Hospital Information Systems

Chapter 7
Health Data Standards, Coding and Interoperability

Post Graduate Program in Health Care Management
Hospital Information Systems   •   Post Graduate

Health Data Standards, Coding and Interoperability

Introduction and context

Hospitals are not single information systems. They are ecosystems containing electronic health records (EHRs), laboratory systems, radiology information systems, picture archiving and communication systems (PACS), pharmacy systems, billing platforms, public-health registries, patient portals and external health-information exchanges. Each system may represent the same patient, encounter or clinical event differently. A laboratory system may identify a test by a local code, a radiology system may transmit images in a specialized format, and an EHR may store a diagnosis using a national billing classification. Without agreed standards, data can be exchanged syntactically but still be misunderstood.

Interoperability is therefore more than connecting applications. It is the ability of systems and organizations to exchange, interpret and use information consistently. For healthcare managers, interoperability affects patient safety, continuity of care, operational efficiency, regulatory compliance, analytics and the economics of digital transformation.

This chapter examines the standards and governance practices that support interoperability, with particular attention to HL7, FHIR, DICOM, ICD, SNOMED CT and LOINC. It also addresses patient matching, application programming interfaces (APIs), health information exchange (HIE), data quality and contemporary developments.

Learning objectives

By the end of this chapter, the learner should be able to:

  1. Distinguish technical, syntactic, semantic, organizational and legal interoperability.
  2. Explain the purposes and relationships of HL7 v2, CDA, FHIR and DICOM.
  3. Compare ICD, SNOMED CT and LOINC and select an appropriate terminology for a use case.
  4. Analyse patient-matching risks and propose governance and quality controls.
  5. Explain how APIs and HIE architectures support coordinated care.
  6. Design a practical interoperability and data-quality strategy for a hospital.
  7. Evaluate ethical, regulatory, managerial and security implications of data exchange.

1. The layers of interoperability

Interoperability is commonly analysed as a set of related layers:

LayerCentral questionTypical concern
TechnicalCan systems connect and transmit data?Networks, transport, authentication
SyntacticIs the structure readable by the receiving system?XML, JSON, message segments, schemas
SemanticDoes the receiver interpret the data in the same way?Codes, units, value sets, definitions
OrganizationalCan workflows and responsibilities operate across institutions?Referral processes, service agreements
Legal and policyIs exchange permitted and accountable?Consent, privacy, retention, liability

Technical interoperability is necessary but insufficient. A message may arrive successfully while the receiving system misinterprets “positive” as a laboratory result rather than a pregnancy status, or treats a medication dose as milligrams when it is micrograms. Semantic interoperability requires shared meaning, including definitions, permissible values, units, context and provenance.

A useful distinction is between data exchange and data use. Exchange concerns movement from one system to another. Use concerns whether the receiving clinician, decision-support tool or analytic model can safely act on the information. High-quality interoperability supports both.

2. Standards, terminologies and classifications

A standard is an agreed specification for representing, exchanging or managing information. A terminology provides concepts and their relationships. A classification groups entities into categories for a defined purpose, often reporting, reimbursement or population statistics. These functions overlap but are not interchangeable.

For example, SNOMED CT can represent the detailed clinical concept “bacterial pneumonia caused by a named organism.” ICD may classify the condition into a category suitable for morbidity statistics or reimbursement. LOINC identifies a laboratory observation, while a local laboratory system may additionally need a code for the specimen, method and reference range.

2.1 HL7

Health Level Seven International develops standards for clinical and administrative data exchange. “HL7” may refer broadly to the organization or to particular standards.

HL7 v2 is a widely implemented message standard. It uses delimited segments such as MSH (message header), PID (patient identification), OBR (observation request) and OBX (observation result). A laboratory result message can be transmitted when a test is completed. Its strengths include maturity, broad deployment and efficient event-based exchange. Its limitations include local variation, optional fields and dependence on implementation guides and interface agreements.

HL7 Clinical Document Architecture (CDA) represents clinical documents such as discharge summaries. CDA combines a machine-readable header with human-readable narrative and coded sections. It is useful where document integrity and clinical readability are important, although extracting discrete data from narrative documents can be difficult.

HL7 FHIR—Fast Healthcare Interoperability Resources—uses modular resources such as Patient, Encounter, Observation, DiagnosticReport, MedicationRequest and AllergyIntolerance. Resources can be exchanged through RESTful APIs using JSON or XML, and can also be represented in documents, messages and subscriptions. FHIR profiles, extensions, implementation guides and value sets adapt the general specification to local or national requirements.

FHIR does not automatically guarantee interoperability. Two organizations may both claim to use FHIR while applying different profiles, code systems, cardinalities or interpretations. Conformance testing, version control and governance remain essential.

2.2 DICOM

Digital Imaging and Communications in Medicine (DICOM) is the principal standard for medical images and related information. It supports image storage, querying, retrieval, worklists and communication between modalities and PACS. DICOM metadata may include patient, study, series, modality and acquisition information.

DICOM is not simply an image-file format. It defines information objects, services and communication behavior. A CT study, for example, may contain multiple series and hundreds of images, each linked to identifiers and acquisition metadata. DICOM also supports structured reports and, through standards such as DICOMweb, web-based access to imaging resources.

A major governance issue is the protection of identifying metadata. De-identification for research must remove or transform identifiers while preserving the attributes necessary for the research question. Re-identification risk can remain because images and unusual combinations of dates, locations or clinical details may be identifying.

2.3 ICD

The International Classification of Diseases (ICD), maintained by the World Health Organization, is primarily a classification for diseases, injuries, causes of death and health reporting. National modifications may add detail for reimbursement and administrative purposes. ICD coding is generally performed after clinical documentation and is influenced by coding rules, encounter context and national policy.

ICD is valuable for reporting, case-mix analysis, utilization management and population surveillance. It is not designed to express every clinically relevant nuance at the point of care. A diagnosis recorded in ICD should not automatically be treated as a complete clinical problem list without examining status, certainty, timing and documentation.

2.4 SNOMED CT

SNOMED CT is a multilingual, concept-based clinical terminology. It provides concepts, descriptions, relationships and reference sets. Its compositional structure can represent clinical findings, procedures, body structures, organisms and situations with greater clinical detail than many classifications.

SNOMED CT supports problem lists, clinical documentation, decision support and data reuse. Its expressive power creates implementation responsibilities: organizations need authorized editions, release management, terminology services, mapping policies and training. A SNOMED CT code should be stored with its code system and version context where required.

2.5 LOINC

Logical Observation Identifiers Names and Codes (LOINC) identifies measurements, observations, documents and some survey instruments. A laboratory concept is characterized by dimensions such as component, property, timing, system, scale and method. LOINC identifies what was observed; it does not normally provide the result value, reference interval or interpretation.

A robust laboratory record may therefore contain:

  • a LOINC code for the test or observation;
  • the result value and unit;
  • specimen or body system;
  • method, where clinically relevant;
  • reference range and interpretation;
  • collection and result timestamps; and
  • performer, device and provenance.

The distinction between the test identity and the result is essential. “Hemoglobin concentration” and “12.5 g/dL” are different data elements.

2.6 Relationship among standards

Standards are complementary rather than competing. FHIR may carry a DiagnosticReport; the report may refer to an Observation coded in LOINC; a diagnosis may use SNOMED CT or ICD depending on purpose; an imaging study may point to DICOM objects. A terminology service may provide mappings and value-set expansion used by all of these exchanges.

NeedCommon standard or terminologyPrimary role
Event-based clinical messagingHL7 v2Admission, discharge, laboratory and scheduling messages
Clinical documentsHL7 CDAStructured, human-readable documents
API-based exchangeHL7 FHIRModular resources and modern interoperability
Medical imagingDICOMImages, metadata and imaging services
Statistical and administrative classificationICDDisease and cause classification
Detailed clinical conceptsSNOMED CTFindings, disorders, procedures and problems
Laboratory and observation identificationLOINCTests, measurements and observations

3. Coding and terminology governance

Coding is not merely a technical mapping exercise. It is a socio-technical process involving clinicians, coders, informaticians, vendors, compliance officers and managers. Governance should define who may create local codes, how codes are retired, how mappings are validated and how changes are communicated.

A terminology governance board should maintain:

  1. an inventory of code systems and local extensions;
  2. authoritative terminology ownership;
  3. release and version procedures;
  4. approved value sets for each data element;
  5. mapping and crosswalk documentation;
  6. validation and regression testing;
  7. rules for null, unknown, not applicable and refused values; and
  8. monitoring of coding completeness and semantic drift.

Mappings are often directional and imperfect. A detailed SNOMED CT concept may map to several ICD codes depending on context. Conversely, one broad ICD category may correspond to many clinical concepts. A map should therefore record equivalence, broader-than, narrower-than or related-to relationships, and should not imply clinical equivalence when none exists.

Terminology servers can provide lookup, translation, validation and value-set expansion. They reduce duplication but do not remove the need for clinical review.

4. APIs and health information exchange

An API is a defined interface through which software requests or submits data. A FHIR REST API commonly uses HTTP methods: GET to retrieve, POST to create, PUT or PATCH to update, and DELETE where permitted. In healthcare, authorization, auditability and minimum-necessary access are as important as technical functionality.

Modern API programs commonly use:

  • OAuth 2.0 or equivalent authorization mechanisms;
  • OpenID Connect for identity and authentication;
  • TLS for encryption in transit;
  • SMART on FHIR patterns for authorized applications;
  • audit logs and consent enforcement; and
  • rate limits, monitoring and availability controls.

An API should specify resource profiles, search behavior, pagination, error responses, versioning and terminology expectations. “FHIR-enabled” is not a complete design specification.

HIE models

Health information exchange may be organized through several models:

  • Directed exchange: a known sender securely transmits information to a known recipient, such as a referral summary.
  • Query-based exchange: an authorized participant searches for information held by another organization.
  • Consumer-mediated exchange: patients access, aggregate or transmit their records through a portal or application.
  • Federated exchange: organizations retain data locally while participating in a common trust and query framework.
  • Centralized exchange: selected data are stored in a shared repository.

Each model involves trade-offs in governance, latency, availability, duplication, consent and operational cost. A centralized repository may support analytics but create a high-value security target. A federated model may preserve local control but make identity resolution and query performance more difficult.

5. Patient matching and identity management

Patient matching links records that refer to the same person; it must not be confused with authentication, which verifies a person’s claim about identity. A master patient index (MPI) stores or references demographic and identity attributes and supports matching across systems.

Deterministic matching uses exact or rule-based agreement on identifiers such as a trusted national identifier, medical record number, date of birth and surname. Probabilistic matching calculates or assigns a likelihood based on several fields, accounting for spelling variation, missing data and conflicting evidence. Both approaches require thresholds and human review for uncertain cases.

A conceptual matching score can be expressed as:

S = ∑(wi × mi) − ∑(vj × cj)

where S is the match score, mi represents agreement on field i, wi is the weight assigned to that agreement, cj represents a contradiction on field j, and vj is the penalty for that contradiction. This is a governance model rather than a universal formula; weights, thresholds and fields must be validated against local data. The score has no inherent probability interpretation unless calibrated against labelled records.

A false positive merges two people’s records and can cause serious clinical harm. A false negative fragments one person’s history and may lead to duplicated testing or incomplete risk assessment. Controls include:

  • standardized name, address, telephone and date formats;
  • collection of multiple identifiers;
  • verification at registration and bedside;
  • duplicate-record work queues;
  • demographic-change procedures;
  • restricted merge and unmerge permissions;
  • audit trails and post-merge review; and
  • patient access to correction processes.

Biometrics may strengthen matching in some settings but introduce privacy, accessibility, false-match and governance risks. No matching method should be treated as infallible.

6. Data quality for interoperability

Interoperable data must be fit for a defined use. Common dimensions include:

DimensionMeaningExample control
CompletenessRequired values are presentMandatory specimen and collection time
ValidityValues conform to permitted formats or codesValidate against a FHIR profile
AccuracyData represent the real-world factReconcile medication list with pharmacy data
ConsistencyRelated representations do not conflictSame date of birth across systems
TimelinessData are available when neededMonitor result transmission delay
UniquenessOne real-world entity is not duplicatedMPI duplicate review
ProvenanceOrigin and transformation are knownRecord source, author and timestamp

Quality should be measured at the point of capture and after exchange. For example, a laboratory interface may validate that a numeric result has a permitted unit, but clinical review is still needed to identify implausible values. Data quality dashboards should report trends by department, interface, code set and error type rather than only a hospital-wide average.

A useful management principle is that quality is contextual. A missing apartment number may be critical for home care but irrelevant to a pathology trend analysis. Quality requirements should therefore be linked to clinical, operational, financial or research use cases.

7. Implementation framework for hospitals

A practical interoperability programme can proceed through the following stages.

Stage 1: Establish the use case

Define the clinical or operational problem, participating organizations, data users, safety risks and success criteria. “Improve interoperability” is too broad; “deliver a complete discharge summary and medication list to the receiving clinic within one hour” is testable.

Stage 2: Map the information flow

Document source systems, data elements, identifiers, transformations, destinations, timing and failure points. Include manual workarounds and paper processes, which often reveal hidden dependencies.

Stage 3: Select standards and profiles

Choose the standard appropriate to the exchange. Use DICOM for imaging objects, FHIR for API-accessible resources, HL7 v2 for established event interfaces, and suitable terminologies for clinical meaning. Specify profiles, value sets, units, cardinalities and error handling.

Stage 4: Design identity, consent and security

Define patient identity processes, organizational identifiers, user roles, authorization, consent rules, audit requirements, breach response and retention. Security must be designed into the architecture rather than added after deployment.

Stage 5: Build and test

Testing should include structural validation, terminology validation, workflow testing, negative cases, performance, downtime recovery and user acceptance. Test realistic data, including missing names, duplicate patients, amended results, corrected diagnoses and late-arriving documents.

Stage 6: Deploy incrementally

Pilot with a limited service, monitor safety and usability, train staff, and establish support procedures. Avoid assuming that a technically successful interface is operationally successful.

Stage 7: Monitor and improve

Track delivery rates, rejected messages, terminology errors, duplicate identities, response times, data completeness, user-reported incidents and patient outcomes. Governance should include a process for changing profiles and retiring obsolete interfaces.

8. Illustrative case: regional emergency and laboratory exchange

Background. A regional hospital receives emergency patients from three community clinics. Each clinic uses a different EHR. Laboratory results are sent by fax or manually re-entered, and duplicate patient records are common.

Problem. Clinicians experience delays, repeated tests and uncertainty about whether an imported result belongs to the correct patient. Managers want a scalable exchange rather than another point-to-point interface.

Analysis. The project team identifies four separate problems: inconsistent identity data, absence of a shared laboratory vocabulary, insecure document transmission and unclear responsibility for correcting errors. It also finds that the clinics use different local codes for the same potassium test and do not consistently transmit units or collection times.

Approach. The organizations create a shared governance agreement and a regional MPI. Registration staff standardize demographic capture and use a manual review queue for uncertain matches. Laboratory observations are mapped to approved LOINC concepts, with units, specimen, reference intervals, result status and timestamps. A FHIR API exposes Patient, Encounter, Observation and DiagnosticReport resources. Imaging remains accessible through the PACS using DICOM services. Access is protected through organizational trust agreements, role-based authorization, audit logs and defined emergency-access procedures.

The implementation guide specifies required fields, value sets, error responses, amendment handling and downtime procedures. A pilot begins with emergency laboratory results. Clinicians validate that imported results display source, time, status and reference range clearly.

Outcome. The pilot reduces manual transcription and makes recent results available during emergency assessment. However, the team discovers that some clinic addresses are outdated and that a result-status value is interpreted differently by two systems. The project therefore adds data-quality monitoring and revises the implementation guide before expansion.

Learning points. The case demonstrates that interoperability is simultaneously a standards, identity, workflow, governance and change-management problem. FHIR enabled exchange, but terminology mapping, patient matching, testing and accountability determined whether the exchange was safe.

9. Ethical, regulatory and managerial considerations

Health data exchange involves confidentiality, autonomy, equity and institutional accountability. Managers must distinguish legitimate use from convenient access. Consent requirements vary by jurisdiction and use case, but even where consent is not the legal basis, transparency, purpose limitation and access control remain important.

Important controls include data minimization, encryption, least-privilege access, segregation of duties, audit review, breach response and vendor due diligence. APIs increase the number of possible access points; therefore, an API strategy must include lifecycle management, security testing and revocation of obsolete applications.

Interoperability can produce inequity when patients lack digital access, have unstable addresses, use different names or speak languages poorly supported by systems. Matching algorithms may perform differently across demographic groups. Organizations should evaluate error rates and access outcomes, not merely technical performance.

Artificial intelligence increases the value of standardized data for prediction, documentation and decision support, but it also magnifies coding errors, missingness and bias. AI systems should receive provenance-rich data, versioned terminology and clear uncertainty indicators. Interoperability does not make an algorithm clinically valid; local validation, monitoring and human accountability remain necessary.

10. Contemporary developments and future direction

Current development is moving toward API-based exchange, patient-mediated access, event notifications, computable clinical knowledge and national interoperability networks. FHIR subscriptions can support notification when relevant resources change. Bulk-data approaches can support population analytics, subject to privacy and governance controls. DICOMweb facilitates web-based imaging workflows, while structured reporting improves machine use of imaging findings.

The future challenge is not simply more data. It is trustworthy, computable and context-preserving data. Systems must communicate uncertainty, provenance, correction history and clinical intent. Organizations should resist the assumption that one universal format will eliminate local governance. Sustainable interoperability requires shared institutions, maintained implementation guides, skilled professionals and continuous measurement.

Chapter Summary

Interoperability enables healthcare systems to exchange and use information safely. It has technical, syntactic, semantic, organizational and legal dimensions. HL7 v2 supports established event messaging; CDA supports structured clinical documents; FHIR supports resource-based APIs; and DICOM supports medical imaging and its metadata. ICD is primarily a classification for reporting and administrative purposes, SNOMED CT provides detailed clinical concepts, and LOINC identifies observations and tests.

Safe exchange depends on terminology governance, validated mappings, patient matching, consent, security, provenance and data-quality management. APIs and HIE models provide different ways to connect organizations, each with operational and governance trade-offs. Patient matching requires strong registration, thresholds, human review and auditable correction processes. A successful interoperability programme begins with a specific use case, defines information flows, selects appropriate standards, tests realistic failure cases and monitors performance after deployment. Standardization is therefore a continuing organizational capability, not a one-time technology purchase.

Key Terms

Interoperability: The ability of systems or organizations to exchange and use information consistently.

Technical interoperability: The capacity of systems to connect and transmit data.

Semantic interoperability: The ability to preserve and interpret meaning across systems.

HL7 v2: A widely used event-based messaging standard for healthcare.

FHIR: A resource-oriented HL7 standard supporting APIs, messages and documents.

CDA: HL7 Clinical Document Architecture for structured, human-readable clinical documents.

DICOM: Standard for medical images, metadata and imaging communication services.

ICD: International classification used for diseases, injuries and health reporting.

SNOMED CT: A detailed, concept-based clinical terminology.

LOINC: A terminology for laboratory tests and other observations.

Value set: An authorized collection of codes permitted for a particular data element.

Terminology service: A service that supports code lookup, validation, mapping and value-set operations.

API: An application programming interface through which software exchanges data or services.

Health information exchange: Organized electronic exchange of health information among authorized participants.

Master patient index: A system or process used to link records to individuals.

Deterministic matching: Matching based on exact or rule-based agreement.

Probabilistic matching: Matching based on weighted evidence and uncertainty.

Data provenance: Information about the origin, author, time and transformations of data.

Implementation guide: A specification explaining how a standard is constrained and used for a particular context.

Review Questions

Short Answer Questions

  1. Distinguish syntactic interoperability from semantic interoperability.
  2. What is the principal purpose of LOINC?
  3. Why is DICOM more than an image-file format?
  4. State two risks associated with incorrect patient matching.
  5. What is the role of a terminology governance board?

Long Answer Questions

  1. Compare HL7 v2, CDA and FHIR in terms of structure, use cases, strengths and limitations.
  2. Explain how ICD, SNOMED CT and LOINC may appear together in a hospital information architecture.
  3. Discuss the organizational and technical requirements for implementing a regional HIE.
  4. Analyse the dimensions of healthcare data quality and propose a monitoring programme.
  5. Explain why security, consent and provenance must be designed into API-based interoperability.

Analytical / Application Questions

  1. A hospital receives laboratory results with local test codes, missing units and inconsistent patient names. Design a phased remediation plan using terminology governance, MPI controls and interface validation.
  2. A manager proposes converting every SNOMED CT diagnosis directly into one ICD code for billing. Critically evaluate this proposal and recommend safeguards.
  3. An emergency department wants a FHIR application that retrieves records from several hospitals. Identify the required standards, identity controls, authorization mechanisms, workflow tests and measures of success.

Multiple Choice Questions with Answers

Question 1

Which standard is primarily designed for medical images and related imaging communication services?

A. LOINC

B. DICOM

C. ICD

D. SNOMED CT

Correct Answer: B. DICOM

Question 2

What does LOINC principally identify?

A. The result value of a laboratory test

B. The patient’s insurance entitlement

C. A laboratory or other observation concept

D. The legal basis for data exchange

Correct Answer: C. A laboratory or other observation concept

Question 3

Which statement best describes semantic interoperability?

A. Systems use the same network cable

B. Data are transmitted without encryption

C. The receiving system interprets exchanged data with the intended meaning

D. Users access a system with the same password

Correct Answer: C. The receiving system interprets exchanged data with the intended meaning

Question 4

Which HL7 standard is most directly associated with resource-oriented APIs?

A. FHIR

B. CDA

C. HL7 v2 only

D. DICOM

Correct Answer: A. FHIR

Question 5

What is a major danger of a false-positive patient match?

A. A record becomes temporarily unavailable for printing

B. Two different patients’ information may be merged

C. A laboratory unit is automatically converted

D. A FHIR resource becomes a DICOM object

Correct Answer: B. Two different patients’ information may be merged

Question 6

Which terminology is primarily a detailed clinical terminology rather than a disease classification?

A. SNOMED CT

B. ICD

C. A hospital charge master

D. A postal code set

Correct Answer: A. SNOMED CT

Question 7

Which item is essential when transmitting a laboratory result for safe interpretation?

A. Only the numerical value

B. The result without a timestamp

C. The test identity, value, unit and relevant context

D. The patient’s room color

Correct Answer: C. The test identity, value, unit and relevant context

Question 8

In a probabilistic matching model, what do field weights represent?

A. The storage size of each field

B. The relative importance of agreements or evidence

C. The number of hospital beds

D. The encryption key length only

Correct Answer: B. The relative importance of agreements or evidence

Question 9

Which HIE model allows an authorized participant to search for information held by another organization?

A. Query-based exchange

B. Manual filing exchange

C. Offline-only exchange

D. Unrestricted public exchange

Correct Answer: A. Query-based exchange

Question 10

Why are implementation guides important in FHIR projects?

A. They eliminate the need for patient identification

B. They define local constraints, profiles, value sets and exchange behavior

C. They replace all clinical terminology

D. They make security controls unnecessary

Correct Answer: B. They define local constraints, profiles, value sets and exchange behavior

Hospital Information Systems
Chapter 7 of 15