Health Information Exchanges (HIE): Your Complete Guide
What should I know about health information exchange (hie): how your records move between providers?
Learn how Health Information Exchanges work, how to access your records through HIEs, opt-out options, privacy protections, and find your state or regional HIE.
Your records move between providers whether you know it or not. HIEs are the electronic networks that make it happen. Here is how they work, what they share, and how to control your participation.
What Is a Health Information Exchange?
A Health Information Exchange (HIE) is an electronic system that allows different healthcare organizations — hospitals, doctors' offices, labs, pharmacies, and health plans — to securely share patient medical information.
Before HIEs, if you visited an emergency room while traveling, doctors had no way to access your medical history, medications, or allergies from your regular providers. You might undergo duplicate tests or receive medications that interact badly with drugs you were already taking.
HIEs solve this by creating a network where authorized providers can instantly access relevant parts of your medical record, no matter where you originally received care.
Real-World Example
A patient collapses at a conference 500 miles from home and is rushed to a local ER. Through the regional HIE, the ER physician instantly sees the patient's medication list, penicillin allergy, and recent cardiac history from their home hospital — information that guides life-saving treatment decisions in the first critical minutes.
Benefits for Patients
- ✓Better coordinated care across providers
- ✓Fewer duplicate tests and procedures
- ✓Reduced medical errors from missing info
- ✓Emergency access to critical health data
- ✓Faster referrals and care transitions
- ✓Patient portal access to aggregated records
Benefits for Healthcare System
- ✓Reduced healthcare costs
- ✓Improved public health surveillance
- ✓Better chronic disease management
- ✓Streamlined referrals and transitions
- ✓Quality measurement and reporting
- ✓Clinical research capabilities
How Health Information Exchanges Work
Data Collection
Healthcare providers who participate in an HIE send electronic copies of patient records to the exchange. This happens automatically when records are created or updated in the provider's Electronic Health Record (EHR) system.
Patient Matching
The HIE uses algorithms to match records from different sources to the correct patient. This involves matching names, dates of birth, addresses, and other identifiers to create a unified patient record.
Secure Storage
Records are stored using encryption and other security measures required by HIPAA. Access is controlled through authentication, authorization, and full audit logging.
Authorized Access
When an authorized healthcare provider needs information about a patient, they query the HIE. The system verifies their authorization and returns relevant records. Access is logged for auditing and patient review.
TEFCA: National Health Information Network
The Trusted Exchange Framework and Common Agreement (TEFCA) is a federal initiative to create nationwide health information exchange. Once fully implemented, TEFCA will allow HIEs across the country to share information with each other, enabling truly nationwide interoperability.
Types of Health Information Exchange
Three main types of electronic health information exchange serve different purposes:
Directed Exchange
Secure, point-to-point transmission of health information between known, trusted parties. Think of it as a secure email with attachments.
Example: Your primary care doctor sends a referral with your medical history directly to a specialist. Or a hospital sends your discharge summary to your doctor when you're released.
- • Referrals between providers
- • Care transitions (hospital to home care)
- • Lab results delivery
- • Prescription transmission to pharmacies
Query-Based Exchange
Allows providers to search for and retrieve patient information from other organizations as needed, typically in unplanned care situations.
Example: An emergency room physician queries the regional HIE to find your medication list, allergies, and recent test results from any participating provider.
- • Emergency department visits
- • Urgent care situations
- • New patient intake
- • Checking for recent tests before ordering duplicates
Consumer-Mediated Exchange
Patients control their own health information, deciding what to share with which providers through patient portals or personal health records.
Example: You use the HIE's patient portal to download your complete medical record, then upload selected portions to share with a new doctor or specialist.
- • Personal health record management
- • Sharing records with new providers
- • Health app integrations
- • Family caregiver access
Accessing Your Records Through an HIE
Many HIEs now offer patient portals where you can view records from multiple providers in one place. Here is how to get access:
Identify Your HIE
Find out which HIE(s) your healthcare providers participate in. Ask your doctor's office or hospital, or search for your state's designated HIE.
Check for Patient Portal
Visit the HIE's website to see if they offer patient access. Many have launched patient portals, mobile apps, or connections to third-party apps like Apple Health Records.
Verify Your Identity
You will need to complete identity verification, which may include answering security questions, providing ID documents, or in-person verification at a participating provider.
Access Your Records
Once verified, you can view your aggregated health information from all participating providers. You may also be able to download records, share with new providers, or grant access to family caregivers.
Connect via Health Apps
Apple Health Records, CommonHealth (Android), and other apps can connect directly to many HIEs and healthcare providers. Check if your HIE supports these connections for convenient mobile access to your health information.
Your Right to Opt Out of HIEs
Most HIEs operate on an "opt-out" basis — your information is shared by default unless you specifically request otherwise. You have the right to choose whether your records are included in health information exchange.
Reasons to Participate
- +Emergency providers can access critical information
- +Better care coordination across providers
- +Fewer duplicate tests and procedures
- +Faster referrals and transitions
- +Patient portal access to all records
Reasons to Opt Out
- −Maximum privacy control over records
- −Concerns about sensitive information
- −Worry about data breaches
- −Past medical identity theft
- −Preference for in-person record sharing
How to Opt Out
- 1.Contact your HIE directly — Most HIEs have opt-out forms on their websites or accept written requests.
- 2.Ask your healthcare provider — Many providers can process opt-out requests on your behalf.
- 3.Submit in writing — Keep a copy of your opt-out request and any confirmation you receive.
- 4.Verify completion — Follow up to confirm your opt-out was processed. You can opt back in at any time.
Important Considerations
- • Opting out typically only affects future sharing; records already exchanged may remain
- • Emergency providers may still be able to access critical information in life-threatening situations
- • You may need to opt out separately from each HIE your providers use
- • Opting out doesn't prevent direct provider-to-provider communication
Find Your State or Regional HIE
Most states have at least one designated HIE. Many regions have additional local exchanges. Here is how to find the HIE in your area:
Option 1: Ask Your Healthcare Provider
Your doctor's office, hospital, or clinic can tell you which HIE(s) they participate in and how to access your records or opt out.
Option 2: Search by State
Use the ONC's Health IT Dashboard or search "[Your State] Health Information Exchange" to find your state-designated HIE.
Note: Many states have multiple regional HIEs in addition to (or instead of) a statewide exchange.
Option 3: National Networks
Several national networks connect regional HIEs:
- eHealth Exchange — Largest public-private HIE network
- Carequality — Interoperability framework connecting many EHRs
- CommonWell Health Alliance — Vendor-based health data network
- TEFCA QHINs — New national network framework (expanding)
Major State/Regional HIEs
- • California: Manifest MedEx
- • New York: SHIN-NY, Healthix
- • Texas: Texas Health Services Authority
- • Florida: Florida HIE
- • Massachusetts: Mass HIway
- • Pennsylvania: PA eHealth
- • Illinois: Illinois HIE
- • Ohio: CliniSync
- • Michigan: MiHIN
- • Washington: OneHealthPort
- • Colorado: CORHIO
- • Indiana: Indiana HIE
Privacy and Security Protections
HIEs must implement strong privacy and security measures under HIPAA and often additional state regulations.
Security Measures
- 🔐Encryption of data in transit and at rest
- 🔑Strong authentication for provider access
- 📋Role-based access controls
- 📊Full audit logging
- 🛡️Regular security assessments
- 🚨Breach detection and notification
Your Rights
- ✓Request audit logs showing who accessed your records
- ✓Opt out of HIE participation
- ✓Access your own records through patient portal
- ✓File complaints about privacy violations
- ✓Request corrections to inaccurate information
- ✓Receive breach notification
Frequently Asked Questions
What is a Health Information Exchange (HIE)?
A Health Information Exchange (HIE) is an electronic system that allows healthcare providers, hospitals, and other authorized parties to securely share patient medical records across different organizations. HIEs enable your doctor to access your records from other providers instantly, improving care coordination and reducing duplicate tests.
How do I access my records through an HIE?
Many HIEs offer patient portals where you can view your aggregated health records from multiple providers. Contact your state or regional HIE directly, or ask your healthcare provider if they participate in an HIE with patient access. Some HIEs connect to apps like Apple Health Records.
Can I opt out of an HIE?
In most cases, yes. Most HIEs allow you to opt out of having your records shared electronically. Contact your state or regional HIE or your healthcare provider to request opt-out. Opting out may mean providers can't see your complete medical history in emergencies.
Is my health information safe in an HIE?
HIEs are required to comply with HIPAA security and privacy rules. They use encryption, access controls, audit logs, and other safeguards. No system is 100% secure. You have the right to review audit logs showing who accessed your records through the HIE.
What information is shared through an HIE?
HIEs typically share clinical summaries, lab results, medication lists, allergy information, immunization records, radiology reports, and discharge summaries. Sensitive information like HIV status, mental health records, and substance abuse treatment may require additional consent depending on state law.
How do I find my state's HIE?
Search for "[your state] health information exchange" or ask your healthcare provider which HIE they participate in. Many states have multiple regional HIEs in addition to statewide networks.
Do all doctors participate in HIEs?
No. Large health systems and hospitals often participate, while smaller practices may not. Participation depends on cost, technical capability, and regional HIE availability. Ask your providers directly if they participate in health information exchange.
Related Guides
Connected research
Related Content
Understanding Your HIPAA Rights
Know your 8 core rights under HIPAA including access to records and privacy protections.
HIPAA Accounting of Disclosures
Learn how to request a list of everyone who has accessed your medical records.
Who Can Access Your Records
Understand who is authorized to view your medical information without your permission.
Medical Identity Theft
Protect yourself from medical identity theft and learn how to recover if it happens.
Take Control of Your Health Information
Request copies of your medical records to see what is in them and verify accuracy.