Probably every physician practice has had the frustrating experience of trying to deliver the best possible care to a patient, only to be hampered by the inability to access relevant health information. Important pieces of a patient’s history, such as prescriptions, chronic conditions, or previous diagnoses may be trapped in data silos held in a million different places, inaccessible to the patient or the physician at the point of care. Myriad studies of the health care system have shown that lack of health information at the point of care often leads to duplication, waste, and delay.

Despite the widespread adoption of electronic health records (EHRs) across the state, this problem persists. A combination of technology challenges, competitive forces, and some legal uncertainty has kept data locked away from both patients and physicians.

Starting in 2020, the federal government began working to address this problem through the 21st Century Cures Act Final Rule, often known as the “Information Blocking Rule.” This rule clarified in federal regulation that patients have the right to access their own medical information through the technology of their choosing. For the first time, physicians, hospitals, and health plans must make that information available. This rule started the country down the path of widespread and seamless data exchange.

Now, the California Medical Association (CMA), is working with the State of California to build on the federal regulations to accelerate and expand data exchange efforts here in the state.  After a year of legislative negotiations, State Budget appropriations, and stakeholder meetings, the California Health and Human Services Agency (CHHS) on July 5, 2022, published the Data Exchange Framework.

The Data Exchange Framework, usually abbreviated “DxF”, will require all actors in the health care system – physicians, hospitals, health plans, skilled nursing facilities, etc. – to make patient data available to all other actors within the bounds of federal and state privacy laws. It will do this by requiring all those actors to sign the Single Data Sharing Agreement (described below). Once they have signed the agreement, practices and others will be contractually obligated to share data across the health care system.

Importantly, the Data Exchange Framework does not require practices to utilize any particular data sharing technology. The state is not building a “Statewide HIE.” When the law that created the framework was being written, CMA’s position was that physicians should have the flexibility to choose the technology that works best for their practice. Based on CMA’s advocacy, the law prohibits the state from forcing physicians into one system.

Instead, the Framework is intended to be “technology agnostic,” meaning that practices are free to choose the method of data exchange that works best for them. This could include a local health information organization, a national data sharing network, or other data sharing technology.

Now that the Framework has been published, the timeline for implementation is going to move quickly. It will be important for practices to familiarize themselves with the requirements of the Framework and begin their preparations as soon as possible. To help practices prepare, this article will give a high-level overview of the Framework, describe some things practices can do to prepare, and point them to some helpful resources CMA is developing.

The Data Exchange Framework

The Data Exchange Framework consists of four major components:

1.      Data Sharing Requirement

As described above, the Framework includes a legal requirement that physician practices and other health care entities make data available to other signatories of the Data Sharing Agreement. The date by which practices must comply with this requirement depends on the size of the practice. In general, practices of more than 25 physicians will need to be engaged in data exchange by January 31, 2024. Practices smaller than 25 physicians will have 2 additional years, until January 31, 2026.

2.      Single Data Sharing Agreement

To govern the Framework, the state has created the Single Data Sharing Agreement (DSA). This document is a contract that all practices are required by law to execute by January 31, 2023. The intent of the DSA is to act as a contract between physician practices, hospitals, health plans, etc., that they will make data available to each other upon request. The DSA lays out the parameters of how that data exchange should happen, predominantly via accompanying Policies and Procedures that describe what data elements need to be exchanged, privacy and security standards, and permitted uses of health data. The DSA also lays out practices’ responsibility to comply with the HHS Data Exchange Board (see below).

3.      HHS Data Exchange Board

The State has proposed to create a 5-to-7-member governing body that will oversee data exchange in California. This board will be charged with overseeing and updating the Data Sharing Agreement, ensuring compliance with the DxF, and qualifying health information organizations. The details about this board will be included in a legislative proposal that will be introduced next year.

4.      Technical Assistance for Small and Safety Net Practices

The 2022-23 State Budget included $50 million for providing technical assistance to small practices and other safety net providers. As of the writing of this article, there are no additional details to share. CMA is in actively engaged in ensuring that the funding will reach physician practices quickly and efficiently, to help them prepare for the DxF.

For more details on these components, CMA members can access the CMA DxF Fact Sheet on the CMA website (see below).


A general timeline for the Data Exchange Framework is listed in the table below:

Date Requirement
July 5, 2022 +     CHHS published the final Data Exchange Framework
First Quarter 2023 +     The Governance Entity (see above) begins their work
January 31, 2023 +     All health and human services organizations (including physician practices) must execute the Data Sharing Agreement
January 31, 2024 +     Most health care providers (see table below) must implement the Data Exchange Framework
January 31, 2026 +     Small and safety net practices (see above) must implement the Data Exchange Framework


As you can see, practices are required to execute (sign) the Data Sharing Agreement in just a little over five months from the writing of this article. The state has not yet announced how that process will take place, so please watch for further announcements from CMA or the State of California. In addition, it is important for physicians to know that you must sign the agreement by January 31, 2023, even if your practice is small enough to be in the cohort that does not have to comply until 2026.

What Practices Can Do Now

With these new requirements coming down over the next four years, practices will want to get started on building their game plan for compliance as soon as possible.

If you participate in a medical group or an IPA, a good place to start is by contacting that entity to inquire about their plans for compliance with the Data Exchange Framework. If you get access to an EHR system or population health platform through the group or IPA, and they already engage in data exchange, an individual practice may not need to sign their own DSA.

The organization will sign the Data Sharing Agreement on your behalf, and data exchange will be handled at that level.

For more independent practices, now is a good time to familiarize yourself with the health information organizations (HIOs) that serve your community. Members of the California Association of Health Information Exchange ( represent the largest and most well-established HIOs in the state. They have already signed an agreement to work together. As more entities become aware of the requirements of the DxF, lead times to sign up with an HIO may become longer; it will help to approach them soon.

Finally, be sure to work with your EHR vendor, especially if you work with a smaller, specialty system. These systems can require custom interfaces to onboard to an HIO, which can be both time-consuming and costly. On the plus side, some EHRs connect through a national data sharing network, allowing you to comply without adding a new vendor.  Either way, it helps to include your EHR vendor early and often.

CMA is Here to Help

To help practices get ready for the DxF, CMA is developing resources as quickly as information becomes available.

On June 28, 2022, CMA held an online briefing on the Data Exchange Framework. A recording of the briefing is available on the CMA YouTube Channel (

In addition, CMA has published a Fact Sheet that is available to all physician members on the CMA website ( The Fact Sheet summarizes the requirements and components of the DxF and includes a Frequently Asked Questions document that will be updated regularly as more information becomes available.

Finally, CMA members can always call the CMA Member Helpline at 800-786-4262 for assistance.