Loading field map
Health information systems (HIS) are the organized arrangements of people, data, procedures, and technologies that collect, store, manage, and use health-related information. The term spans both the computer-based systems that dominate contemporary practice and the broader institutional and policy frameworks that govern how health data flows through a healthcare system. A health information system is not merely a software product; it is the entire sociotechnical apparatus through which health data becomes usable knowledge for clinical care, administration, public health surveillance, and research.
The central questions of the field concern how to design, implement, govern, and evaluate these systems so that they serve their intended purposes without causing harm. These purposes are multiple and sometimes in tension. A system that serves a hospital billing department may frustrate clinicians; a national surveillance database may serve public health agencies but raise privacy concerns for patients. The field therefore studies not only the technical architecture of systems but also the human, organizational, and policy contexts in which they operate.
A health information system performs several distinct functions that are often combined in practice. The most visible is the electronic health record (EHR), which maintains a longitudinal, patient-centered record of clinical encounters, diagnoses, medications, laboratory results, and other health data. The EHR is the operational core of most modern clinical information systems, but it is only one component. Health information exchange (HIE) refers to the technical and governance arrangements that allow patient data to move securely between different organizations—hospitals, clinics, laboratories, pharmacies—so that a patient's record is not fragmented across unconnected silos. Public health information systems collect population-level data for disease surveillance, outbreak detection, vital statistics, and health program management. Administrative and financial systems handle billing, claims, insurance eligibility, and resource allocation. Clinical decision support systems (CDSS) embed rules, alerts, and recommendations into the clinical workflow, such as drug-interaction warnings or reminders for preventive care. Laboratory, pharmacy, and radiology information systems manage the workflows of specific departments and feed results into the broader record.
These components are not separate in practice. A modern hospital typically integrates them through an enterprise system, and a national health system may connect them through a national data infrastructure. The field's attention has shifted over time from the individual components to the interfaces between them: how data are standardized so that different systems can exchange it, how privacy and security are maintained across organizational boundaries, and how the data that flow through the system are governed.
The roots of health information systems lie in the mid-twentieth century, when hospitals and public health agencies began using punched-card tabulation and early computers for administrative tasks such as patient registration, billing, and epidemiological tabulation. These early uses were not "health information systems" in the modern sense; they were data-processing applications applied to health data. The term and the concept emerged gradually as computing became more capable and as the idea of a comprehensive, integrated record of patient care gained traction.
The 1960s and 1970s saw the first experimental hospital information systems, developed at academic medical centers. These systems were expensive, limited to mainframe computers, and often custom-built for a single institution. They demonstrated the technical feasibility of computer-based patient records but did not spread widely. The 1980s and 1990s brought microcomputers, which lowered costs and allowed departmental systems to proliferate. This period also saw the rise of standards such as HL7 for clinical messaging and ICD coding for diagnoses, which addressed the growing need for interoperability between systems. The internet and web technologies in the 1990s enabled broader data sharing and the first patient-facing portals.
The modern era of health information systems began in the 2000s, when several countries launched national programs to promote EHR adoption. The United States, for example, enacted financial incentives for "meaningful use" of EHRs in 2009, which accelerated adoption dramatically. Other countries pursued national health data infrastructures, such as the National Health Service's care records in the United Kingdom and the national e-health systems in Denmark, Estonia, and elsewhere. This period also saw the rise of large-scale health data analytics, the integration of genomic data into clinical records, and the emergence of mobile health applications that generate patient-generated health data. The field has moved from a focus on digitizing existing paper processes to a focus on using data to transform care delivery, population health management, and research.
The field of health information systems is not organized around a single paradigm but rather around several distinct traditions that address different problems and draw on different intellectual foundations. These traditions coexist and often overlap, and a given system or research program may draw on several of them.
The oldest and most continuous tradition treats health information systems as a technical design problem. Its practitioners are computer scientists, software engineers, and informaticians who focus on system architecture, data modeling, interoperability standards, security, and usability. The organizing assumption is that the primary challenges are technical: how to represent health data in a computable form, how to ensure that different systems can exchange data reliably, and how to build systems that are fast, secure, and reliable.
This approach has produced the core technical infrastructure of the field: the HL7 messaging standards, the Fast Healthcare Interoperability Resources (FHIR) standard, the Systematized Nomenclature of Medicine (SNOMED CT) and other clinical terminologies, and the reference architectures for EHRs and health information exchanges. Its methods are those of software engineering and computer science: requirements analysis, system design, testing, and evaluation. Its limits are that it tends to treat the organization and the human user as external constraints rather than as the central object of study. A technically sound system can fail in practice if it does not fit the workflow of clinicians, if it is not accepted by users, or if it disrupts organizational routines.
A second tradition, which emerged in the 1980s and 1990s, argues that the technical approach is insufficient because health information systems are fundamentally social and organizational systems. This tradition draws on sociology, organizational theory, and human-computer interaction. Its central claim is that the success or failure of a health information system depends less on the quality of the technology than on the fit between the technology and the social and organizational context in which it is used.
The sociotechnical approach studies how clinicians actually use systems, how information systems change the division of labor and power within healthcare organizations, and how the introduction of a system can have unintended consequences. It emphasizes that the "system" includes not just the software but also the people, the procedures, the training, and the organizational culture. Its methods are qualitative and mixed-methods: ethnographic observation, interviews, workflow analysis, and participatory design. Its influential contribution has been to explain why many well-engineered systems fail in practice and to provide design principles that involve users in the design process and adapt the system to the organization rather than the reverse.
A third tradition focuses on the information itself: how health data can be structured, analyzed, and used to generate knowledge. This tradition is closely aligned with the discipline of health informatics, which studies the use of information and communication technologies in health care. Its focus is on the data model, the quality of the data, and the analytical methods that can extract meaning from the data.
This tradition has become increasingly prominent with the growth of large-scale health data, including EHR data, claims data, and genomic data. Its methods include data mining, machine learning, natural language processing, and statistical analysis. It addresses questions such as how to identify patients at risk of a disease, how to predict outcomes, and how to use data to improve the quality of care. Its limits are that it tends to treat the data as given, and it can underestimate the problems of data quality, bias, and the gap between what data represent and the reality of clinical care. The data in an EHR are not a neutral record of what happened; they are a product of the system and the people who entered them, and they reflect the incentives, workflows, and limitations of the system.
A fourth tradition focuses on the use of information systems for population health, rather than individual patient care. This tradition has its roots in public health surveillance, vital statistics, and epidemiology. It addresses the question of how to collect, aggregate, and analyze data across populations to detect outbreaks, monitor the health of communities, and evaluate public health programs.
This approach has its own institutional forms: national disease registries, immunization information systems, vital registration systems, and public health surveillance networks. It has its own standards and methods, which are often different from those of clinical systems. The public health approach is concerned with the completeness and timeliness of reporting, with the ability to link data across sources, and with the governance of data at the national and international level. Its limits include the difficulty of integrating population-level data with clinical data, and the tension between the public health need for data and the privacy rights of individuals.
These four traditions are not mutually exclusive, and in practice they overlap. A national health information system is a technical achievement, a sociotechnical intervention, a data resource, and a public health instrument. A single project may draw on all four traditions. The engineering approach provides the technical infrastructure; the sociotechnical approach informs the design and implementation; the health informatics approach provides the analytical methods; and the public health approach defines the population-level goals.
The field is also characterized by a persistent tension between the clinical and the administrative uses of information. A health information system serves both the clinical goal of caring for a patient and the administrative goals of billing, compliance, and management. These goals are not always aligned. The system may be designed to maximize billing revenue, which can lead to over-documentation or upcoding; or it may be designed to support clinical decision-making, which may require a different kind of data entry and display. The field has struggled to balance these goals, and the design of a system often reflects the relative power of clinical and administrative interests within an organization.
The current landscape of health information systems is shaped by several durable features. First, the EHR is now the norm in most high-income countries, and the focus has shifted from adoption to optimization and to the use of the data for secondary purposes. Second, interoperability remains a central challenge. Despite decades of standards development, the exchange of data across organizations is still difficult, and the field continues to work on technical, semantic, and governance solutions. Third, the rise of large-scale data analytics and artificial intelligence has created new opportunities and new challenges. The data in health information systems are now a resource for research, quality improvement, and public health, but the quality and completeness of the data are often inadequate for these purposes.
Fourth, the governance of health information has become a major policy issue. The collection and use of health data raise questions of privacy, consent, security, and equity. The field has developed governance frameworks, such as data protection regulations and data sharing agreements, but these are still evolving. Fifth, the field is increasingly global. Low- and middle-income countries are developing their own health information systems, often with support from international organizations, and the challenges of these settings—limited infrastructure, limited resources, and a different disease burden—are different from those of high-income countries.
The field of health information systems is thus a mature but still evolving discipline. It is not a single method or a single theory but a set of practices and traditions that address the common problem of how to make health information useful. The field's central challenge is that the information system is not a neutral tool but an active participant in the healthcare system: it shapes what data are collected, how they are interpreted, and how they are used. The field's future will be shaped by how well it can design systems that serve the multiple, sometimes conflicting, purposes of health care.