Clinical Decision Support

Which Vaccine Schedule Is In Your EHR?

Dr. Sarah Matt, MD, MBA  |  September 8, 2026  |  4 min read

Four medical societies published the fall vaccine schedule last week. None of them can make your insurer pay for it.

The AAFP released fall recommendations for COVID-19, flu, and RSV last week, coordinated with AAP, ACOG, and IDSA through a process they are calling the Vaccine Integrity Project. The clinical content is careful: 299 studies reviewed, 53 percent effectiveness against COVID hospitalization in adults 65 and older, 80 percent against pediatric flu death across eight seasons of surveillance data.

But the question I keep coming back to is a different one.

Which schedule is loaded in your EHR right now?

Not which schedule the societies recommend. Which schedule your clinical decision support is actually running.

Because those two are almost certainly not the same thing yet. And the gap between them is a two-week window where a patient walks in, your EHR tells you they are current, and the societies' guidance says they are not.

The structural problem nobody prints alongside the schedule

There is a sentence in the Public Health Service Act that most vaccine coverage discussions skip past: no-cost-share coverage for vaccines is tied to ACIP recommendations, not to any medical society. AHIP has promised to keep covering ACIP-recommended vaccines through 2027, which sounds reassuring until you read the fine print. That is a trade-association pledge. It is not a mandate.

The four societies coordinated their recommendations deliberately to align with the ACIP schedule wherever possible, which closes most of the gap. But "aligned wherever possible" still leaves seams.

And insurance coverage is not the structural problem I am most concerned about.

The EHR is.

AIRA, which manages the structured clinical decision support logic that tells your EHR's immunization forecast what to recommend, typically needs two to four weeks after a new schedule publishes to push updated logic to vendors. Vendors need time to validate and deploy. Which means for the next two weeks, the clinical decision support in most EHRs is running the old schedule.

"The new recommendations exist on paper. They do not exist in your chart."

Who owns the patient seen on day three?

This is not a hypothetical. It happens every September when the fall recommendations drop, every February when flu strain data shifts, every time a committee publishes updated guidance and the cascade of updates it requires takes weeks to complete.

A patient presents in your clinic on September 9. Your EHR's immunization forecast says they are current. The published schedule says they are not. You have no reason to override the EHR because you do not know the schedule has not updated yet.

Who owns that patient?

The answer, in practice, is you. The physician documents based on the EHR. The liability follows the documentation. The vendor's CDS lag is invisible and, in most contracts, explicitly disclaimed.

I practice internal medicine in a charity care setting. The patients who come through that door are not, in general, the ones with a primary care physician who can catch these discrepancies. They are the ones most likely to fall through the two-week gap while the systems around them update.

What you can actually check right now

Most EHR systems let you inspect the immunization forecast rules in their CDS configuration.

Three checks, this week

  1. Find the live logic versionIn Epic, it is under the Immunization Forecast configuration in the module settings. In athenahealth, the schedule populates through immunization logic with a version timestamp your informatics team can pull. In Oracle Health, the update comes through an interface table.
  2. Get a date from the vendorAsk when the update for the fall 2026 recommendations will be deployed. Write the date down. A date you can hold someone to is different from an assurance.
  3. Close the window by handUntil that date, add one question to the workflow for vaccine-age patients: when was the last time you got the shots you need?

That is not a protocol change. It is a ten-second conversation that closes a gap the system does not know it has.

The real question

The Vaccine Integrity Project is a genuine improvement in how medical societies coordinate their recommendations. The clinical content in the AAFP's fall guidance is solid. But coordination at the publication layer does not resolve the gap at the implementation layer.

My question for physicians reading this: which schedule is your EHR's immunization forecast running right now? Not which schedule you intend to follow. What does your CDS actually say if you pull a 65-year-old patient who got their last flu shot in April?

I suspect the honest answers vary more than anyone expects.


Clinical AI Governance Assessment

Surgery-trained, currently practicing internal medicine (charity care). Advisory practice focused on clinical AI governance, vendor evaluation, and implementation strategy for health systems and health-tech companies. If you are on a board, an operating team, or a clinical-AI committee trying to draw that line, that is the work I do.


Book a scoping call
Read more articles

The Sarah Matt Briefing

Weekly clinical reality on AI, governance, and what actually works inside health systems.