Beyond the EHR and FHIR server that a physician is already paying for, what else would need to be considered? This is important to consider as many medical practices are operating on a very narrow margin.

Existing Wording:

#implementation - Security labeling does not have to be implemented in the EHR system