Physicians are in no way required to turn over all patient EHR data. CMS collects quality measures in the aggregate, numerators and denominators. There may be vendors in the middle who are collecting the data to calculate the measures, but the patient-level data does not go to CMS. (Obviously, their claims do, they're a payor.)