By admin 
The probe is in its early stages and may never lead to formal charges against Epic, whose dominant market position and control of Americans’ health data has rapidly accelerated in recent years. However, the breadth of the questions being asked by the FTC suggests a deep dive into the structural foundations of the electronic health record (EHR) industry. The people contacted by investigators—including executives, consultants, and legal advisors who work in or interface with healthcare businesses—noted that federal officials are scrutinizing a wide range of issues relating to company policies and practices that have generated a steady drumbeat of complaints and lawsuits from former employees, rival software developers, and even hospital clients.
According to those familiar with the matter, the government appears to be pursuing two distinct but interconnected lines of inquiry. The first is focused on Epic’s labor practices, specifically the restrictive employment agreements that bar its staff from working for a wide swath of healthcare businesses that directly or indirectly compete with the company. These non-compete clauses are legendary in the tech and healthcare sectors for their stringency. Epic’s headquarters in Verona, Wisconsin, serves as a massive training ground for thousands of young developers and implementation specialists. However, when these employees leave, they often find themselves "blacklisted" from working for Epic’s own customers—major hospital systems—or third-party consultants for significant periods. Critics argue that this creates an artificial talent shortage and prevents the cross-pollination of ideas that is necessary for innovation in medical technology.
The second line of inquiry is perhaps more consequential for the future of digital health: Epic’s alleged use of its dominant market position and leverage over its hospital customers to block rival technology companies from getting access to patient data and information needed to support their businesses. This practice, often referred to in the industry as "data siloed" or "information blocking," has been a point of contention for years. While the 21st Century Cures Act was designed to mandate interoperability—the ability for different health systems to share data seamlessly—rivals and third-party app developers have long complained that Epic makes it prohibitively difficult or expensive to integrate with their ecosystem. By controlling the "pipes" through which medical data flows, Epic can effectively act as a gatekeeper, deciding which new AI tools, diagnostic apps, or patient-monitoring platforms succeed and which fail.
To understand the weight of this FTC inquiry, one must consider the sheer scale of Epic’s influence. Founded by Judy Faulkner in 1979, Epic now holds the medical records of more than 250 million people—roughly 75% of the U.S. population. Its software is used by the nation’s most prestigious academic medical centers, including the Mayo Clinic, Johns Hopkins, and Cleveland Clinic. In the world of "acute care" hospitals, Epic’s market share is nearly 36%, but that number belies its true power; because it captures the largest, highest-volume health systems, its footprint in terms of patient volume is much larger than its nearest competitors, Oracle Health (formerly Cerner) and Meditech.
The FTC’s interest in Epic aligns with the broader mission of the Biden administration and FTC Chair Lina Khan, who has signaled a shift toward more aggressive antitrust enforcement in sectors where a single player controls a critical platform. In the case of healthcare, the EHR is that platform. When a hospital signs on with Epic, it is a multi-billion-dollar, decade-long commitment. The "switching costs" are so high that hospitals are effectively locked in, giving Epic immense leverage to dictate terms not just to the hospitals, but to any third-party vendor that wants to offer services to those hospitals.
The labor aspect of the investigation reflects the FTC’s recent efforts to ban non-compete agreements nationwide, a move that has faced legal challenges but remains a cornerstone of the agency’s agenda. In the EHR world, specialized knowledge of Epic’s proprietary code and implementation processes is highly valuable. By restricting where its former employees can take that knowledge, Epic may be suppressing wages and preventing the development of a competitive ecosystem of independent consultants and developers who could help hospitals optimize their systems without Epic’s direct (and expensive) involvement.
On the data side, the FTC is likely looking at how Epic’s "App Orchard" (now known as the Epic Connection Hub) operates. While Epic presents this as a marketplace for innovation, some developers have alleged that the fees required to join, coupled with the technical hurdles for data access, serve as a "toll" that protects Epic’s own nascent products. For instance, as Epic expands into areas like revenue cycle management, telehealth, and AI-driven analytics, it increasingly competes with the very third-party developers who need to integrate with its EHR. The conflict of interest is clear: if Epic offers a competing tool, it has every incentive to make its own integration smoother while placing "friction" in the way of its rivals.
Furthermore, Epic’s "Cosmos" project—a massive de-identified database of over 220 million patient records used for research—has raised questions about data monopolization. While Cosmos is a powerful tool for public health and clinical research, it also represents a data asset that no other company can replicate. If the FTC determines that Epic is using its control over this data to gain an unfair advantage in the burgeoning healthcare AI market, it could lead to mandates for greater data transparency or structural changes in how the company partitions its software and data services.
The potential impact of this investigation on patient care cannot be overstated. Proponents of Epic argue that its "integrated" model—where every department in a hospital uses the same system—leads to better patient safety and fewer medical errors. They argue that Epic’s strict controls are necessary to maintain the privacy and security of sensitive health information. However, critics point out that the lack of true interoperability between different vendors still leads to fragmented care. A patient moving from an Epic hospital to a Cerner-using specialist may still find that their records do not follow them perfectly, leading to redundant tests and delayed diagnoses. If the FTC can force more open standards, it could theoretically lower healthcare costs and improve outcomes by fostering a more competitive and innovative environment.
Epic has historically been a private, fiercely independent company that eschews acquisitions and refuses to go public. This "go-it-alone" strategy has allowed it to maintain a singular vision, but it has also fostered a corporate culture that some describe as insular. This insularity is now being tested by a regulatory environment that is increasingly skeptical of "walled gardens."
As the FTC continues its interviews, it will likely seek internal documents related to Epic’s "Community Connect" program, which allows large hospitals to extend their Epic license to smaller, independent practices. While this helps smaller clinics digitize, it also expands Epic’s reach and makes it even harder for smaller EHR vendors to compete. Investigators will be looking for evidence that Epic used this program to intentionally squeeze out competitors or force smaller providers into its ecosystem.
The road ahead for the FTC is long. Antitrust cases involving software and data are notoriously complex and can take years to litigate. Epic has a deep legal bench and the financial resources to fight any potential charges. However, the mere existence of the probe sends a signal to the entire healthcare IT industry: the era of the "data moat" may be coming to an end. Whether through formal enforcement or the threat of it, the government is signaling that the flow of medical information should belong to patients and their providers, not the software companies that manage the records. As this inquiry unfolds, it will serve as a bellwether for how the U.S. government intends to regulate the intersection of healthcare, big data, and monopolistic power in the 21st century.
