On-Kare
    Log inDemo
    Back to Blog
    Practice Management

    Interoperability Revolution: HL7 FHIR R5 and the Future of Health Data Exchange

    How the latest FHIR standard, SMART on FHIR apps, and the European Health Data Space are dismantling healthcare's data silos and enabling truly connected care.

    Erwan Deschamps

    Co-Founder & CTO

    Health-tech architect specializing in AI-driven clinical systems, interoperability standards, and cybersecurity.

    Published June 10, 2025Updated November 20, 20259 min read2,050 words

    The Interoperability Imperative

    Healthcare remains one of the last major industries where critical data is routinely trapped in incompatible systems. A 2024 HIMSS survey found that 73% of healthcare organizations still struggle with fragmented patient records across multiple platforms, and the average hospital maintains over 16 distinct electronic health record (EHR) integrations. The human cost is staggering: the ONC estimates that failures in health information exchange contribute to approximately 80% of serious medical errors, while redundant testing driven by inaccessible records costs the U.S. healthcare system an estimated $45 billion annually.

    Regulatory momentum is now forcing the industry's hand. The 21st Century Cures Act's interoperability provisions, enforced since 2023, explicitly prohibit information blocking and mandate standardized API access to electronic health information. In Europe, the European Health Data Space (EHDS) regulation, adopted in 2024, establishes a legal framework requiring all member states to implement interoperable health data infrastructure by 2028. These are not aspirational guidelines; they carry enforcement mechanisms and financial penalties.

    For healthcare technology vendors and practice managers, the message is clear: interoperability is no longer a competitive differentiator but a regulatory baseline. Platforms that cannot demonstrate standards-based data exchange will face increasing market exclusion, compliance risk, and ultimately, clinical liability.

    What's New in FHIR R5

    FHIR R5, released as a full normative standard by HL7 International in 2024, represents the most significant evolution of the Fast Healthcare Interoperability Resources specification since its inception. While FHIR R4 established the resource-based paradigm that replaced legacy HL7 v2 messaging for modern implementations, R5 addresses the real-world pain points that emerged from large-scale R4 deployments.

    The most impactful addition is the topic-based subscription framework. Previous FHIR versions relied on polling or rudimentary subscription models that scaled poorly. R5 introduces SubscriptionTopic resources that define precise triggering events, combined with channel-agnostic notification delivery supporting REST hooks, WebSockets, email, and messaging queues. This enables true event-driven architectures where downstream systems react to clinical events in near real-time rather than batch-polling for changes.

    Clinical reasoning resources have been substantially expanded. The PlanDefinition and ActivityDefinition resources now support complex branching logic, enabling sophisticated clinical decision support (CDS) workflows to be encoded directly as shareable FHIR resources. New workflow resources, including the refined Task and Transport resources, provide standardized patterns for care coordination across organizational boundaries.

    R5 also introduces improved provenance tracking, enhanced support for genomic data through the MolecularSequence resource, and a more mature evidence-based medicine resource set. For implementations still on R4, HL7 provides detailed migration guides, but the architectural advantages of R5's subscription and workflow models make migration a strategic priority.

    SMART on FHIR: Building the App Ecosystem

    The SMART (Substitutable Medical Applications, Reusable Technologies) on FHIR framework has transformed how clinical applications are developed, distributed, and launched within EHR environments. By combining FHIR's data model with OAuth 2.0 authorization and OpenID Connect authentication, SMART on FHIR provides a standardized app launch protocol that allows third-party applications to be embedded directly within a clinician's existing workflow.

    The practical impact is profound. A specialist developing a dermatology image analysis tool no longer needs to build custom integrations for every EHR vendor. Instead, a single SMART on FHIR app can launch within Epic, Cerner, or any compliant system, receiving a FHIR access token scoped to the current patient context. The SMART App Gallery already lists over 200 certified applications spanning clinical decision support, patient engagement, genomics, and administrative functions.

    SMART's Backend Services specification further extends the model to server-to-server communication, enabling population health analytics, quality reporting, and bulk data extraction without user interaction. Combined with the Bulk FHIR specification, organizations can export entire patient cohorts in NDJSON format for research, auditing, or machine learning pipelines.

    For healthcare platforms, supporting SMART on FHIR is increasingly non-negotiable. The ONC's certification criteria now require SMART app launch capabilities, and payers are beginning to mandate SMART-compliant member access APIs under the CMS Interoperability and Patient Access Final Rule.

    Cross-Border Health Data: EU and Beyond

    The European Health Data Space regulation represents the most ambitious cross-border health data initiative ever undertaken. Encompassing all 27 EU member states, the EHDS establishes two primary use cases: primary use, granting citizens electronic access to their health data across borders, and secondary use, enabling researchers, regulators, and policymakers to access anonymized health datasets through authorized Health Data Access Bodies.

    The technical backbone of the EHDS is built on existing standards including HL7 FHIR, the International Patient Summary (IPS), and the European Electronic Health Record Exchange Format (EEHRxF). By mandating IPS compliance, the regulation ensures that a patient visiting a hospital in Barcelona can have their medication list, allergies, and active conditions from a Berlin clinic rendered in a locally comprehensible format, all within seconds.

    Beyond Europe, similar initiatives are accelerating. The Global Digital Health Partnership, representing over 30 countries, has endorsed FHIR-based exchange profiles. Australia's My Health Record, South Korea's Health Information Exchange, and Canada's pan-Canadian Health Data Strategy all incorporate FHIR as a foundational standard. The Trusted Exchange Framework and Common Agreement (TEFCA) in the United States, while domestically focused, adopts interoperability principles that align with international standards.

    For multinational healthcare platforms, designing for cross-border data exchange from the outset avoids costly retrofitting. Adopting IPS profiles, supporting multilingual terminology services through SNOMED CT and ICD-11, and implementing consent management frameworks aligned with both GDPR and HIPAA are no longer aspirational targets but practical requirements for any platform operating across jurisdictions.

    API-First Architecture for Modern Healthcare

    The shift from monolithic EHR systems to API-first, microservices-based architectures is reshaping healthcare technology infrastructure. An API-first approach means that every capability, whether scheduling, prescribing, lab ordering, or billing, is designed as an independently deployable service exposing well-documented RESTful or GraphQL endpoints. FHIR serves as the lingua franca for clinical data exchange, while domain-specific APIs handle operational workflows.

    Event-driven architecture (EDA) complements this model by decoupling services through asynchronous messaging. When a lab result is filed, an event is published to a message broker such as Apache Kafka or cloud-native equivalents. Subscribers, whether a notification service, a clinical decision support engine, or a billing module, consume and act on the event independently. This pattern, combined with FHIR R5's subscription framework, enables real-time clinical workflows that were previously impossible with batch-oriented integration engines.

    Modern healthcare platforms are also embracing API gateways with built-in rate limiting, versioning, and consent enforcement. Every API call passes through authorization layers that verify not only user identity but also data-sharing consent aligned with regulatory requirements. Observability tooling, including distributed tracing and API analytics, provides visibility into data flows that was absent in legacy point-to-point integration.

    The benefits are measurable. Organizations adopting API-first healthcare architectures report 60% faster integration timelines with new partners, 40% reduction in maintenance overhead compared to interface engine-based approaches, and significantly improved developer experience. For On-Kare and similar platforms, this architecture enables rapid feature delivery while maintaining the compliance posture that healthcare demands.

    2,156 clinical and operational capabilities. One single platform.

    8 business domains, 25 specialties, 7 care settings and 343 AI-augmented capabilities — without stacking more software.

    See the coverage