The probe is in its early stages and may never lead to charges against Epic, whose dominant market position and control of Americans’ health data has rapidly accelerated in recent years. However, the depth of the inquiry suggests that federal regulators are taking a holistic look at how Epic’s influence affects competition, innovation, and the mobility of the healthcare workforce. The individuals contacted by investigators—comprising healthcare executives, digital health entrepreneurs, and legal advisors—noted that the FTC is particularly interested in whether Epic’s policies create an environment where it is nearly impossible for smaller rivals or new entrants to compete on a level playing field.
Epic Systems, headquartered in a sprawling, whimsical campus in Verona, Wisconsin, was founded by Judy Faulkner in 1979. Over the decades, it has grown from a small database company into a titan that holds the medical records of more than 300 million people globally, including a vast majority of the U.S. population. According to data from KLAS Research, Epic controls approximately 36% of the acute care hospital market in the United States, but that figure belies its true influence; because Epic is the platform of choice for large academic medical centers and multi-state health systems, it manages the data of over half of all U.S. patients. This concentration of data has long been a point of contention for competitors who argue that Epic has built a "walled garden" that is difficult to penetrate.
One of the primary lines of inquiry pursued by the FTC focuses on Epic’s restrictive employment agreements. For years, Epic has been known for its stringent non-compete clauses, which reportedly bar former employees from working for a wide swath of healthcare businesses—including rival EHR vendors, consulting firms, and even some healthcare providers—for a period of one to two years. These agreements often include a "prohibited list" of hundreds of companies. Investigators are reportedly asking whether these practices stifle the labor market and prevent the cross-pollination of ideas that is essential for innovation in the health tech sector. This focus aligns with the FTC’s broader national initiative to ban non-compete agreements, a move the agency argues would increase worker earnings and foster business dynamism, though that specific rule has faced significant legal challenges in federal courts.

The second prong of the FTC’s investigation targets Epic’s alleged "information blocking" and its use of market leverage to disadvantage third-party software developers. In the modern healthcare landscape, doctors often rely on niche applications for specialized tasks, such as AI-driven diagnostic tools, remote patient monitoring, or advanced billing analytics. These applications must "talk" to the central EHR system to function. Sources indicate the FTC is investigating whether Epic makes it prohibitively difficult or expensive for these third-party companies to integrate with its platform. By controlling the "pipes" through which health data flows, Epic has the power to decide which innovations succeed and which fail, potentially favoring its own internal products over superior third-party alternatives.
This aspect of the probe touches on the 21st Century Cures Act, a landmark piece of legislation designed to end the practice of "information blocking." While the Office of the National Coordinator for Health Information Technology (ONC) is responsible for the technical standards of interoperability, the FTC has the authority to investigate whether such practices constitute "unfair methods of competition" under Section 5 of the FTC Act. Critics have long complained that Epic’s "App Orchard"—now rebranded as the Epic Showroom—acts as a gatekeeper, charging high fees and imposing technical hurdles that smaller developers cannot overcome.
The financial stakes of an Epic implementation are staggering. Large health systems often spend billions of dollars to transition to Epic, a process that takes years and involves massive organizational upheaval. Once a hospital is on Epic, the "switching costs" are so high that they are effectively locked in for a generation. This "vendor lock-in" gives Epic immense leverage. The FTC is reportedly examining whether Epic uses this leverage to coerce hospitals into using only Epic-approved services, thereby shutting out competitors in ancillary markets like telehealth, patient portals, and population health management.
Market analysts suggest that the FTC’s interest in Epic is part of a larger trend of scrutinizing "platform" economies. Just as Amazon controls the marketplace for retail and Google controls the marketplace for search, Epic controls the marketplace for clinical data. When one company owns the platform where all transactions occur, they have a natural incentive to prioritize their own services. In the context of healthcare, this doesn’t just affect profits; it can affect patient outcomes. If a superior diagnostic tool cannot get data from Epic, patients may receive sub-optimal care.

The investigation also comes at a time of massive consolidation in the health tech industry. Oracle’s $28 billion acquisition of Cerner in 2022 was seen as a direct attempt to challenge Epic’s dominance by leveraging Oracle’s cloud computing power. However, Epic has continued to gain ground, winning over major clients like Intermountain Health and UPMC from its rivals. This trend toward a "monoculture" in healthcare IT has raised alarms among policymakers who worry about the resilience of the national healthcare infrastructure. A single software bug or a targeted cyberattack on Epic could theoretically paralyze a significant portion of the U.S. healthcare delivery system.
Epic has historically defended its business practices as necessary to ensure the security and integrity of sensitive patient data. The company argues that its integrated approach—where every module is built on a single database—is more efficient and safer than the "Frankenstein" systems created by stitching together products from different vendors. Regarding data sharing, Epic points to its "Care Everywhere" platform, which facilitates the exchange of millions of patient records every day between different health systems. The company maintains that it is a leader in interoperability and that its restrictions are meant to protect patient privacy and intellectual property.
However, the legal landscape is shifting. The FTC under Chair Khan has shown a willingness to challenge established industry giants even without a traditional "consumer harm" model based on price hikes. Instead, the agency is looking at structural harms to the competitive process. In the case of Epic, the harm is not necessarily that EHR software is getting more expensive, but that the dominance of one firm is preventing the next generation of healthcare technology from ever reaching the market.
Legal experts note that an FTC antitrust investigation is a grueling process that involves "Civil Investigative Demands" (CIDs), which are essentially administrative subpoenas for documents, emails, and testimony. The agency will likely spend months, if not years, parsing through Epic’s internal communications to see if there is evidence of intent to exclude rivals. They will also look at "network effects"—the phenomenon where a service becomes more valuable as more people use it. In healthcare, if every other hospital in a region uses Epic, a hospital is under immense pressure to use Epic as well to ensure easy data transfer, even if a different software might better suit their specific needs.

As the probe continues, the healthcare industry remains on edge. If the FTC were to successfully sue Epic, the remedies could be transformative. The government could seek to force Epic to open its APIs (Application Programming Interfaces) to all developers on equal terms, or it could demand the end of non-compete agreements for its thousands of developers and implementation consultants. In an extreme and unlikely scenario, regulators could even seek to break up the company’s various business units.
For now, the investigation serves as a warning shot to the entire health tech sector. The era of "move fast and break things" in digital health is being replaced by an era of "integrate or face the consequences." As Brittany Trang, who first reported on the probe, noted, the central questions remain: Does the current system actually work for everyone, and who is being harmed by the current distribution of power? With the FTC now looking for those answers, the future of the nation’s medical data—and the companies that manage it—hangs in a delicate balance. The outcome of this inquiry will likely define the boundaries of competition in the digital age of medicine for decades to come.

