This glossary explains key terminology used across Healthcare technology, including clinical systems, interoperability, data standards, privacy, cybersecurity, digital health regulation, and informatics. It helps executives and practitioners navigate the platforms, controls, credentials, and exchange frameworks central to the Health IT Practice.
A B C D E F G H I L M N O P Q R S T U V W X
| A | |
| ADT | Admission, Discharge, and Transfer: A category of messages and events used to communicate patient identity, location, and encounter changes among clinical and administrative systems. |
| AHIMA | American Health Information Management Association: A professional association that develops health information management guidance, credentials, and resources covering data quality, coding, privacy, and information governance. |
| AI | Artificial Intelligence: Software techniques that perform tasks such as prediction, classification, summarization, and decision support using clinical, administrative, or operational data. |
| AMIA | American Medical Informatics Association: A professional organization for biomedical and health informatics specialists working with clinical data, analytics, research, and technology-enabled care. |
| API | Application Programming Interface: A defined mechanism through which software applications exchange data or invoke functions. Modern interoperability programs rely on standardized interfaces to provide secure access to health information. |
| ASTP/ONC | Assistant Secretary for Technology Policy/Office of the National Coordinator for Health Information Technology: The U.S. Department of Health and Human Services office responsible for national health technology policy, interoperability, certification, and information-sharing initiatives. |
| ATNA | Audit Trail and Node Authentication: An Integrating the Healthcare Enterprise security profile that specifies authenticated communications, audit logging, and coordinated time requirements for connected healthcare systems. |
| B | |
| BAA | Business Associate Agreement: A HIPAA-required contract defining how a vendor or other business associate may create, receive, maintain, or transmit protected health information on behalf of a covered entity. |
| BCMA | Bar Code Medication Administration: A clinical safety workflow that verifies the patient and medication by scanning bar codes at the point of administration and recording the result electronically. |
| BPPC | Basic Patient Privacy Consents: An Integrating the Healthcare Enterprise profile for recording patient privacy consent documents and associating them with information exchanged between organizations. |
| C | |
| CAHIMS | Certified Associate in Healthcare Information and Management Systems: A HIMSS credential demonstrating foundational knowledge of healthcare environments, technology systems, and information management. |
| CAQH CORE | Council for Affordable Quality Healthcare Committee on Operating Rules for Information Exchange: An industry initiative that develops operating rules to make electronic healthcare administrative transactions more consistent, predictable, and efficient. |
| CARIN | Creating Access to Real-time Information Now: A multi-stakeholder alliance that develops implementation guidance for consumer-directed exchange of claims and clinical information through standardized interfaces. |
| CCD | Continuity of Care Document: An electronic clinical summary containing core patient information such as problems, medications, allergies, results, and care plans for transitions between care settings. |
| C-CDA | Consolidated Clinical Document Architecture: An HL7 specification that standardizes the structure and content of commonly exchanged clinical documents, including discharge summaries and continuity-of-care records. |
| CCOW | Clinical Context Object Workgroup: An HL7 standard for synchronizing patient and user context across separate clinical applications, allowing users to move between systems without repeatedly selecting the same patient. |
| CDA | Clinical Document Architecture: An HL7 document standard that provides a structured, machine-readable format for persistent clinical records exchanged between healthcare applications. |
| CDISC | Clinical Data Interchange Standards Consortium: A standards organization that defines formats and models for collecting, exchanging, submitting, and archiving clinical research data. |
| CDM | Common Data Model: A standardized schema that maps data from disparate sources into consistent structures and vocabularies for analytics, research, quality measurement, or interoperability. |
| CDR | Clinical Data Repository: A centralized store that consolidates patient information from multiple clinical systems for longitudinal viewing, analytics, reporting, and decision support. |
| CDS | Clinical Decision Support: Knowledge, alerts, recommendations, order sets, and other tools that deliver relevant information to clinicians or patients at appropriate points in a care workflow. |
| CDSS | Clinical Decision Support System: A software application that applies rules, evidence, or predictive models to patient data to support diagnosis, treatment, medication safety, or care planning. |
| CEHRT | Certified Electronic Health Record Technology: Technology certified against federal criteria for functions such as clinical data capture, interoperability, security, patient access, and electronic quality reporting. |
| CHDA | Certified Health Data Analyst: An AHIMA credential for professionals who acquire, manage, analyze, interpret, and communicate healthcare data. |
| CHIME | College of Healthcare Information Management Executives: A professional association serving senior healthcare technology and digital leaders through education, research, advocacy, and executive development. |
| CHPS | Certified in Healthcare Privacy and Security: An AHIMA credential demonstrating expertise in healthcare privacy law, information security, risk management, and compliance. |
| CIS | Clinical Information System: A software platform that captures, processes, displays, and manages information used in patient care, often within a specific department or clinical workflow. |
| CPHIMS | Certified Professional in Healthcare Information and Management Systems: A HIMSS credential for experienced professionals who manage healthcare technology, information, and digital transformation initiatives. |
| CPOE | Computerized Provider Order Entry: Electronic entry of medication, laboratory, imaging, and other clinical orders, usually with validation and decision-support capabilities that reduce transcription and ordering errors. |
| CPT | Current Procedural Terminology: The American Medical Association code set used to represent medical services and procedures in clinical documentation, billing, analytics, and administrative transactions. |
| CQL | Clinical Quality Language: A standards-based language for expressing computable clinical logic used in quality measures, decision support, cohort definitions, and population health applications. |
| CQM | Clinical Quality Measure: A defined method for assessing care processes, outcomes, patient experience, or organizational performance using specified populations and data elements. |
| D | |
| DICOM | Digital Imaging and Communications in Medicine: The principal international standard for formatting, storing, transmitting, and displaying medical images and associated information across imaging equipment and software. |
| DLP | Data Loss Prevention: Technologies and policies that detect or block unauthorized transmission, copying, or exposure of sensitive data, including protected health information. |
| DS4P | Data Segmentation for Privacy: Standards and implementation approaches for labeling and restricting particularly sensitive portions of an electronic health record during access or exchange. |
| DSM | Direct Secure Messaging: A standards-based method for securely exchanging encrypted health information between trusted addresses, commonly used for referrals, summaries, and care transitions. |
| DUA | Data Use Agreement: A contract specifying permitted uses, safeguards, access conditions, retention, and disclosure obligations for a healthcare dataset. |
| E | |
| eCQM | Electronic Clinical Quality Measure: A quality measure expressed in a computable format so that certified systems can calculate performance directly from structured electronic clinical data. |
| EDI | Electronic Data Interchange: Structured computer-to-computer exchange of standardized business documents, including healthcare claims, eligibility inquiries, remittance advice, and prior-authorization transactions. |
| EHDS | European Health Data Space: The European Union framework for individual access to electronic health data, cross-border healthcare exchange, and regulated secondary use of health information. |
| EHI | Electronic Health Information: The information covered by U.S. information-blocking requirements, encompassing electronic protected health information within a designated record set, subject to applicable exclusions. |
| EHR | Electronic Health Record: A longitudinal digital record that supports clinical documentation, orders, results, care coordination, reporting, and information exchange across authorized users and settings. |
| EHRA | Electronic Health Record Association: A trade association representing developers of electronic clinical record products in standards, policy, interoperability, patient safety, and regulatory discussions. |
| eMAR | Electronic Medication Administration Record: A digital record of medication doses scheduled and administered to patients, often integrated with bar-code verification and pharmacy systems. |
| EMPI | Enterprise Master Patient Index: A system that links patient identities and records across multiple facilities, applications, or legal entities while managing duplicates and demographic discrepancies. |
| EMR | Electronic Medical Record: A digital patient chart maintained within a particular organization or clinical practice, often with a narrower organizational scope than a longitudinal electronic health record. |
| EPCS | Electronic Prescribing for Controlled Substances: A regulated process for transmitting controlled-substance prescriptions electronically using identity proofing, access controls, multifactor authentication, and audit capabilities. |
| ePHI | Electronic Protected Health Information: Individually identifiable health information created, received, maintained, or transmitted electronically and protected by the HIPAA Privacy and Security Rules. |
| eRx | Electronic Prescribing: The electronic creation and transmission of prescriptions between prescribers, pharmacies, pharmacy benefit systems, and medication-history services. |
| F | |
| FAST | Fast Healthcare Interoperability Resources at Scale Taskforce: An HL7 accelerator focused on scalable national exchange infrastructure, identity, directories, security, and other implementation challenges. |
| FDA | Food and Drug Administration: The U.S. regulator responsible for oversight of medical devices, including qualifying clinical software, artificial intelligence-enabled products, and software used as a medical device. |
| FHIR | Fast Healthcare Interoperability Resources: An HL7 standard that represents health data as modular resources and supports exchange through modern web-based interfaces, messages, and documents. |
| FTC | Federal Trade Commission: The U.S. agency that enforces consumer-protection and privacy requirements affecting health applications, connected products, and organizations outside HIPAA coverage. |
| G | |
| GDPR | General Data Protection Regulation: The European Union data-protection framework governing the processing, security, transfer, and individual rights associated with personal data, including sensitive health information. |
| GMLP | Good Machine Learning Practice: Lifecycle principles for developing, validating, monitoring, and updating safe and effective machine-learning-enabled medical technologies. |
| H | |
| HBNR | Health Breach Notification Rule: A U.S. rule requiring certain vendors of personal health records and related entities outside HIPAA to notify affected individuals and regulators after qualifying data breaches. |
| HCPCS | Healthcare Common Procedure Coding System: A standardized coding system used in claims and administrative applications to represent medical services, procedures, supplies, equipment, and certain products. |
| Health-ISAC | Health Information Sharing and Analysis Center: A member-based organization through which healthcare organizations share cyberthreat intelligence, vulnerabilities, incident information, and security practices. |
| HHS | Department of Health and Human Services: The U.S. cabinet department overseeing major health technology, privacy, cybersecurity, interoperability, and digital-health regulatory bodies and programs. |
| HICP | Health Industry Cybersecurity Practices: U.S. healthcare-sector guidance describing common cyberthreats and practical safeguards for organizations of different sizes and capabilities. |
| HIE | Health Information Exchange: The electronic movement of health information among organizations according to recognized standards, governance rules, and privacy requirements; the term can also describe an entity facilitating that exchange. |
| HIM | Health Information Management: The discipline responsible for the quality, integrity, availability, privacy, coding, retention, and lawful use of health records and related data. |
| HIMSS | Healthcare Information and Management Systems Society: A global professional association that provides education, research, maturity models, events, and policy resources related to digital health and healthcare technology. |
| HIN | Health Information Network: An individual or entity that determines, controls, or substantially influences policies or agreements enabling electronic health information exchange among multiple parties. |
| HIPAA | Health Insurance Portability and Accountability Act of 1996: The U.S. law underlying national requirements for healthcare transaction standards and the privacy and security of protected health information. |
| HISP | Health Information Service Provider: An organization that supplies trust, directory, certificate, routing, and secure messaging services for Direct exchange. |
| HIT | Health Information Technology: The systems, software, infrastructure, standards, and services used to create, manage, exchange, analyze, and protect health information. |
| HITAC | Health Information Technology Advisory Committee: A U.S. federal advisory committee that recommends policies and standards for interoperability, privacy, security, patient access, and health technology certification. |
| HITECH | Health Information Technology for Economic and Clinical Health Act: A U.S. law that accelerated electronic record adoption, strengthened HIPAA enforcement, and established major federal health technology programs. |
| HITRUST CSF | Health Information Trust Alliance Common Security Framework: A certifiable control framework that harmonizes healthcare security and privacy requirements from multiple laws, regulations, and industry standards. |
| HL7 | Health Level Seven: A family of healthcare data-exchange standards and the international standards organization that develops specifications such as Version 2 messaging, clinical documents, and modern resource-based interfaces. |
| HPH CPGs | Healthcare and Public Health Sector Cybersecurity Performance Goals: A set of voluntary high-impact practices intended to help healthcare organizations prioritize safeguards against prevalent cyberthreats. |
| HTI | Health Data, Technology, and Interoperability: The title used for federal rulemaking addressing certified technology, standardized interfaces, algorithm transparency, information sharing, and public-health data exchange. |
| I | |
| i2b2 | Informatics for Integrating Biology and the Bedside: An open-source clinical research informatics platform used to query repositories, identify patient cohorts, and support secondary use of clinical data. |
| IAM | Identity and Access Management: The policies and technologies used to establish digital identities and control access to health applications, devices, interfaces, and sensitive data. |
| ICD-10-CM | International Classification of Diseases, Tenth Revision, Clinical Modification: The U.S. diagnosis code set used in clinical documentation, billing, risk adjustment, quality measurement, reporting, and analytics. |
| ICD-10-PCS | International Classification of Diseases, Tenth Revision, Procedure Coding System: The U.S. code set used to classify procedures performed during inpatient hospital stays for reporting and reimbursement. |
| IG | Implementation Guide: A specification describing how a standard must be constrained, profiled, coded, tested, and used for a defined interoperability use case. |
| IHE | Integrating the Healthcare Enterprise: An international initiative that publishes tested integration profiles showing how established standards can solve specific clinical and administrative exchange needs. |
| IMDRF | International Medical Device Regulators Forum: A voluntary group of medical-device regulators that develops harmonized approaches relevant to clinical software, cybersecurity, and software used as a medical device. |
| IoMT | Internet of Medical Things: The ecosystem of connected medical devices, sensors, applications, and platforms that collect or exchange health data over networks. |
| IPS | International Patient Summary: A standardized, minimal clinical summary designed to support safe, cross-border and unscheduled care through reusable structured health information. |
| L | |
| LIS | Laboratory Information System: A platform that manages laboratory orders, specimens, workflows, instruments, results, quality controls, and interfaces with other clinical systems. |
| LLM | Large Language Model: A machine-learning model trained on extensive text collections to generate or interpret language, with applications in clinical documentation, search, coding, summarization, and patient communication. |
| LOINC | Logical Observation Identifiers Names and Codes: An international terminology standard for identifying laboratory tests, clinical observations, measurements, surveys, and documents across systems. |
| M | |
| MFA | Multifactor Authentication: An access-control method requiring two or more independent verification factors, reducing the risk that compromised credentials will expose clinical systems or patient data. |
| MHD | Mobile Access to Health Documents: An Integrating the Healthcare Enterprise profile that enables document publication, discovery, and retrieval using resource-based web services. |
| ML | Machine Learning: A branch of artificial intelligence in which algorithms learn patterns from data for applications such as prediction, classification, imaging analysis, and workflow automation. |
| MLLP | Minimal Lower Layer Protocol: A framing protocol commonly used to transmit HL7 Version 2 messages over network connections between healthcare applications. |
| MPI | Master Patient Index: A registry that assigns and links patient identifiers within an organization to support accurate identity matching and record retrieval. |
| N | |
| NCPDP | National Council for Prescription Drug Programs: A standards organization that develops transaction formats and data standards for prescribing, pharmacy claims, medication history, prior authorization, and related exchanges. |
| NDC | National Drug Code: A U.S. identifier for drug products that supports prescribing, dispensing, claims processing, inventory management, and medication data integration. |
| NIST | National Institute of Standards and Technology: A U.S. agency whose cybersecurity frameworks, controls, risk guidance, and technical standards are widely used to secure healthcare systems and vendors. |
| NLP | Natural Language Processing: Computational methods for extracting, classifying, summarizing, or generating information from clinical notes, reports, messages, and other unstructured text. |
| NPI | National Provider Identifier: A unique U.S. identifier for covered healthcare providers used in standard transactions, directories, credentialing, data matching, and system master files. |
| NPPES | National Plan and Provider Enumeration System: The federal system that assigns and maintains provider identifiers and associated public demographic information used by healthcare applications and directories. |
| O | |
| OHDSI | Observational Health Data Sciences and Informatics: An international collaborative that develops open-source tools and methods for standardized observational health-data analytics. |
| OID | Object Identifier: A globally unique hierarchical identifier used in healthcare standards to identify organizations, code systems, assigning authorities, document types, and other controlled objects. |
| OMOP CDM | Observational Medical Outcomes Partnership Common Data Model: A standardized schema and vocabulary framework used to transform disparate clinical and claims data for reproducible observational research and analytics. |
| ONC | Office of the National Coordinator for Health Information Technology: The federal office associated with U.S. certification criteria, interoperability policy, information-blocking rules, health data standards, and nationwide exchange initiatives. |
| P | |
| PACS | Picture Archiving and Communication System: A platform for storing, retrieving, distributing, and viewing medical images, typically integrated with imaging equipment and clinical records. |
| PCCP | Predetermined Change Control Plan: A regulatory plan describing anticipated modifications to an artificial intelligence-enabled medical device and the controlled methods for implementing and validating them after authorization. |
| PCORnet CDM | National Patient-Centered Clinical Research Network Common Data Model: A standardized structure that enables participating research networks to organize clinical data consistently for distributed analysis and comparative effectiveness studies. |
| PDMP | Prescription Drug Monitoring Program: A state-operated electronic database that collects controlled-substance prescribing and dispensing information for authorized clinical, regulatory, and public-health use. |
| PDQ | Patient Demographics Query: An Integrating the Healthcare Enterprise profile for locating patient records by querying demographic information across connected systems. |
| PDQm | Patient Demographics Query for Mobile: A resource-based version of patient demographic search designed for lightweight applications and modern web interfaces. |
| PGHD | Patient-Generated Health Data: Health-related information created or recorded by patients, caregivers, applications, wearables, or home devices outside traditional clinical encounters. |
| PHI | Protected Health Information: Individually identifiable health information held or transmitted by a HIPAA covered entity or business associate, subject to specified protections and permitted uses. |
| PHR | Personal Health Record: An electronic health-information resource controlled primarily by the individual, often aggregating data from providers, applications, devices, and personal entries. |
| PII | Personally Identifiable Information: Information that can identify or be linked to an individual. Health technology organizations must distinguish its broader privacy obligations from protections specific to health records. |
| PIX | Patient Identifier Cross-referencing: An Integrating the Healthcare Enterprise profile for linking identifiers assigned to the same patient by different systems or organizations. |
| PIXm | Patient Identifier Cross-reference for Mobile: A resource-based profile that allows applications to retrieve corresponding patient identifiers across identity domains. |
| PKI | Public Key Infrastructure: The certificates, cryptographic keys, authorities, and processes used to authenticate participants and secure health data in transit. |
| PPRL | Privacy-Preserving Record Linkage: Methods for matching records that refer to the same person across datasets while limiting disclosure of direct identifiers. |
| Q | |
| QHIN | Qualified Health Information Network: A network designated under the national trusted exchange framework to connect participants and facilitate nationwide exchange under common technical and governance requirements. |
| QRDA | Quality Reporting Document Architecture: An HL7 standard for electronically representing patient-level and aggregate clinical quality-measure data for reporting and analysis. |
| R | |
| RBAC | Role-Based Access Control: A security model that grants system permissions according to a user’s approved organizational or clinical role rather than assigning each permission individually. |
| RCE | Recognized Coordinating Entity: The organization selected by the federal government to develop, maintain, and administer the common agreement supporting nationwide health information exchange. |
| REST | Representational State Transfer: A web-service architectural style used by modern healthcare interfaces to create, retrieve, update, and exchange structured resources through standard internet methods. |
| RHIA | Registered Health Information Administrator: An AHIMA credential for professionals who manage health information governance, privacy, operations, analytics, compliance, and organizational systems. |
| RHIT | Registered Health Information Technician: An AHIMA credential focused on maintaining accurate, accessible, and protected health records and supporting coding and data-quality processes. |
| RIM | Reference Information Model: The foundational HL7 model that provides shared concepts and relationships for several earlier generations of healthcare messaging and document standards. |
| RIS | Radiology Information System: A departmental platform that manages imaging orders, scheduling, patient tracking, reporting, billing data, and integration with image archives and clinical records. |
| RLS | Record Locator Service: A service that identifies where a patient’s records are held so authorized users can request information from the appropriate source systems. |
| ROI | Release of Information: The controlled process for reviewing, authorizing, tracking, and disclosing patient records in accordance with legal requirements and organizational policy. |
| S | |
| SaMD | Software as a Medical Device: Software intended to perform one or more medical purposes without being part of a physical medical-device component, potentially making it subject to device regulation. |
| SDO | Standards Development Organization: A body that creates and maintains consensus specifications for areas such as interoperability, terminology, transactions, imaging, privacy, and security. |
| SMART | Substitutable Medical Applications and Reusable Technologies: An open application framework that provides standardized authorization, launch context, and data access for applications connected to compatible clinical systems. |
| SNOMED CT | Systematized Nomenclature of Medicine Clinical Terms: A comprehensive clinical terminology used to encode conditions, findings, procedures, organisms, substances, and other concepts in electronic health records. |
| SOC 2 | System and Organization Controls 2: An independent assurance report evaluating a service organization’s controls against applicable trust services criteria, commonly reviewed during healthcare vendor risk assessments. |
| SPL | Structured Product Labeling: An HL7 document standard used to exchange machine-readable information about regulated drugs and other health products, including labeling and product characteristics. |
| T | |
| TEFCA | Trusted Exchange Framework and Common Agreement: The U.S. framework establishing common legal, governance, and technical terms for nationwide exchange among qualified networks and their participants. |
| U | |
| UDAP | Unified Data Access Profiles: Security and trust profiles that support scalable registration, authentication, and authorization for health data exchange across organizations. |
| UDI | Unique Device Identifier: A standardized identifier assigned to medical devices to support electronic documentation, supply-chain tracking, recalls, safety surveillance, and clinical data integration. |
| UMLS | Unified Medical Language System: A National Library of Medicine resource that links biomedical vocabularies and coding systems to support terminology mapping, search, analytics, and natural-language applications. |
| USCDI | United States Core Data for Interoperability: A standardized set of health data classes and elements that certified systems must support for interoperable exchange under federal policy. |
| USCDI+ | United States Core Data for Interoperability Plus: A federal process for developing domain- or program-specific data requirements that build on the national core interoperability dataset. |
| V | |
| VDT | View, Download, and Transmit: A patient-access capability allowing individuals to inspect their electronic health information, obtain a copy, and send it to another destination. |
| W | |
| WEDI | Workgroup for Electronic Data Interchange: A healthcare industry organization that develops guidance and convenes stakeholders on administrative transactions, standards, privacy, security, and data exchange. |
| X | |
| X12 | Accredited Standards Committee X12: The standards body responsible for electronic business transactions widely used in U.S. healthcare, including claims, eligibility, remittance, enrollment, and claim-status exchanges. |
| XCA | Cross-Community Access: An Integrating the Healthcare Enterprise profile that enables authorized discovery and retrieval of patient documents across separate exchange communities. |
| XCPD | Cross-Community Patient Discovery: An Integrating the Healthcare Enterprise profile used to locate and correlate a patient’s identity across independent healthcare communities. |
| XDM | Cross-Enterprise Document Media Interchange: An Integrating the Healthcare Enterprise profile for exchanging clinical documents through portable media, files, or other mechanisms when online registry services are unavailable. |
| XDR | Cross-Enterprise Document Reliable Interchange: An Integrating the Healthcare Enterprise profile for direct, reliable transmission of clinical documents and associated metadata between known organizations. |
| XDS | Cross-Enterprise Document Sharing: An Integrating the Healthcare Enterprise profile that uses registries and repositories to publish, discover, and retrieve clinical documents across organizations. |
| XDS-I | Cross-Enterprise Document Sharing for Imaging: An extension of cross-enterprise document exchange that supports registration, discovery, and retrieval of medical imaging studies and related reports. |
| XUA | Cross-Enterprise User Assertion: An Integrating the Healthcare Enterprise profile for communicating authenticated user identity and authorization attributes across organizational boundaries. |