Standardized APIs Could Finally Make It Easy to Exchange Health Records

Original Article by
Posted on March 15, 2022 by John Glaser and Elizabeth Gardner

Trying to access personal medical information has been an intermittent annoyance for most people in the United States — until Covid-19 came along with a reminder of what a mess it can be.

We face flawed options for storing and accessing our Covid-19 vaccination information: a paper card that is too big for our wallet; a photo of the card stored in our phone for the maître d’ to squint at in low light; maybe a slick electronic vaccination card downloaded via QR code from our state health department that we can keep in our Apple Wallet. But wait! It only has our first two shots from last spring, and not the third one in November. Maybe our doctor has a portal app where we can pull up our immunizations — except for that booster we got at Walgreens.

In an age where banking apps aggregate all our financial information on command and our favorite restaurant can remember our “usual” when we order online, it’s mystifying that a piece of cardboard holds many people’s only proof of vaccination.

Vaccination cards are only one small symptom of a larger problem. Health information on any particular person is usually scattered across multiple hospitals, clinics, and pharmacies. Large chunks of most people’s medical histories are lost to any useful purpose when they move or change doctors because getting their information transferred is too complicated. If you’re lucky enough to get all your care within one health system and you stay put, you may have something close to a complete electronic health record (EHR). Otherwise, probably not.

Health care providers face these same hassles. Even when they use the same electronic health record software, health systems cannot always easily share information, and trying to corral a vaccination record from Walgreens or an emergency room report from out of state is, while sometimes feasible, always challenging. Health information exchanges (HIEs) operate in many states and allow providers to share basic demographic information and medical histories, but they vary in usefulness and availability.

However, federally mandated changes are afoot to make it significantly simpler to share any medical information electronically. It’s difficult to overstate their potential not only to allow everyone full, complete, and easy access to their personal health information but also to unlock countless new ways to use that information — as long as the entities that generate the information are prepared to take advantage of this advance in technology.

Historical Obstacles to Health Information Sharing, in Brief

Why is health information sharing so erratic, when virtually all health data is computerized? Can’t computers talk to each other? Other industries have figured this out. Why not health care?

The reasons are many and complex, but they boil down to lack of motivation. On the front lines, clinicians would love to have easy access to the information they need, but in the executive suite, the return typically hasn’t been large or obvious enough to justify the investment. For some providers, holding patients’ information hostage has been a competitive advantage: one way of keeping them from jumping to another provider. Some clinics and hospitals still grudgingly “share” information by handing the patient a disk or a folder of printouts.

Even basic computerization of medical information was going very slowly before billions of dollars in federal funding of electronic health records, appropriated as part of the Obama administration’s stimulus package enacted in 2009, changed the investment equation. It took free money to induce a critical mass of providers to take the plunge.

Sending health information from one computer to another has its own spotty history. Many health care software vendors have made a lucrative business out of creating custom interfaces to connect the diverse systems in use at many hospitals, with billable tweaking every time the hospital acquires a new application or upgrades an existing one. Moreover, vendors often have blocked data portability as a client-retention strategy. If it is difficult or expensive to move their data to a different vendor’s system, they will just default to the next version of the one they already have. Some vendors have taken steps toward helping providers share. For example, EHR vendor Epic allows its customers to swap data easily if they mutually agree to do so. But it can’t make them. If two Epic customers compete in a given market, they may decide it’s not in their best interest — even if it might be in their patients’ best interest.

It is not that the health care industry lacks data standards; quite the opposite. But they are often created by groups with interests in specific types of data — for example, standards developed for medical imaging by the American College of Radiologists. They have made data sharing somewhat less of a mess but can’t solve the other issues we discussed.

Meanwhile, baffled patients can’t access their information in any comprehensive way. Everything is probably on a computer somewhere, but there is no force powerful enough to compile it in one place and make it easy to find, let alone use it to improve our health.

Vaultara allows for rapid, contact-less access to essential imaging data and improved efficiency.

Plus a reduction in operational costs associated with medical image sharing.

View a demo of Vaultara's self-hosted image sharing software, Flight.

Accelerating the Transition

HL7 has formed several accelerators focused on target segments of health care information exchange. The first was the Argonaut Project, established in 2014 to develop the basic building blocks of the FHIR standards. Within each accelerator, developers and users work together to define “use cases” — the contexts in which the proposed information exchange will occur — and the data standards needed to support those use cases. HL7 accelerators also develop guides to support the implementation of the standards they develop for vendors to use in creating software products or incorporating new features into existing products. Participants fund the accelerators’ efforts and, within HL7 guidelines, establish how the accelerator will operate (including choosing the name of the accelerator).

A few examples:

  • The CARIN Alliance (Creating Access to Realtime Information Now) focuses on consumers’ access to and control of their health information.
  • CodeX is addressing the needs of cancer research, such as conducting clinical trials using “real-world data” gathered from EHRs, and matching patients with clinical trials.
  • Da Vinci’s efforts focus on interactions between health care providers and health plans: prior authorization, confirming a patient’s health insurance coverage, and accessing information about the price of care.
  • Helios, formed in fall 2021, is focusing on public health use cases, including reporting the incidence of diseases such as Covid-19, influenza, and sexually transmitted disease.

Broad adoption of FHIR is in its early stages. However, we think it holds enormous promise given the strength of FHIR’s tailwinds:

  • Well-defined and supported standards
  • A federal mandate to implement the APIs in all applications that handle health information
  • A broad range of use cases for every aspect of health care
  • The commitment of a broad spectrum of industry participants

To be clear, people will not be enjoying immediate, seamless access to all their health information by the end of this year. Universal FHIR compatibility is a baseline, not the finish line. Standards are still in development. Legacy systems need to be retrofitted with FHIR APIs. All entities that handle health data must become comfortable sharing it.

But at least we can start the race. Standard APIs can work their magic relatively quickly: The Apple App Store launched in 2008 with 500 apps and today has 2 million. The Google Play Store (launched the same year) has almost 3 million. While the health care software industry doesn’t have a single corporate entity with the dominance of a Google or an Apple, the universal support enjoyed by HL7 serves the same purpose and in many ways facilitates better collaboration in the user community.

To capitalize on the opportunities provided by FHIR APIs, providers, health plans, and software vendors should take several steps.

Learn as much as possible about the FHIR standards and the federal regulations. Organizations should review federal agency overviews of FHIR and related regulations and take advantage of the resources that always accompany a change of this magnitude: meetings, webinars, and industry articles. The 2022 HIMSS meeting, the largest health IT gathering in the world, features almost 40 sessions on various aspects of FHIR implementation, from prior authorization to cancer research to health care cost transparency.

Become active in the HL7 FHIR accelerator program. These development activities need broad input to ensure that the standards are responsive to everyone’s needs.

Develop implementation plans to migrate current legacy interfaces to FHIR APIs. Failure to comply with the regulations risks penalties and problems in the market. Moreover, given the next point, the APIs provide a foundation for the next generation of health care apps.

Be prepared to identify and evaluate novel applications that FHIR facilitates. A wave of innovations will accompany the implementation of FHIR to address any problem that can be solved with better information flow. But remember, FHIR APIs are the baseline, and any new solution requires the same old due diligence.

The new federal mandate will both enable and force the removal of stubborn technological and business barriers to the flow of health information, and, in the process, we believe will accelerate a wave of innovation rarely seen in this historically stodgy corner of the IT world. FHIR will speed the implementation of any application that depends on complex information-sharing such as matching organ donors to recipients or identifying situations where the risk of maternal mortality is elevated.

And we hope (and expect) that there will come a day when we can all stop worrying about accidentally putting our Covid-19 vaccination record through the wash.