Under the 21st Century Cures Act, this rule sets penalties for providers who unreasonably restrict access to electronic health information (EHI).