On Dec. 28, 2017, the Centers for Medicare and Medicaid Services (CMS) issued a Survey and Certification Memorandum (S&C Memo) to clarify CMS’ position that it prohibits physicians and healthcare providers from texting orders. CMS states that texting orders is out of compliance with the Medicare Conditions of Participation (CoPs) and the Conditions for Coverage (CfCs), specifically as such conditions relate to the requirements of a medical record. While the subject line of the S&C Memo relates to all healthcare providers, CMS appears to rely only on the hospital CoPs to enforce this prohibition on texting orders. However, it is likely that CMS will extend this guidance to other provider types. Additionally, this S&C Memo is in line with the Joint Commission’s recommendations from December 2016, developed in collaboration with CMS. These recommendations state that providers should not text orders but instead should continue to utilize computerized provider order entry, also known as CPOE, for all physician and other healthcare practitioner orders.
While CMS does not permit texting orders, it does recognize the essential and valuable use of other forms of texting between healthcare providers in the S&C Memo. With respect to these other forms of texting, CMS emphasizes that in order to be compliant with the CoPs and CfCs, providers must utilize and maintain secured text messaging platforms that encrypt data and minimize the risks to patients’ privacy of their protected health information under HIPAA. This means that providers currently using secured text messaging platforms should continue to monitor and assess the platforms’ accessibility, security and integrity.