TEFCA + QHIN landscape in 2026: what rural and community clinics actually need to know
The federal interoperability framework, the live QHINs, the athenahealth bundling story, the Health Gorilla / Epic litigation, and the honest 'wait + monitor' posture most independent clinics should take this year.
Frequently asked questions
What is TEFCA?
The Trusted Exchange Framework and Common Agreement (TEFCA) is the federal framework for health-information exchange across networks, established under the 21st Century Cures Act (2016) and operationalized by the ONC starting in 2022. TEFCA defines the rules for how Qualified Health Information Networks (QHINs) interconnect and share patient records nationwide. It does NOT replace existing exchange infrastructure (Carequality, CommonWell, state HIEs) — it provides a federal floor with common terms, security, and interoperability requirements.
What is a QHIN?
A Qualified Health Information Network is an ONC-designated organization authorized to participate in TEFCA. As of April 2026, there are nine Designated QHINs: CommonWell Health Alliance, eHealth Exchange, Epic Nexus, Health Gorilla, Kno2, KONZA, MedAllies, Netsmart, and Surescripts HIE. Each QHIN connects member organizations (hospitals, EHRs, labs, payers, public-health agencies) and brokers cross-QHIN exchange under the TEFCA Common Agreement. Designated QHIN list is maintained at rce.sequoiaproject.org/designated-qhins/.
Do I have to use TEFCA as a small RHC or FQHC?
Not yet. TEFCA participation is voluntary for healthcare providers as of 2026. The 93% finding from Black Book Research (July 2025) shows the vast majority of independent practices are deliberately postponing compliance — there is no regulatory deadline forcing adoption. The clinics that benefit most today are those already exchanging records across networks (multi-system referrals, transitions of care). For an RHC or FQHC with predominantly local patient flow, TEFCA participation is a 2027-2028 decision, not a 2026 one.
Which QHIN should I pick if I do want to participate?
For most rural and community clinics in 2026, the practical default is eHealth Exchange (long-running, government-anchored, deep state-HIE relationships) or KONZA (lower onboarding friction, strong rural footprint, transparent pricing). Avoid Health Gorilla as your primary QHIN until the active Epic litigation (filed January 2026) resolves — Epic is contesting Health Gorilla's use of patient data accessed through Carequality. Epic Nexus is best if you're already on Epic; CommonWell if you're on Cerner/Oracle Health.
What does TEFCA participation cost?
Most QHINs offer no-cost participation at the basic tier (treatment-purpose data exchange). Premium tiers (population health, payment, advanced query, payer integrations) range from $5K to $50K/year for small clinics depending on QHIN and tier. The single biggest cost is implementation effort — connecting your EHR to the QHIN typically requires 4-12 weeks of vendor + clinic time. athenahealth's announcement that they've onboarded 80,000+ providers to TEFCA "for free" via their EHR partnership is the cost benchmark to beat.
How is athenahealth's TEFCA bundling changing the market?
In 2025 athenahealth announced they've connected 80,000+ providers to TEFCA exchange at no incremental cost as part of the EHR subscription. This commoditizes basic TEFCA connectivity — clinics on athenahealth, eClinicalWorks, NextGen, and similar EHRs are increasingly getting TEFCA "for free" through their EHR vendor. Competitors (third-party QHINs, point-solution interop vendors) are responding by shifting upmarket to value-added intelligence (AI summarization, reconciliation, alerts) rather than commodity connectivity. The basic data-exchange layer is being given away; differentiation is in the intelligence layer.
What is the Health Gorilla / Epic litigation about?
In January 2026, Epic filed suit alleging that Health Gorilla improperly used patient data accessed through the Carequality network for purposes beyond treatment. The dispute centers on whether QHIN-mediated query responses can be retained, monetized, or used for non-treatment purposes (e.g. payer analytics, life-sciences research). Until resolved, Epic-network providers may face friction or restrictions querying through Health Gorilla. Practical guidance: don't make Health Gorilla your sole or primary QHIN in 2026 — pick a QHIN that doesn't have active Epic litigation if Epic-network exchange matters to you.
Does TEFCA replace HIPAA?
No. TEFCA layers on top of HIPAA, not in place of it. All TEFCA-mediated exchange must comply with HIPAA Privacy + Security rules. The Common Agreement adds additional provisions specific to QHIN-to-QHIN trust (audit logging, breach notification SLAs, cybersecurity attestations) but doesn't loosen or supersede HIPAA. Your existing BAAs with EHR + clearinghouse vendors continue to govern PHI handling.
What's the difference between TEFCA, Carequality, and CommonWell?
Carequality and CommonWell are pre-existing private health-information exchange networks that have been live for years. TEFCA is the federal framework that connects them (and other QHINs) under one common governance + interoperability standard. Many TEFCA participants are also Carequality/CommonWell members — TEFCA didn't replace those networks, it added a federal interconnection layer. For most providers in 2026, day-to-day exchange still happens via the underlying network (Carequality query responses through your EHR); TEFCA is an additional channel that broadens reach.
What should a small RHC do about TEFCA in 2026?
Three practical actions: (1) Ask your EHR vendor whether they've onboarded to TEFCA already and at what tier — many have for free. (2) If you participate in a state HIE, ask whether the state HIE is itself a QHIN or QHIN participant; many are, which means you may already have TEFCA reach without doing anything new. (3) Don't pay for premium QHIN access until you have a documented need (specific multi-system referral relationship, payer integration requirement). For 90% of independent rural clinics, "wait + monitor" is the right 2026 posture.
Where will Triad Connect fit in?
Triad Connect (on the 2028+ roadmap) targets the intelligence layer above QHIN-mediated exchange — AI summarization of incoming TEFCA records, reconciliation of duplicate problem-list entries across sources, automatic alerts on care-gap-relevant changes. The thesis: basic connectivity is being commoditized (athenahealth, EHR vendors); the value is in turning a 50-page raw record dump into a 1-page actionable clinical brief. We're building toward this but not selling it yet — see the future-products section of /llms.txt.