CMS is adopting the standards for FHIR-based APIs being finalized by HHS in the ONC 21 st Century Cures Act rule at 45 CFR 170.215. These requirements support the privacy and security of patient information..