
- Optionally, enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create and respond to new prescriptions (NewRxRequest, NewRxResponseDenied).
- Send fill status notifications (RxFillIndicator).
- Ask the Mailbox if there are any transactions (GetMessage).
- Request to send an additional supply of medication (Resupply).
- Communicate drug administration events (DrugAdministration).
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse, RxTransferConfirm).
- Recertify the continued administration of a medication order (Recertification).
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, and PACancelResponse).
- For the following prescription-related transactions, the technology must be able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>:
- Required transactions
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request to cancel prescriptions (CancelRx).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Receive medication history (RxHistoryResponse).
- Optional transactions:
- Request to send an additional supply of medication (Resupply)
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse)
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, PACancelResponse).
- Required transactions
- Optional. For each transaction listed in paragraph (b)(3)(ii)(C) of this section, the technology must be able to receive and transmit reason for prescription using the <IndicationforUse> element in the Sig segment.
- Limit a user's ability to prescribe all oral liquid medications in only metric standard units of mL (i.e., not cc).
- Always insert leading zeroes before the decimal point for amounts less than one and must not allow trailing zeroes after a decimal point when a user prescribes medications.
- Enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Standard(s) Referenced
- Testing
-
Testing Tool
Criterion Subparagraph Test Data (b)(3) Refer to NCPDP Electronic Prescribing (eRx)
Please consult the Final Rule entitled: 21st Century Cures Act: Interoperability, Information Blocking, and the ONC Health IT Certification Program and the Interim Final Rule (IFR), Information Blocking and the ONC Health IT Certification Program: Extension of Compliance Dates and Timeframes in Response to the COVID-19 Public Health Emergency, for a detailed description of the certification criterion with which these testing steps are associated. Developers are encouraged to consult the Certification Companion Guide in tandem with the Test Procedure, as they both provide clarifications that may be useful for product development and testing.
Note: The order in which the test steps are listed reflects the sequence of the certification criterion and does not necessarily prescribe the order in which the test should take place.
Testing components
![No Documentation No Documentation Icon](https://public4.pagefreezer.com:443/content/ONC/05-12-2023T20:49/http://www.healthit.gov/themes/custom/healthit/images/no-document-icon.png)
![Visual Inspection Visual Inspection Icon](https://public4.pagefreezer.com:443/content/ONC/05-12-2023T20:49/http://www.healthit.gov/themes/custom/healthit/images/search-icon.png)
![Test Tool Test Tool Icon](https://public4.pagefreezer.com:443/content/ONC/05-12-2023T20:49/http://www.healthit.gov/themes/custom/healthit/images/test-tool-icon.png)
![ONC Supplied Test Data ONC Supplied Test Data Icon](https://public4.pagefreezer.com:443/content/ONC/05-12-2023T20:49/http://www.healthit.gov/themes/custom/healthit/images/ONCSupplied-icon.png)
![No SVAP No SVAP Icon](https://public4.pagefreezer.com:443/content/ONC/05-12-2023T20:49/http://www.healthit.gov/themes/custom/healthit/images/no-SVAP-icon.png)
Paragraphs (b)(3)(ii)(A)(1-5, 7-9)
- The health IT developer creates new prescriptions (NewRx) in accordance with (b)(3)(ii)(A)(1) and (b)(3)(ii)(A)(2) request and respond to change prescriptions (RxChangeRequest, RxChangeResponse), and (b)(3)(ii)(A)(5) fill status notifications (RxFill).
- The health IT developer creates new prescriptions (NewRx) in accordance with (b)(3)(ii)(A)(1) and (b)(3)(ii)(A)(3) request and respond to cancel prescriptions (CancelRx, CancelRxResponse).
- The health IT developer creates new prescriptions (NewRx) in accordance with (b)(3)(ii)(A)(1) and (b)(3)(ii)(A)(4) request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- The health IT developer relays acceptance of a transaction back to the sender (Status) in accordance with (b)(3)(ii)(A)(7).
- The health IT developer responds that there was a problem with the transaction (Error) in accordance with (b)(3)(ii)(A)(8).
- The health IT developer responds that a transaction requesting a return receipt has been received (Verify) in accordance with (b)(3)(ii)(A)(9).
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation report for the following required transactions:
- Create and send new prescription (NewRx);
- Receive prescription change request (RxChangeRequest);
- Create and send prescription change response (RxChangeResponse); and
- Receive fill status notification (RxFill).
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation report for the following required transactions:
- Create and send new prescription (NewRx);
- Send request to cancel prescription (CancelRx); and
- Receive response to request to cancel prescription (CancelRxResponse).
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation reports for the following required transactions:
- Create and send new prescription (NewRx);
- Receive request to renew prescription (RxRenewalRequest); and
- Create and send response to renew prescription (RxRenewalResponse).
- The tester verifies the Health IT Module supports Status, Error and Verify transactions.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(A)(6)
- The health IT developer requests and receives a patient’s medication history (RxHistoryRequest, RxHistoryResponse) in accordance with (b)(3)(ii)(A)(6).
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation report for the following required transactions:
- Send a request for a medication history (RxHistoryRequest); and
- Receive a response to a request for a medication history (RxHistoryResponse).
- Receive a Status message (Status) in response to a request for a medication history (RxHistoryRequest) and receive a response to a request for a medication history (RxHistoryResponse).
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(C)(1)
- The Health IT Module is able to transmit and receive the reason for the prescription using the <Diagnosis><Primary> or <Secondary> diagnosis elements for the following transactions in accordance with (b)(3)(ii)(C)(1):
- Create new prescriptions (NewRx);
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse);
- Request to cancel prescriptions (CancelRx);
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse);
- Receive fill status notifications (RxFill); and
- Receive response to medication history requested (RxHistoryResponse).
- The tester verifies the Health IT Module sends and receives the reason for the prescription using the <Diagnosis><Primary> or <Secondary> diagnosis elements for all transactions, using the test data specified with the selected test case via the test tool:
- Create new prescriptions (NewRx);
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse);
- Request to cancel prescriptions (CancelRx);
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse);
- Receive fill status notifications (RxFill); and
- Receive response to medication history (RxHistoryResponse).
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(E)
- The Health IT Module is able to prescribe all oral liquid medications in only the metric standard units of milliliter (mL) (i.e., not cubic centimeter (cc) or teaspoon) in accordance with (b)(3)(ii)(E).
- Negative Testing: The health IT developer attempts to prescribe an oral liquid medication using non-metric standard units.
- The tester verifies that the Health IT Module limits the ability to prescribe all oral liquid medications in metric standard units of milliliter (mL).
- Negative Testing: The tester verifies through visual inspection of the System Under Test that the Health IT Module does not have the ability to prescribe oral liquid medications using non-metric standard units (i.e., cubic centimeter (cc), teaspoon).
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(F)
- The Health IT Module inserts leading zeroes before the decimal point for all amounts less than one when a prescriber prescribes medication in accordance with (b)(3)(ii)(F).
- The Health IT Module does not allow trailing zeroes after a decimal point when a prescriber prescribes medication.
- The tester verifies through visual inspection of the System Under Test that leading zeroes are inserted before the decimal point for all amounts less than one when a prescriber prescribes medication.
- The tester verifies through visual inspection of the System Under Test that there are no trailing zeroes after a decimal point when a prescriber prescribes medication.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(1) Optional
- The health IT developer receives the transaction creating a request for a new prescription and denies the request (NewRxRequest, NewRxResponseDenied) in accordance with (b)(3)(ii)(B)(1).
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation report for the following transactions:
- Receive request for a new prescription (NewRxRequest); and
- Send denial for a request for new prescription (NewRxResponseDenied).
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(2) Optional
- The health IT developer sends a fill status indicator change (RxFillIndicator) in accordance with (b)(3)(ii)(B)(2).
- The tester verifies the Health IT Module sends the RxFillIndicator transaction and completes all required test tool interaction steps and verifies the validation report.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(3) Optional
- The health IT developer asks the mailbox if there are any transactions (GetMessage) in accordance with (b)(3)(ii)(B)(3).
- The tester verifies the Health IT Module tests the GetMessage transaction and completes all required test tool interaction steps and verifies the validation report.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(4) Optional
- The health IT developer sends the transaction to request to send an additional supply of medication (Resupply) in accordance with (b)(3)(ii)(B)(4).
- The Health IT Module is able to transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
- The tester verifies the Health IT Module sends the Resupply transaction and completes all required test tool interaction steps and verifies the validation report.
- The tester verifies the Health IT Module transmits the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(5) Optional
- The health IT developer sends the transaction to communicate drug administration events (DrugAdministration) in accordance with (b)(3)(ii)(B)(5).
- The tester verifies the Health IT Module sends the DrugAdministration transaction and completes all required test tool interaction steps and verifies the validation report is complete with the required elements.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(6) Optional and for Pharmacy Only
- The health IT developer completes the request and response to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse, RxTransferConfirm) in accordance with (b)(3)(ii)(B)(6).
- The Health IT Module is able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation report for the following transactions:
- RxTransferRequest;
- RxTransferResponse; and
- RxTransferConfirm.
- The tester verifies the Health IT Module receives and transmits the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(7) Optional
- The health IT developer sends the transaction to recertify the continued administration of a medication order (Recertification) in accordance with (b)(3)(ii)(B)(7).
- The tester verifies the Health IT Module sends the Recertification transaction and completes all required test tool interaction steps and verifies the validation report is complete with the required elements.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(8) Optional
- The health IT developer completes the Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, REMSResponse) in accordance with (b)(3)(ii)(B)(8).
- The Health IT Module is able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation reports for the following transactions:
- Create and send REMS Initiation Request (REMSInitiationRequest);
- Receive REMS Initiation Response (REMSInitiationResponse);
- Create and send REMS Request (REMSRequest); and
- Receive REMS Response (REMSResponse).
- The tester verifies the Health IT Module receives and transmits the reason for the prescription using the diagnosis elements <Diagnosis><Primary> or <Secondary>.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(B)(9) Optional
- The health IT developer completes the electronic prior authorization transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse, PACancelRequest, PACancelResponse) in accordance with (b)(3)(ii)(B)(9).
- The Health IT Module is able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
- The tester verifies the Health IT Module sends and receives the following transactions and completes all required test tool interaction steps and verifies the validation report for the following transactions:
- Create and send PA Initiation Request (PAInitiationRequest);
- Receive PA Initiation Response (PAInitiationResponse);
- Create and send PA Request (PARequest);
- Receive PA Response (PAResponse);
- Create and send PA Appeal Request (PAAppealRequest);
- Receive PA Appeal Response (PAAppealResponse);
- Create and send PA Cancel Request (PACancelRequest); and
- Receive PA Cancel Response (PACancelResponse).
- The tester verifies the Health IT Module receives and transmits the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>.
System Under Test | Test Lab Verification |
---|---|
|
|
Paragraph (b)(3)(ii)(D) Optional
- The Health IT Module receives and transmits the reason for the prescription using the <IndicationForUse> element in the Sig segment. The reason for the prescription should be consistent with the International Statistical Classification of Diseases and Related Health Problems (ICDs) sent in the diagnosis element(s) for all optional transactions as listed in (b)(3)(ii)(C) in accordance with (b)(3)(ii)(D).
- The tester verifies the Health IT Module receives and transmits the reason for the prescription using the <IndicationForUse> element in the Sig segment. The reason for prescription should be consistent with the ICDs sent in the diagnosis element(s) for all applicable transactions and test data specified with the selected test case via the test tool. Consistency may be evaluated by visual inspection if not systematically supported.
System Under Test | Test Lab Verification |
---|---|
|
|
Archived Version:
Version # | Description of Change | Version Date |
---|---|---|
1.0 |
Initial Publication |
06-15-2020
|
1.1 |
Regulation text and compliance date updated per the Interim Final Rule (IFR), Information Blocking and the ONC Health IT Certification Program: Extension of Compliance Dates and Timeframes in Response to the COVID-19 Public Health Emergency. |
11-02-2020
|
1.2 |
Clarification revised to indicate removal of controlled substances from test data. |
04-02-2021
|
1.3 |
Clarification added to indicate a minimum of a single send/receive for medication history transaction is required. |
09-10-2021
|
1.4 |
Clarification added to grant notable exception to use "Replace” instead of “Approved” for medication renewal transactions |
05-01-2023
|
§ 170.315(b)(3) Electronic prescribing.
(ii) For technology certified subsequent to June 30, 2020:
- Enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request and respond to cancel prescriptions (CancelRx, CancelRxResponse).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Request and receive medication history (RxHistoryRequest, RxHistoryResponse).
- Relay acceptance of a transaction back to the sender (Status).
- Respond that there was a problem with the transaction (Error).
- Respond that a transaction requesting a return receipt has been received (Verify).
- Optionally, enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create and respond to new prescriptions (NewRxRequest, NewRxResponseDenied).
- Send fill status notifications (RxFillIndicator).
- Ask the Mailbox if there are any transactions (GetMessage).
- Request to send an additional supply of medication (Resupply).
- Communicate drug administration events (DrugAdministration).
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse, RxTransferConfirm).
- Recertify the continued administration of a medication order (Recertification).
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, and PACancelResponse).
- For the following prescription-related transactions, the technology must be able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>:
- Required transactions
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request to cancel prescriptions (CancelRx).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Receive medication history (RxHistoryResponse).
- Optional transactions:
- Request to send an additional supply of medication (Resupply)
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse)
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, PACancelResponse).
- Required transactions
- Optional. For each transaction listed in paragraph (b)(3)(ii)(C) of this section, the technology must be able to receive and transmit reason for prescription using the <IndicationforUse> element in the Sig segment.
- Limit a user's ability to prescribe all oral liquid medications in only metric standard units of mL (i.e., not cc).
- Always insert leading zeroes before the decimal point for amounts less than one and must not allow trailing zeroes after a decimal point when a user prescribes medications.
- Resource Documents
- Revision History
-
Version # Description of Change Version Date 1.0 Initial Publication
06-15-20201.1 Regulation text and compliance date updated per the Interim Final Rule (IFR), Information Blocking and the ONC Health IT Certification Program: Extension of Compliance Dates and Timeframes in Response to the COVID-19 Public Health Emergency.
11-02-20201.2 Clarification revised to indicate removal of controlled substances from test data.
04-02-20211.3 Clarification added to indicate a minimum of a single send/receive for medication history transaction is required.
09-10-20211.4 Clarification added to grant notable exception to use "Replace” instead of “Approved” for medication renewal transactions
05-01-2023 - Regulation Text
-
Regulation Text
§ 170.315(b)(3) Electronic prescribing.
(ii) For technology certified subsequent to June 30, 2020:
- Enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request and respond to cancel prescriptions (CancelRx, CancelRxResponse).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Request and receive medication history (RxHistoryRequest, RxHistoryResponse).
- Relay acceptance of a transaction back to the sender (Status).
- Respond that there was a problem with the transaction (Error).
- Respond that a transaction requesting a return receipt has been received (Verify).
- Optionally, enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Create and respond to new prescriptions (NewRxRequest, NewRxResponseDenied).
- Send fill status notifications (RxFillIndicator).
- Ask the Mailbox if there are any transactions (GetMessage).
- Request to send an additional supply of medication (Resupply).
- Communicate drug administration events (DrugAdministration).
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse, RxTransferConfirm).
- Recertify the continued administration of a medication order (Recertification).
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, and PACancelResponse).
- For the following prescription-related transactions, the technology must be able to receive and transmit the reason for the prescription using the diagnosis elements: <Diagnosis><Primary> or <Secondary>:
- Required transactions
- Create new prescriptions (NewRx).
- Request and respond to change prescriptions (RxChangeRequest, RxChangeResponse).
- Request to cancel prescriptions (CancelRx).
- Request and respond to renew prescriptions (RxRenewalRequest, RxRenewalResponse).
- Receive fill status notifications (RxFill).
- Receive medication history (RxHistoryResponse).
- Optional transactions:
- Request to send an additional supply of medication (Resupply)
- Request and respond to transfer one or more prescriptions between pharmacies (RxTransferRequest, RxTransferResponse)
- Complete Risk Evaluation and Mitigation Strategy (REMS) transactions (REMSInitiationRequest, REMSInitiationResponse, REMSRequest, and REMSResponse).
- Electronic prior authorization (ePA) transactions (PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse and PACancelRequest, PACancelResponse).
- Required transactions
- Optional. For each transaction listed in paragraph (b)(3)(ii)(C) of this section, the technology must be able to receive and transmit reason for prescription using the <IndicationforUse> element in the Sig segment.
- Limit a user's ability to prescribe all oral liquid medications in only metric standard units of mL (i.e., not cc).
- Always insert leading zeroes before the decimal point for amounts less than one and must not allow trailing zeroes after a decimal point when a user prescribes medications.
- Enable a user to perform the following prescription-related electronic transactions in accordance with the standard specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3) as follows:
- Standard(s) Referenced
- Testing
-
Testing Tool
Criterion Subparagraph Test Data (b)(3) Refer to NCPDP Electronic Prescribing (eRx)
Certification Companion Guide: Electronic prescribing
This Certification Companion Guide (CCG) is an informative document designed to assist with health IT product development. The CCG is not a substitute for the 21st Century Cures Act: Interoperability, Information Blocking, and the ONC Health IT Certification Program Final Rule (Cures Act Final Rule). It extracts key portions of the rule’s preamble and includes subsequent clarifying interpretations. To access the full context of regulatory intent, please consult the ONC Cures Act Final Rule or other included regulatory reference. The CCG is for public use and should not be sold or redistributed.
Base EHR Definition | In Scope for CEHRT Definition | Real World Testing | USCDI | SVAP |
---|---|---|---|---|
Not Included | Yes | Yes | No | No |
Privacy and Security: This certification criterion was adopted at § 170.315(b)(3). As a result, an ONC Authorized Certification Body (ONC-ACB) must ensure that a product presented for certification to a § 170.315(b) criterion includes the privacy and security criteria (adopted in § 170.315(d)) within the overall scope of the certificate issued to the product.
- The privacy and security criteria (adopted in § 170.315(d)) do not need to be explicitly tested with this specific paragraph (b) criterion unless it is the only criterion for which certification is requested.
- As a general rule, a product presented for certification only needs to be tested once to each applicable privacy and security criterion (adopted in § 170.315(d)) so long as the health IT developer attests that such privacy and security capabilities apply to the full scope of capabilities included in the requested certification. However, an exception exists for § 170.315(e)(1) “View, download, and transmit to 3rd party (VDT)” and § 170.315(e)(2) “Secure messaging,” which are explicitly stated.
- If choosing Approach 1:
- Authentication, access control, and authorization (§ 170.315(d)(1))
- Auditable events and tamper-resistance (§ 170.315(d)(2))
- Audit reports (§ 170.315(d)(3))
- Automatic access time-out (§ 170.315(d)(5))
- Emergency access (§ 170.315(d)(6))
- End-user device encryption (§ 170.315(d)(7))
- Integrity (§ 170.315(d)(8))
- Encrypt authentication credentials (§ 170.315(d)(12))
- Multi-factor authentication (§ 170.315(d)(13))
- If choosing Approach 2:
- For each applicable privacy and security certification criterion not certified for Approach 1, the health IT developer submits system documentation that is sufficiently detailed to enable integration such that the Health IT Module has implemented service interfaces that enable the Health IT Module to access external services necessary to meet the requirements of the privacy and security certification criterion. Please see the ONC Cures Act Final Rule at 85 FR 25710 for additional clarification.
Design and Performance: The following design and performance certification criteria (adopted in § 170.315(g)) must also be certified in order for the product to be certified.
- Safety-enhanced design (§ 170.315(g)(3)) must be explicitly demonstrated for this criterion.
- When a single quality management system (QMS) is used, the QMS only needs to be identified once. Otherwise, the QMS’ need to be identified for every capability to which it was applied.
- When a single accessibility-centered design standard is used, the standard only needs to be identified once. Otherwise, the accessibility-centered design standards need to be identified for every capability to which they were applied; or, alternatively, the developer must state that no accessibility-centered design was used.
Privacy and Security: This certification criterion was adopted at § 170.315(b)(3). As a result, an ONC Authorized Certification Body (ONC-ACB) must ensure that a product presented for certification to a § 170.315(b) criterion includes the privacy and security criteria (adopted in § 170.315(d)) within the overall scope of the certificate issued to the product.
- The privacy and security criteria (adopted in § 170.315(d)) do not need to be explicitly tested with this specific paragraph (b) criterion unless it is the only criterion for which certification is requested.
- As a general rule, a product presented for certification only needs to be tested once to each applicable privacy and security criterion (adopted in § 170.315(d)) so long as the health IT developer attests that such privacy and security capabilities apply to the full scope of capabilities included in the requested certification. However, an exception exists for § 170.315(e)(1) “View, download, and transmit to 3rd party (VDT)” and § 170.315(e)(2) “Secure messaging,” which are explicitly stated.
Design and Performance: The following design and performance certification criteria (adopted in § 170.315(g)) must also be certified in order for the product to be certified.
- Safety-enhanced design (§ 170.315(g)(3)) must be explicitly demonstrated for this criterion.
- When a single quality management system (QMS) is used, the QMS only needs to be identified once. Otherwise, the QMS’ need to be identified for every capability to which it was applied.
- When a single accessibility-centered design standard is used, the standard only needs to be identified once. Otherwise, the accessibility-centered design standards need to be identified for every capability to which they were applied; or, alternatively, the developer must state that no accessibility-centered design was used.
- If choosing Approach 1:
- Authentication, access control, and authorization (§ 170.315(d)(1))
- Auditable events and tamper-resistance (§ 170.315(d)(2))
- Audit reports (§ 170.315(d)(3))
- Automatic access time-out (§ 170.315(d)(5))
- Emergency access (§ 170.315(d)(6))
- End-user device encryption (§ 170.315(d)(7))
- Integrity (§ 170.315(d)(8))
- Encrypt authentication credentials (§ 170.315(d)(12))
- Multi-factor authentication (§ 170.315(d)(13))
- If choosing Approach 2:
- For each applicable privacy and security certification criterion not certified for Approach 1, the health IT developer submits system documentation that is sufficiently detailed to enable integration such that the Health IT Module has implemented service interfaces that enable the Health IT Module to access external services necessary to meet the requirements of the privacy and security certification criterion. Please see the ONC Cures Act Final Rule at 85 FR 25710 for additional clarification.
Applies to entire criterion
Clarifications:
- After January 1, 2020, testing will not be allowed for version 10.6 of the National Council for Prescription Drug Programs (NCPDP) SCRIPT standard.
- Health IT developers have until December 31, 2022 to test and certify to the updated 2015 Edition Cures Update using the SCRIPT 2017071 standard and all associated transactions.
- A transaction being “optional” for the purposes of certification does not mean and should not be interpreted as “optional” for Medicare Part D e-prescribing program compliance.
- The intended scope of this certification criterion is the ability of health IT to electronically exchange information with external recipients.
- The criterion does not require prescriptions of controlled substances to be supported to demonstrate compliance with its requirements. Drugs and other substances that are considered controlled substances under the Controlled Substances Act (CSA) have been removed from the test data.
- With the exception of which test data elements might be required, this certification criterion applies equally to both inpatient and ambulatory settings.
- Errors received during testing related to the max field requirement can be treated as a warning. This does not remove the requirement from a surveillance perspective nor the general need for mandatory fields to be populated with data as required by the standard. Please consult NCPDP to engage in further dialogue regarding its standard's interpretive requirements.
- It is beyond the scope of this certification criterion to require the capability to ensure that a provider is actively alerted when an electronic prescription fails. [see also 77 FR 54200] Health IT developers are advised, but not required, to include in its disclosures whether and how failed electronic prescriptions are presented to the end-user. Health IT developers are also advised to incorporate how failed electronic prescriptions are presented to the end-user in its end-user training materials.
Applies to entire criterion
Clarifications:
|
Paragraph (b)(3)(ii)(A)
Technical outcome – A user can send and receive the specified prescription transactions electronically per the NCPDP SCRIPT Standard Implementation Guide Version 2017071 and using RxNorm vocabulary codes.
Clarifications:
- RxNorm is considered a minimum standard code set under the Certification Program, and developers are permitted to upgrade their products to comply with a newer version of RxNorm without adversely affecting a product’s certification status pursuant to 45 CFR 170.555(b)(2) as long as no other law prohibits such action. [see 85 FR 25680]
- ONC intends for the RxNorm concept unique identifiers (RXCUIs) to be used as drug qualifiers. [see also 77 FR 54199]
- All medications may not yet have an equivalent RxNorm code. Where no RxNorm code exists, nothing prohibits another allowable code from being used. However, where corresponding RxNorm codes exist, health IT must be able to use those codes. [see also 77 FR 54199]
- Health IT developers have flexibility in determining how message notifications are presented to users. ONC recommends health IT developers and providers work together to determine whether batch-notification is preferable to real-time messaging alerts. Note that the notifications will differ based on the message type. [see also 80 FR 62642]
- Errors received during testing related to synonymous RxNorm term types can be treated as a warning.
- The scope of the medication history transaction requires sending a single request and receiving a single response to a request. Multiple medication history requests/responses are not required in the technical outcome.
- Health IT modules certified to the updated § 170.315(b)(3) criterion must have the capacity to enable a user to receive and transmit the following medication renewal transactions (NewRx, RxRenewalRequest and RxRenewalResponse) and verify their validation reports. If the application meets these requirements, then a notable exception is granted to use a Replace instead of Approved response and the system should pass certification.
Paragraph (b)(3)(ii)(A)
Technical outcome – A user can send and receive the specified prescription transactions electronically per the NCPDP SCRIPT Standard Implementation Guide Version 2017071 and using RxNorm vocabulary codes. Clarifications:
|
Paragraphs (b)(3)(ii)(B) Optional
Technical outcome – A user can send and receive the specified prescription transactions electronically per the NCPDP SCRIPT Standard Implementation Guide Version 2017071 and using RxNorm vocabulary codes.
Clarifications:
- The intent for the optional transaction (b)(3)(ii)(B)(2) Receive fill status notifications, specified in § 170.205(b)(1) and, at a minimum, the version of the standard specified in § 170.207(d)(3), is to be RxFillIndicatorChange and not RxFillIndicator. Health IT Modules should be able to send and receive RxFillIndicatorChange transactions.
Paragraphs (b)(3)(ii)(B) Optional
Technical outcome – A user can send and receive the specified prescription transactions electronically per the NCPDP SCRIPT Standard Implementation Guide Version 2017071 and using RxNorm vocabulary codes. Clarifications:
|
Paragraph (b)(3)(ii)(C)
Technical outcome – For all transactions in provision (b)(3)(ii)(C), health IT can send and receive the reason for the prescription using the Diagnosis elements in the Medication Segment.
Clarifications:
- Health IT Modules certified to the updated § 170.315(b)(3) criterion must have the capacity to enable a user to receive and transmit the reason for the prescription using the Diagnosis elements in the <Diagnosis><Primary> or <Secondary> elements, or optionally, the technology must be able to receive and transmit the reason for the prescription using the <IndicationForUse> element, and be consistent with the International Statistical Classification of Diseases and Related Health Problems (ICDs) sent in the diagnosis element(s). The <IndicationforUse> element defines the indication for use of the medication as meant to be conveyed to the patient, and is included in the Sig. This requirement applies to the following transactions: NewRx, RxChangeRequest, RxChangeResponse, CancelRx, RxRenewalRequest, RxRenewalResponse, RxFill, RxHistoryResponse, Resupply, RxTransferRequest, RxTranferResponse, REMSInitiationRequest, REMSInitiationResponse, REMSRequest, REMSResponse, PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse, PACancelRequest, and PACancelResponse.
Paragraph (b)(3)(ii)(C)
Technical outcome – For all transactions in provision (b)(3)(ii)(C), health IT can send and receive the reason for the prescription using the Diagnosis elements in the Medication Segment. Clarifications:
|
Paragraph (b)(3)(ii)(D) Optional
Technical outcome – Optional – For all transactions in provision (b)(3)(ii)(C), health IT can send and receive the reason for the prescription using the Indication elements in the SIG segment.
Clarifications:
- Health IT Modules certified to the updated § 170.315(b)(3) criterion must have the capacity to enable a user to receive and transmit the reason for the prescription using the Diagnosis elements in the <Diagnosis><Primary> or <Secondary> elements, or optionally, the technology must be able to receive and transmit the reason for the prescription using the <IndicationforUse> element, and be consistent with the International Statistical Classification of Diseases and Related Health Problems (ICDs) sent in the Diagnosis element(s). The <IndicationforUse> element defines the indication for use of the medication as meant to be conveyed to the patient, and is included in the Sig. This requirement applies to the following transactions: NewRx, RxChangeRequest, RxChangeResponse, CancelRx, RxRenewalRequest, RxRenewalResponse, RxFill, RxHistoryResponse, Resupply, RxTransferRequest, RxTranferResponse, REMSInitiationRequest, REMSInitiationResponse, REMSRequest, REMSResponse, PAInitiationRequest, PAInitiationResponse, PARequest, PAResponse, PAAppealRequest, PAAppealResponse, PACancelRequest, and PACancelResponse.
Paragraph (b)(3)(ii)(D) Optional
Technical outcome – Optional – For all transactions in provision (b)(3)(ii)(C), health IT can send and receive the reason for the prescription using the Indication elements in the SIG segment. Clarifications:
|
Paragraph (b)(3)(ii)(E)
Technical outcome – Oral liquid medications can only be electronically prescribed using “mL” units.
Clarifications:
- ONC clarifies that the volume for oral liquid medications must be prescribed using “mL” units. Testing and certification do not address the concentration of active ingredients, which is the amount of active ingredient per unit of volumetric measure (e.g., 5 mg per mL). When needed, health IT developers should represent concentrations of active ingredients using the appropriate units of measurement. E-prescribing of oral liquid medications using cc units will not be allowed for certification. [see also 80 FR 62643]
Paragraph (b)(3)(ii)(E)
Technical outcome – Oral liquid medications can only be electronically prescribed using “mL” units. Clarifications:
|
Paragraph (b)(3)(ii)(F)
Technical outcome – For all e-prescribed medications, the health IT always inserts leading zeroes before the decimal point for amounts less than one and never allows trailing zeroes after a decimal point.
Clarifications:
- No additional clarifications.
Paragraph (b)(3)(ii)(F)
Technical outcome – For all e-prescribed medications, the health IT always inserts leading zeroes before the decimal point for amounts less than one and never allows trailing zeroes after a decimal point. Clarifications:
|
Archived Version: