HSE national EHR implementation & procurement — interoperability, cloud/vendor governance & cyber risks
Key Questions
What is the current progress of HSE's One Health Record EHR implementation?
As of the latest update, 10 public sites are live with 14,000 users, and the maternity EHR (MN-CMS) covers approximately 62% of births following the rollout at Cavan General Hospital. Additional implementations include CareFlow Pharmacy across 9 hospitals with 12 more planned for 2026, and the Solus endoscopy system expanding to 38 sites. The timeline targets Dublin/NE by 2029 following government approval in February 2026.
What standards and models are being considered for HSE's EHR interoperability?
The FHIR versus openEHR debate continues, with Catalonia's openEHR deployment for 8 million people cited as a potential model. Research on health data standard adoption in heart failure cases provides evidence for these choices, while enterprise architecture is emphasized to prevent technical debt in Ireland's fragmented landscape.
What cyber risks and governance measures apply to the HSE One Health Record?
Recent Conti ransomware activity involving a Cork member highlights ongoing threats, reinforced by new EU procurement guidelines for hospital cybersecurity and NIS2 compliance needs. NHS England guidance on unlawful patient record access offers a legal framework with audit trails and controls directly relevant to HSE governance.
How do vendor stability and procurement risks affect HSE's EHR plans?
Oracle Health's potential sale introduces vendor stability concerns, while Palantir's UK Single Patient Record role and performance issues (ten times slower than current systems) serve as cautionary examples. US DHA's modular MHS Genesis approach is suggested as a possible procurement model, alongside performance-linked contracts and multi-track due diligence.
What lessons from UK NHS developments inform Ireland's EHR rollout?
UK legislation for a single patient record by 2028 provides a benchmark, while T-Pro's acquisition of BigHand Healthcare signals consolidation in ambient AI scribing relevant to HSE integration. New Victoria Hospital's MEDITECH Expanse go-live on Google Cloud and Epic's Community Connect expansion also highlight European cloud and interoperability trends.
HSE One Health Record competitive dialogue underway, vendor selection expected 2027. New: FTC probes Epic over data access practices—major regulatory signal for vendor risk assessment. New: VA/Oracle Health contract ceiling hits $26.9B with only 14 sites live and 120 behind schedule—cautionary signal for Oracle as potential HSE vendor. Contract extension to 2031 and site-specific customization challenges highlight implementation risks. New: Epic launches Ergo Visit AI tool for outpatient visits, signaling AI integration direction—relevant for HSE vendor evaluation. New: Cybersecurity board accountability article ties HSE Conti ransomware to NIS2 and board-level obligations—reinforcing governance risks. Ireland's e-health record access jumped to 44% (fastest in EU), digital skills rank 2nd—validating momentum. CCM/KLAS report: 63% of health systems lack advanced AI frameworks, 44% have dedicated testing environments—directly relevant to HSE AI governance. Ireland's Digital & AI Strategy 2030 explicitly references Digital for Care 2030, e-prescribing, and digitised health—policy backbone for One Health Record. EU 2030 EHR deadline (from WHO roadmap) reinforces urgency. Black Book: 85% demand shared-care interoperability, 84% require EU-aligned controls. Progress: 10 public sites live, 14,000 users, maternity EHR covering ~62% of births. Solus endoscopy rollout to 38 sites. Cautionary tales: NI referral letters missing, Encompass privacy breach, NHS England guidance on unlawful access, NHS England safety investigation on A&G services. Moody's data on cash flow drops, NY cancer center $113M loss, 400k unclosed encounters recovering nearly $1B—reinforcing need for post-implementation support. Health IT vendor data breach exposes 3.8M patient records, underscoring third-party risk for HSE's multi-vendor EHR rollout. Political pressure: Martin Daly Dáil challenge. Grant Thornton stresses human change and AI governance. FHIR vs openEHR debate; Catalonia model. Vendor landscape: Epic expanding, Oracle mixed (new AI patient portal), Dedalus opens Irish HQ, InterSystems Gartner Leader, MEDITECH momentum. Ambient AI governance article provides practical lessons; EpicCare not fit for Irish private practice; InterSystems IntelliCare product details. PDF 'How Ireland Cares' advocates for EHR, telemedicine, AI as transformative tools, reinforcing reform momentum. Redesign Health Study shows 71% of US health systems adopt Epic-first AI purchasing, 57% budget to Epic—competitive signal for HSE vendor strategy. HSE publishes structured innovation framework with governance, lifecycle, and repository plans—initial priorities Q2-Q3 2026. CIOs downplay Epic leadership exits as business-as-usual, reinforcing Epic's resilience. The contrast with smaller vendors lacking depth is a cautionary note for HSE's vendor evaluation. US health systems spending $175M on Epic transitions and facing AI testing gaps—transferable lessons for HSE cost modelling and governance.