New HTI-5 rules target health data blocking risks but face criticism for adding complexity to compliance and interoperability.