This commentary examines the current health care information technology (IT) policy that removes liability from health IT vendors when patients are harmed due to health IT failure (for example, if a computerized provider order entry system suggests an incorrect medication dose). It explores the legal basis for the current policy, and suggests a rebalance of responsibility between the vendors and health professionals.