HL7 FHIR, Secure Messaging & Digital Health Interoperability in Australian Primary Care

The Interoperability Challenge in Primary Care

Historically, Australian healthcare data was trapped in proprietary, siloed desktop databases using legacy HL7 v2 messaging pipes and bespoke binary formats. Clinicians were forced to rely on faxes, printed paper summaries, and uncoordinated PDF attachments.

True semantic interoperability requires that clinical data transferred between disparate systems (e.g. between a rural GP, a regional hospital, a community pathology lab, and a specialist) preserves both its syntactic structure and its exact clinical meaning without human re-entry.

HL7 FHIR: Modular, Web-Native Health Data

Fast Healthcare Interoperability Resources (FHIR) transforms complex clinical information into lightweight, web-native modular building blocks called Resources. Core FHIR resources in primary care include:

• Patient: Demographics, indigenous status, Medicare/DVA identifiers, and contact points.
• Condition: Problems, clinical diagnoses, and active health conditions coded using SNOMED CT-AU.
• MedicationRequest: Prescriptions, dosing instructions, repeats, and brand/generic identifiers coded to the Australian Medicines Terminology (AMT).
• Observation: Vital signs (blood pressure, pulse, SpO2), laboratory pathology values (LOINC coded), and clinical measurements.
• AllergyIntolerance: Substances, manifestation severities, and clinical verification statuses.
• Encounter: Consultation dates, locations, service providers, and primary reasons for presentation.

National Infrastructure: NASH, HI Service & My Health Record

Connecting software to Australia's national digital health fabric requires multi-tiered statutory authentication:

1. The Healthcare Identifiers (HI) Service: Provides unique, unambiguous national identifiers:
   • IHI (Individual Healthcare Identifier): 16-digit unique identifier for every healthcare recipient in Australia.
   • HPI-I (Healthcare Provider Identifier - Individual): Unique identifier for registered practitioners (AHPRA registered doctors, nurses, pharmacists).
   • HPI-O (Healthcare Provider Identifier - Organisation): Unique identifier for accredited healthcare practice organisations.
2. NASH (National Authentication Service for Health) PKI: Public Key Infrastructure digital certificates issued by Services Australia to authenticate clinical software and establish secure TLS connections to national APIs.
3. My Health Record B2B Gateway: Automated uploading of Shared Health Summaries (SHS) and Event Summaries (ES), and downloading of hospital discharge summaries and diagnostic imaging reports.

Secure Message Delivery (SMD — AS 5534)

In Australia, point-to-point transmission of sensitive clinical documents (e.g. between GP and specialist) is governed by the Secure Message Delivery (AS 5534) standard. SMD uses public-key cryptography to encrypt the clinical payload end-to-end, guaranteeing that intermediary message broker networks (e.g. HealthLink, ReferralNet, Medical-Objects) cannot view or alter the clinical content.