There are some exceptions to the patient data access rules, but by and large, all healthcare providers, health information exchanges, and certified health IT developers must comply with the law. This facet of the 21 st Century Cures Act is important because it includes not just patient data access—which in some cases could start and end with ....