Hospital price transparency
Barriers: login walls, CAPTCHAs and robots blocks
The machine-readable file must be available free of charge, without establishing a user account or password, and without submitting personal identifying information. A file behind a portal login, a registration form or an email capture is not public in the sense the rule requires, no matter how easy the form is.
Automated access is its own requirement. The CY 2024 amendments pushed hospitals to make files accessible to automated searches and direct downloads - the footer link and the root .txt file exist so machines can find the file predictably. A CAPTCHA or a bot-blocking rule that intercepts bulk downloads works against that purpose: the file is meant to be ingested by machines, at scale, by anyone.
The test is simple. Download the file with a plain command-line tool from a network with no special access. If that request is challenged, throttled to death or redirected into a form, the barrier is real, and it is the hospital's barrier even when a vendor or a CDN rule created it.
Barriers also poison every other check. A reviewer who cannot fetch the file cannot sample rates, cannot confirm the attestation, and cannot verify the display. CMS monitoring starts with access; a file that cannot be fetched reads like a file that is not there.