HIPAA Times news | Concise, reliable news and insights on HIPAA compliance and regulations

The issue with EHR vendor lock-in

Written by Kirsten Peremore | Dec 12, 2024 11:07:50 PM

When an Electronic health record (EHR) system is not flexible or interoperable with other tools, healthcare providers can have difficulty sharing data. Updated systems can be helpful to avoid administrative burdens and integrate EHRs with other software, like HIPAA compliant email platforms. 

 

What is EHR vendor lock-in? 

EHR vendor lock-in occurs when a healthcare provider is overly reliant on a specific vendor's EHR system. The reliance usually happens because the system has unique features or contracts that make it hard to connect with other systems or switch to a different vendor.

A Journal of Cloud Computing: Advances, Systems, and Applications study notes, “The lock-in issue arises when a company, for instance, decides to change cloud providers... but is unable to move applications or data across different cloud services because the semantics of resources and services of cloud providers do not match with each other.”

While lock-ins can initially provide benefits like integration within a single system, it presents mostly challenges. These challenges present a lack of flexibility and barriers to data sharing with external providers.

 

Why do EHR vendor lock-ins occur

Many EHR vendors use proprietary software that creates closed ecosystems making it hard to exchange data with competing platforms. The lack of interoperability often forces organizations to turn to the vendor's other software offerings to improve data sharing. 

These EHR systems are also often expensive to purchase and with staff training costs, organizations can’t easily switch platforms. This leads to organizations working around difficult-to-use systems instead of turning to more compatible competitors.

 

The problem with EHR vendor lock-in 

  • Lock-ins make it expensive and time-consuming to change systems 
  • It reduces competition amongst EHR platforms and drives up costs 
  • Data sharing between providers becomes difficult
  • It hinders the adoption of new and innovative technologies
  • Contracts often restrict data portability and ownership
  • It complicates integration with external healthcare providers and legacy systems 

 

How to avoid EHR vendor lock-in

  1. Select EHR systems that prioritize open standards of compatibility with other technology and platforms. This practice avoids the use of proprietary software and provides the organization with greater control over workflows and data handling practices.
  2. Before committing to an EHR vendor, it is necessary to review the contractual terms to look for clauses related to data ownership and exit strategies. Legal counsel should be engaged for this step. 
  3. Organizations should inquire about the vendor's policies regarding data portability. The purpose of this is to make sure data can be easily expired in standard formats without incurring excessive fees. 
  4. From the outset of the relationship with an EHR vendor, organizations should formulate a clear exit strategy. 

 

FAQs 

What is the HITECH Act? 

The Health Information Technology for Economic and Clinical Health Act is a U.S. law enacted in 2009 to promote the adoption of electronic health records and improve the privacy and security of health information. 

 

What are hybrid solutions to data sharing? 

Hybrid solutions to data sharing refer to the approaches used to combine both on-premises and cloud-based resources allowing for the best of both environments for more flexible data management.