Healthcare Data Should Follow the Patient
Key Takeaways
- →95% of U.S. office-based physicians use an EHR — yet patients still manually carry information between organizations that already operate sophisticated electronic systems.
- →70% of hospitals can send, find, receive, and integrate outside information at least sometimes. Only 42% report that clinicians often use outside records when treating patients.
- →77% of individuals were offered online access to their records in 2024. 59% have multiple separate portals. Only 7% use an app to combine them.
- →Only 8% of hospitals routinely receive electronic summaries from long-term and post-acute care providers. The figure is 7% for behavioral health.
- →HIPAA gives patients rights to access and correct records — it does not establish universal patient ownership of every record held by a provider or health plan.
- →AI can help staff locate information and flag inconsistencies — but only when source data is dependable, workflows are integrated, and human oversight is maintained.
- →The starting point for payers and providers: follow a specific patient journey and identify exactly where information stops moving.
A patient leaves the hospital with a changed medication, sees a specialist two weeks later, and calls their health plan about a bill. The hospital, specialist, pharmacy, and health plan each hold part of that person's history. The patient may still have to explain what happened at every step.
In AI in the Health Care Industry: Driving Efficiency and Better Patient Experiences, Harvard Business Review Analytic Services describes how clinical, financial, and operational information often sits in separate systems. Staff bridge the gaps with calls, emails, spreadsheets, and repeated data entry. The resulting work affects claims, prior authorizations, scheduling, and patient support.
95%
Physicians using EHRs
U.S. office-based physicians, 2024 (ONC)
42%
Hospitals where clinicians often use outside records
Despite 71% having the data available electronically
7%
Patients combining portals with one app
59% have multiple separate portals (ONC 2024)
Electronic records have not solved the handoff
In 2024, 95% of U.S. office-based physicians used an electronic health record. Hospitals have also made progress exchanging information. In 2023, 70% of non-federal acute care hospitals reported that they could send, find, receive, and integrate outside information at least sometimes. 43% did all four routinely.
Availability does not guarantee use. The gap between having data and acting on it is where the operating problem lives.
Hospital electronic information exchange — 2023
Non-federal acute care hospitals (ONC)
The gap between availability (71%) and use (42%) is where the operating problem lives.
Source: ONC, “Interoperable Exchange of Patient Health Information Among U.S. Hospitals: 2023.”
The HBR report helps explain the gap. Information may be dispersed across systems, stored in formats that are difficult to search, or maintained through manual processes. A record that arrives but requires someone to hunt for it may do little to improve the next decision.
The problem becomes more visible when care crosses organizational boundaries. Patients and caregivers often carry information across those boundaries themselves.
Patients can access more records, but still have to piece them together
Patient access has improved. In a 2024 federal survey, 77% of individuals reported being offered online access to their medical records by a healthcare provider or insurer. 65% had accessed a record or patient portal at least once in the previous year.
Patient portal access and use — 2024
Federal survey of individuals (ONC)
Several portals can each provide accurate information while leaving the patient without a clear account of their care.
Source: ONC, “Individuals’ Access and Use of Patient Portals and Smartphone Health Apps, 2024,” published July 2025.
Which medication list is current? Did the specialist receive the hospital result? Does the health plan have the documentation needed to answer a coverage question? Those are questions patients and staff encounter during ordinary care.
Where information stops moving — the typical patient journey
Primary Care
Has records
Specialist
Partial records
Imaging Center
Separate system
Hospital
Separate system
Pharmacy
Separate system
Health Plan
Claims only
The patient is the integration layer. They repeat their medication list, log into multiple portals, request records, and carry information across organizational boundaries that already operate sophisticated electronic systems.
Connection has to improve the work itself
The HBR report offers examples of what better-connected information could support. Interviewees discuss easier access to coverage information, identifying patients who need outreach, using appointment capacity more effectively, and reducing manual work in revenue cycle processes.
CDPHP Health Plan
Coverage accessPiloted a tool to help people query contract information for answers about coverage and costs — reducing calls and manual lookups for staff and members alike.
Northwell Health
Data governanceBrought information from different systems together and gave local teams responsibility for keeping certain data current. A practice may know about a change affecting patients before a central technology team does.
The operational starting point
For payers and providers, the starting point should be a specific journey: a hospital discharge, specialist referral, or prior authorization request. Follow where information stops moving. Identify the calls, duplicate entries, missing documents, and requests that fall back on the patient.
Patients should have a stronger claim to their information
At VHealth, we support patient ownership of medical information as an operating principle. People should be able to see their information, understand it, request corrections, and take it with them when they change providers or health plans.
What HIPAA actually provides — and what it does not
HIPAA does provide
- ✓Right to inspect health information
- ✓Right to obtain copies of records
- ✓Right to request corrections
- ✓Right to direct transmission in many circumstances
HIPAA does not establish
- ✕Universal patient ownership of every record
- ✕One rule covering all providers and plans
- ✕Automatic portability across all systems
- ✕Protection when data moves to third-party apps
Stronger patient control should be visible in how the system works — not just in what the law technically permits.
Source: U.S. Department of Health and Human Services, “Get it. Check it. Use it.” hhs.gov
Use technology with accountable oversight
In 2024, nine in ten hospitals reported bringing data from third-party technology into their electronic health records for at least one clinical purpose. Much of that exchange still used proprietary connections rather than standards-based APIs. The Trusted Exchange Framework and Common Agreement (TEFCA) is one effort to support secure exchange across networks, including patient access.
Hospital third-party data integration — 2024
Non-federal acute care hospitals (ONC)
Source: ONC, “Hospital Use of APIs to Enable Data Sharing between EHRs and Third-Party Technology,” 2024. TEFCA figure is approximate.
Artificial intelligence can help staff locate information, organize records, and flag inconsistencies. The HBR report repeatedly returns to the conditions for using it responsibly: dependable source data, integration into the work people already do, testing, ongoing monitoring, and human review. It also cautions against buying technology before defining the problem it should solve.
Conditions for responsible AI use in healthcare data workflows
Dependable source data
AI cannot compensate for fragmented or inaccurate underlying records.
Workflow integration
Tools must appear where people already work — not as separate systems to check.
Testing before deployment
Validate against real clinical and operational scenarios before broad rollout.
Ongoing monitoring
Performance can degrade as data patterns change. Monitoring is not optional.
Human review
Consequential decisions require a person in the loop, not just an audit trail.
Problem-first design
Define the specific workflow problem before selecting or buying technology.
Source: Harvard Business Review Analytic Services, “AI in the Health Care Industry,” June 2024.
Measure what actually changed for patients and staff
A payer or provider can measure progress without claiming a complete view of every patient. The right measures bring the work back to its purpose.
Did staff spend less time searching for outside records?
Were fewer documents requested twice?
Did a discharge summary reach the next care team?
Could the patient see and share the same relevant information?
Did the prior authorization request move electronically?
Was the outside record available before the appointment started?
Healthcare holds a great deal of data. Patients need access to their own history, and the organizations caring for them need reliable information when they make a decision. The operating problem is not a shortage of data — it is a shortage of data that moves to the right place at the right time.
Frequently asked questions
Why do patients still have to repeat their medical history at every appointment?
Despite near-universal EHR adoption, clinical information often sits in separate systems that do not routinely exchange data. 71% of hospitals report having outside clinical information available electronically, but only 42% report that clinicians often use it.
What percentage of U.S. physicians use electronic health records?
In 2024, 95% of U.S. office-based physicians used an electronic health record, according to the Office of the National Coordinator for Health Information Technology (ONC).
Can patients access their own medical records online?
Yes. In 2024, 77% of individuals reported being offered online access to their medical records. 65% had accessed a portal at least once in the previous year. However, 59% have multiple separate portals, and only 7% use an app to combine them.
Does HIPAA give patients ownership of their medical records?
HIPAA gives patients rights to see and obtain copies of much of their health information and to request corrections. It does not establish one universal rule declaring that patients legally own every record held by a provider or health plan.
What is TEFCA and how does it help patients?
The Trusted Exchange Framework and Common Agreement (TEFCA) establishes a common national governance and technical framework for health information networks to exchange electronic health information securely, including Individual Access Services that allow patients to access their own records.
What is the HBR Salesforce healthcare AI report?
Harvard Business Review Analytic Services published 'AI in the Health Care Industry: Driving Efficiency and Better Patient Experiences' in June 2024, sponsored by Salesforce. The report describes how clinical, financial, and operational information often sits in separate systems and what better-connected information could support.
Sources
- 1.Harvard Business Review Analytic Services. 'AI in the Health Care Industry: Driving Efficiency and Better Patient Experiences.' Salesforce-sponsored white paper, June 21, 2024. hbr.org
- 2.ONC. 'Office-based Physician Electronic Health Record Adoption,' 2024 data. healthit.gov
- 3.ONC. 'Interoperable Exchange of Patient Health Information Among U.S. Hospitals: 2023.' healthit.gov
- 4.ONC. 'Individuals' Access and Use of Patient Portals and Smartphone Health Apps, 2024,' published July 2025. healthit.gov
- 5.U.S. Department of Health and Human Services. 'Get it. Check it. Use it.' HIPAA patient rights guidance. hhs.gov
- 6.ONC. 'Hospital Use of APIs to Enable Data Sharing between EHRs and Third-Party Technology,' 2024. healthit.gov
- 7.ONC. Trusted Exchange Framework and Common Agreement (TEFCA). healthit.gov
Get new VHealth insights in your inbox
Operations, compliance, AI implementation. No noise.
Admin — Notify Subscribers
Enter admin password to send notifications.