Surveillance and oversight activities have a significant role in the ONC Health IT Certification Program (Program) as they are critical to providing assurance that certified Health IT Modules function as intended in a production environment and do not present safety and/or public health risks. As a requirement of certification, Health IT Modules certified under the Program are subject to surveillance activities. The purpose of surveillance is to ensure that certified products and capabilities meet certification requirements, not just in a controlled testing environment, but also when they are used “in the field” (for example, in a clinician’s office or a hospital).
ONC-Authorized Certification Bodies (ONC-ACBs) must conduct surveillance to determine if a Health IT Module they certified continues to function as required by its certification. In certain situations where a Health IT Module has a potential or known non-conformity (i.e., does not meet the Program requirements) that may present a serious risk to public health or safety or may pose special challenges for ONC-ACBs’ surveillance, ONC may choose to directly review the product’s conformity to Program requirements; this process is called direct review. ONC’s direct review complements ONC-ACB surveillance and is aimed at promoting health IT developer accountability for the performance, reliability, and safety of health IT. ONC may also initiate direct review if it has a reasonable belief that a health IT developer has not complied with a Condition or Maintenance of Certification requirement.
Health IT Developer Responsibilities
Health IT developers have a responsibility to cooperate with ONC-ACB surveillance and ONC direct review. The goal of surveillance, direct review, and corrective action plans is to help health IT developers identify and address non-conformities in the certified health IT and noncompliance to Conditions and Maintenance of Certification requirements that providers use to support patient care. ONC and ONC-ACBs will work with health IT developers to remedy any non-conformities in a timely manner and across all customers.
ONC encourages end users of certified health IT to become familiar with the ONC recommended process for filing complaints concerning certified health IT and health IT developer actions.