CMS Wants to ‘Kill the Clipboard.’ Fine. Just Don’t Kill Privacy With It.

The committee-room aroma is scorched coffee plus printer toner, which fits, because American health care is still held together by clipboards, fax machines, and a prayer. Every few years, someone arrives with a glossy “modernization” brochure. The brochure is shiny. The guardrails are usually optional.

What CMS announced (dates and basics)

CMS is pushing a major bet: the ACCESS Model, a 10-year, voluntary effort meant to expand technology-supported care for people with Medicare, especially for chronic conditions.

• CMS says more than 150 organizations have been accepted for the launch.
• CMS has extended the initial application deadline to May 15, 2026.
• The model is set to start July 5, 2026.

CMS also notes that being on the accepted list is not automatic participation. Organizations still have to complete requirements and get final CMS approval.

ACCESS is aimed at conditions including high blood pressure, diabetes, chronic pain, and depression, and CMS highlights that many accepted organizations have not previously served Medicare beneficiaries.

“Kill the clipboard,” but watch the back door

Alongside ACCESS, CMS is marketing a broader HealthTech Ecosystem to end the clipboard era, touting shared standards for identity, security, and interoperability. It has also rolled out a Medicare App Library concept and patient-facing apps intended to streamline check-in and data sharing.

I am not here to defend the fax machine. I would like to see it indicted. But digital convenience is not automatically a civil-liberties win. Sometimes it is just a faster way to do the wrong thing.

The Paine test and the Orwell check

The Paine test: does this expand liberty, or concentrate power? If ACCESS works as promised, it could mean more convenient care, more options, and less bureaucratic warfare for Medicare beneficiaries, with clinicians spending less time on forms and more time treating humans.

But paper is locally annoying. Digital systems scale. They replicate. They get queried. Once health data becomes a high-speed asset, everyone who touches it starts acting like they deserve a slice.

The Orwell check: “patient-centered” can become a euphemism for “data-centered.” CMS says the ecosystem is about giving patients control. Good. Now define control: a real right to say no without losing access to care, meaningful limits on secondary uses, clear separation from unrelated enforcement or commercial surveillance, and independent auditing that can prove it.

The tradeoff: speed, without blank-check consent

CMS points to “strict guardrails,” including data privacy and security standards, outcome reporting, and quality requirements. Good. But guardrails must be legible to the public and enforceable in daylight.

Use the extra runway before May 15, 2026 and July 5, 2026 for plain-language privacy rules, strong contractual limits on data use, independent security assessments, and public reporting when things go wrong. Congress should ask the boring questions about retention, access logs, secondary uses, enforcement, and remedies. Watchdogs should FOIA the fine print until it is no longer fine.

We can modernize. We can even kill the clipboard. Just do not replace it with a quiet consent trap and a fast-moving data pipeline.