What is zero trust security?
Hackers are always working on new ways to infiltrate a network system. They continue to get more sophisticated and even the White House doesn't...
CMS established the Office of Health Technology and Products on June 9, 2026, creating a new organizational body to lead the modernization of Medicare, Medicaid, and CHIP digital infrastructure.
CMS established the Office of Health Technology and Products (OHTP) to provide enterprise leadership for healthcare technology modernization across its programs. The OHTP oversees digital product design, delivery, and operations, including beneficiary-, provider-, and state-facing systems. The office works in close coordination with the CMS Chief Information Officer and operates under CIO-led IT governance, cybersecurity, enterprise architecture, and capital planning oversight.
The OHTP contains new groups and divisions. The Open Source Program Group develops open-source policies and guidance across CMS and HHS. The Standards & Interoperability Group leads CMS's interoperability strategy, split into a Division of Data and Interoperability Platforms and a Division of Policy. The Product Development Group manages the full CMS digital product portfolio through a Division of Core Products and a Division of External Products, which oversees beneficiary-facing platforms like Medicare.gov. Digital Service at CMS rounds out the office, handling short-term, high-impact technology.
The OHTP's mandate includes a range of functions, including:
The Federal Register notice states the OHTP will provide "enterprise leadership and oversight for CMS healthcare technology modernization, digital products, and transformation of platforms and services supporting Medicare, Medicaid, the Children's Health Insurance Program (CHIP), and other CMS-administered programs."
FHIR (Fast Healthcare Interoperability Resources) is a standard for exchanging healthcare information electronically. The OHTP's Division of Data and Interoperability Platforms will develop FHIR-based APIs to enable secure data exchange between providers, payers, states, and beneficiaries.
Zero-trust architecture is a cybersecurity model that requires verification of every user and device attempting to access a system, rather than assuming anything inside a network is trusted. CMS's OHTP will align identity and access management with this framework, consistent with federal mandates.
The OHTP's creation is a modernization of systems that have historically struggled with fragmentation, outdated claims processing platforms, and inconsistent data exchange standards. The inclusion of a dedicated AI governance function is good because AI tools enter healthcare administration and clinical decision support, having a formal body within CMS to oversee their deployment and risk management sets a precedent for responsible adoption. For providers, payers, and health tech companies, the OHTP's interoperability and open-source mandates could reduce integration burden and lower barriers to building tools that connect with CMS systems.
Healthcare organizations and technology vendors that interact with CMS systems should monitor OHTP-led rulemaking and guidance, particularly around interoperability standards and AI governance, as these will shape compliance requirements and integration expectations.
Related: HIPAA Compliant Email: The Definitive Guide
The OHTP is a new CMS office created to modernize and oversee the technology and digital products that support Medicare, Medicaid, and CHIP.
The OHTP supports Medicare, Medicaid, the Children's Health Insurance Program, and other CMS-administered programs.
Open-source software is publicly available code that anyone can use or build on, and the OHTP's Open Source Program Group will use it to reduce duplication and lower costs across government technology projects.
Interoperability refers to the ability of different healthcare systems and software to communicate and share data seamlessly with one another.
Hackers are always working on new ways to infiltrate a network system. They continue to get more sophisticated and even the White House doesn't...
Cybersecurity threats are continuously evolving, and organizations can no longer rely on traditional, perimeter-focused defenses to stay protected....
The zero trust approach to cybersecurity is exactly what it sounds like. The objective is to trust no one automatically and to consider everyone a...
Every Friday we bring you the most important news from Paubox. Our aim is to make you smarter, faster.