choice approved by the Secretary under subsection 
(b). Such information shall be made available 
through such application in a manner similar to how 
such information is made available under the Blue 
Button 2.0 program (or a successor program). 
‘‘(2) ENCOURAGING USE OF PROGRAM.—In car-
rying out the Program, the Secretary shall consider 
establishing methods for encouraging individuals de-
scribed in paragraph (1) to access their personal 
medical claim information under the Program. Such 
methods may include— 
‘‘(A) providing individuals described in 
paragraph (1) access to a one-time financial in-
centive to download for free or at a discounted 
price a CMS-approved mobile health record ap-
plication of their choice that can be used to ac-
cess their personal medical claim information 
under the Program; 
‘‘(B) paying a reasonable fee per download 
to the application developer to be capped at a 
fair market value; or 
‘‘(C) other methods determined appro-
priate by the Secretary. 
For purposes of the previous sentence, the Secretary 
shall consult with application developers, insurers, 
VerDate Sep 11 2014 
21:58 Dec 14, 2018
Jkt 089200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H7272.IH
H7272
kjohnson on DSK79L0C42 with BILLS
and other appropriate entities determined by the 
Secretary, to establish appropriate methods of finan-
cial incentive payment for applications approved to 
participate in the program. 
‘‘(b) MOBILE HEALTH RECORD APPLICATIONS.— 
‘‘(1) APPROVAL.—The Secretary shall establish 
a process under which the Secretary, in consultation 
with staff with appropriate technical expertise, ap-
proves mobile health record applications for use 
under the Program. Such process shall include re-
quirements providing that such application— 
‘‘(A) demonstrates the capacity to provide 
the personal medical claim information of an in-
dividual described in subsection (a) to such in-
dividual in an easily accessible format; 
‘‘(B) utilizes a machine-readable, struc-
tured, coded format conforming to a data con-
tent standard approved by the Secretary; 
‘‘(C) has the ability to aggregate data from 
multiple sources; 
‘‘(D) is encrypted (or contains other data 
security safeguards determined appropriate by 
the Secretary) and conforms to other cybersecu-
rity standards and best practices determined 
appropriate by the Secretary; 
VerDate Sep 11 2014 
21:58 Dec 14, 2018
Jkt 089200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H7272.IH
H7272
kjohnson on DSK79L0C42 with BILLS
‘‘(E) provides for a mechanism through 
which the Secretary may track the number of 
times and frequency with which such individual 
accesses the personal medical claim information 
of such individual; 
‘‘(F) does not use a third-party service for 
ad revenue or for any other means; and 
‘‘(G) meets such other requirements as 
may be specified by the Secretary. 
‘‘(2) ANNUAL
REVIEW
OF
APPROVAL.—The 
Secretary shall, not less than annually and in con-
sultation with staff with appropriate technical exper-
tise, review each mobile health record application ap-
proved under paragraph (1) to determine whether 
such application continues to meet the requirements 
specified in such paragraph. The Secretary shall re-
voke the approval of any such application that fails 
to meet such requirements. 
‘‘(c) INFORMATION
ON PROGRAM.—The Secretary 
shall, through the public website of the Centers for Medi-
care & Medicaid Services, mailed notices, through a notice 
at the time of enrollment of an individual in part A or 
part B, public awareness campaigns, the notice described 
in section 1804(a), the provision of personalized preven-
tion plan services (as defined in section 1861(hhh)), or 
VerDate Sep 11 2014 
21:58 Dec 14, 2018
Jkt 089200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H7272.IH
H7272
kjohnson on DSK79L0C42 with BILLS
otherwise (as determined appropriate by the Secretary), 
ensure that individuals described in subsection (a) receive 
information not less than twice each year regarding the 
Program, including a list of mobile health record applica-
tions approved under subsection (b)(1). 
‘‘(d) CYBERSECURITY AND DATA PRIVACY.— 
‘‘(1) CONSULTATION.—In carrying out the Pro-
gram, the Secretary shall consult with the National 
Coordinator for Health Information Technology and 
other Federal agencies determined appropriate by 
the Secretary to ensure the compliance of entities 
participating in the Program with all applicable pro-
visions of the regulations promulgated by the Sec-
retary under part C of title XI and section 264 of 
the Health Insurance Portability and Accountability 
Act of 1996. 
‘‘(2) ADDITIONAL
CYBERSECURITY
PROTEC-
TIONS.—In carrying out the Program, the Secretary 
shall consult with appropriate Federal agencies, in-
cluding the National Institute for Standards and 
Technology, and appropriate public-private partner-
ships (such as the Sector Coordinating Councils), in-
cluding the Healthcare and Public Health Sector Co-
ordinating Council, to ensure that relevant and ap-
plicable cybersecurity guidelines are followed when 
VerDate Sep 11 2014 
21:58 Dec 14, 2018
Jkt 089200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H7272.IH
H7272
kjohnson on DSK79L0C42 with BILLS
establishing the Program (including when estab-
lishing standards and best practices under sub-
section (b)(1)(D) and standards and criteria under 
subsection (e)(1)(C)). 
‘‘(e) DEFINITIONS.—In this section: 
‘‘(1) MOBILE HEALTH RECORD APPLICATION.— 
The term ‘mobile health record application’ means a 
software application that— 
‘‘(A) runs on a mobile device (such as a 
mobile phone or handheld computing platform); 
‘‘(B) allows an individual to access the in-
dividual’s personal medical claim information; 
and 
‘‘(C) meets such cybersecurity and data se-
curity standards and criteria as the Secretary 
may specify, which may be similar to such 
standards and criteria used under the Blue 
Button 2.0 program (or a successor program). 
‘‘(2) PERSONAL
MEDICAL
CLAIM
INFORMA-
TION.—The term ‘personal medical claim informa-
tion’ means, with respect to an individual— 
‘‘(A) a list of claims for items and services 
furnished to such individual payable under part 
A or part B, including any prescriptions or 
tests; 
VerDate Sep 11 2014 
21:58 Dec 14, 2018
Jkt 089200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H7272.IH
H7272
kjohnson on DSK79L0C42 with BILLS