Competition Law and Health Information Exchanges and Antitrust

1. Introduction

Health Information Exchanges (HIEs) are systems, networks, or platforms through which healthcare providers and other authorised participants exchange patient-health information electronically. Depending on the model, participants may include hospitals, physicians, laboratories, pharmacies, insurers, health-information organisations, public authorities, and technology providers.

From a competition-law perspective, HIEs present an unusual problem. Information sharing can improve healthcare efficiency while simultaneously creating opportunities for exclusion, coordination, or market foreclosure.

An HIE can potentially become a competitive bottleneck where it controls:

access to healthcare information;

interoperability standards;

electronic health-record interfaces;

patient-consent infrastructure;

health-data exchange networks;

provider directories;

authentication systems;

APIs;

health-information routing;

data analytics.

The competition-law challenge is therefore to distinguish legitimate information infrastructure from arrangements that use information exchange to restrict competition.

2. Why HIEs Are Relevant to Competition Law

Healthcare markets are characterised by significant information asymmetries.

Hospitals need information from:

physicians;

laboratories;

pharmacies;

insurers;

other hospitals;

diagnostic providers.

An effective HIE can reduce:

duplicate testing;

administrative costs;

information delays;

transaction costs;

medical-record fragmentation.

However, the same infrastructure may become a competitive bottleneck.

For example:

Hospital A + Hospital B + insurers + laboratories → jointly control HIE → independent hospital cannot obtain equivalent interoperability → competing provider is disadvantaged.

Competition law therefore has to examine both the efficiency-enhancing function and the exclusionary potential of HIEs.

3. Principal Competition-Law Issues

The major antitrust issues include:

Information exchange between competitors.

Collective control over an HIE.

Refusal to provide access.

Discriminatory interoperability.

Exclusive participation.

Data portability restrictions.

Network effects.

Self-preferencing.

Vertical foreclosure.

Healthcare-provider consolidation.

Algorithmic coordination.

Use of commercially sensitive healthcare-market information.

Standard-setting.

Joint purchasing or bargaining.

Mergers involving health-data infrastructure.

4. Information Exchange Between Competitors

The most fundamental issue is the possibility that HIEs may facilitate the exchange of competitively sensitive information.

Healthcare providers may possess information concerning:

prices;

reimbursement rates;

physician compensation;

capacity;

future expansion;

service volumes;

negotiated insurance terms;

costs;

treatment pricing.

An HIE should not become a mechanism through which competitors indirectly learn information that they would otherwise have strong incentives to keep confidential.

Competition law therefore distinguishes between:

Legitimate clinical information

Patient records, test results and treatment information necessary for healthcare delivery.

and

Competition-sensitive information

Prices, future pricing plans, strategic capacity, contract negotiations and other commercially sensitive information.

The first may promote competition and healthcare quality.

The second can facilitate coordination.

5. United States v. U.S. Gypsum Co.

United States v. U.S. Gypsum Co., 438 U.S. 422 (1978)

The U.S. Supreme Court considered the antitrust implications of exchanging competitively significant information.

The case is important for the broader principle that information exchanges among competitors can have antitrust significance depending upon their purpose, structure and competitive effects.

HIE application

Suppose competing hospitals participate in a common health-information platform.

The platform could theoretically reveal:

current prices;

planned price increases;

capacity;

strategic expansion;

negotiations with insurers.

An HIE should therefore be structured so that legitimate clinical interoperability does not become a mechanism for facilitating competitor coordination.

6. American Medical Association v. United States

American Medical Association v. United States, 317 U.S. 519 (1943)

The Supreme Court considered collective conduct involving physicians and healthcare competition.

Although technologically distant from modern HIEs, the case illustrates an enduring antitrust principle:

Cooperation among healthcare professionals does not become immune from competition law merely because the cooperation occurs within healthcare.

HIE relevance

Hospitals and physicians may jointly establish an HIE for legitimate interoperability purposes.

However, if participation is structured to:

exclude rival providers;

restrict independent physicians;

coordinate prices;

allocate markets;

the healthcare character of the arrangement does not itself eliminate antitrust scrutiny.

7. FTC v. Indiana Federation of Dentists

FTC v. Indiana Federation of Dentists, 476 U.S. 447 (1986)

This is one of the most important healthcare antitrust cases for information-related conduct.

Dentists collectively refused to provide insurers with dental X-rays that insurers wanted to use in evaluating claims.

The Supreme Court treated the collective withholding of information as potentially anticompetitive.

HIE significance

The case demonstrates that control over healthcare information can have competitive significance.

An HIE could potentially create a similar issue if participating healthcare providers collectively restrict access to information needed by:

competing providers;

insurers;

laboratories;

healthcare technology companies.

The distinction between legitimate privacy/security restrictions and exclusionary information restrictions becomes crucial.

8. FTC v. Superior Court Trial Lawyers Association

FTC v. Superior Court Trial Lawyers Association, 493 U.S. 411 (1990)

Although outside healthcare, the case demonstrates that collective action by independent professionals can violate competition law when used to exert coordinated market pressure.

HIE relevance

An HIE governed by competing healthcare providers should not become a mechanism for coordinated bargaining against:

insurers;

patients;

competing providers;

technology firms.

The fact that participants share a professional or healthcare mission does not automatically protect collective commercial conduct.

9. North Carolina State Board of Dental Examiners v. FTC

North Carolina State Board of Dental Examiners v. FTC, 574 U.S. 494 (2015)

This Supreme Court case addressed competition restrictions imposed by a state regulatory board substantially controlled by active market participants.

The Court held that active market participants can create serious antitrust concerns when they exercise regulatory authority without sufficient state supervision.

HIE relevance

This principle is particularly important where HIE governance involves:

hospitals;

physicians;

laboratories;

insurers;

who are themselves market participants.

If those participants control the rules governing access to the exchange, they may have incentives to design standards that disadvantage competitors.

This creates a potential competitor-controlled infrastructure problem.

10. FTC v. Phoebe Putney Health System

FTC v. Phoebe Putney Health System, 568 U.S. 216 (2013)

The case concerned hospital acquisition and the state-action doctrine.

It illustrates the importance of examining healthcare consolidation even where participants operate within regulated healthcare environments.

HIE application

An HIE may create or reinforce concentration when a dominant hospital acquires:

a health-data exchange;

an electronic health-record provider;

a health-information intermediary;

a competing hospital;

a health-data analytics platform.

Competition authorities may need to determine whether the transaction creates a data or interoperability bottleneck.

11. FTC v. Butterworth Health Corp.

FTC v. Butterworth Health Corp., 121 F.3d 708 (6th Cir. 1997)

The case concerned hospital-market consolidation and competitive effects.

It illustrates the broader concern that healthcare institutions can acquire substantial market power through consolidation.

HIE relevance

If a dominant hospital system controls both:

healthcare services + information infrastructure

it may have stronger opportunities to disadvantage rival providers.

For example, it might theoretically:

delay interoperability;

impose discriminatory technical standards;

limit data portability;

provide preferential integration to affiliated providers.

12. FTC v. Surescripts

FTC v. Surescripts, LLC, FTC File No. 101 0002

The Surescripts proceedings are particularly relevant to health-information infrastructure.

Surescripts operated important electronic prescription-routing infrastructure.

The FTC challenged conduct involving exclusivity and contracts affecting competition in electronic prescription markets.

HIE significance

The case demonstrates how health-information infrastructure can itself become a competition bottleneck.

The central issue is not simply the possession of health data but control over the infrastructure through which market participants communicate and exchange information.

This makes Surescripts particularly relevant to modern HIE analysis.

13. FTC v. LabMD

FTC v. LabMD, 894 F.3d 1221 (11th Cir. 2018)

LabMD primarily concerned healthcare-data security rather than conventional antitrust.

Its relevance to HIE competition lies in demonstrating that health-information infrastructure operates under competing obligations involving:

data security;

privacy;

information access;

operational integrity.

Competition law cannot be applied without accounting for legitimate healthcare-data protection requirements.

An HIE may legitimately restrict access where unrestricted access would violate privacy or security obligations.

Thus:

Privacy-based access restrictions should not automatically be treated as anticompetitive exclusion.

14. United States v. Microsoft Corp.

United States v. Microsoft Corp., 253 F.3d 34 (D.C. Cir. 2001)

Microsoft is a foundational case on leveraging control over an important technological platform.

The case concerned Microsoft's use of its operating-system position to disadvantage competing technologies.

HIE application

An HIE or electronic-health-record platform may similarly occupy a technological bottleneck.

Potential conduct could include:

restricting APIs;

degrading interoperability;

imposing discriminatory technical requirements;

making rival health applications difficult to integrate.

The Microsoft framework therefore provides an important conceptual analogy for interoperability-based exclusion.

15. Ohio v. American Express

Ohio v. American Express Co., 585 U.S. 529 (2018)

American Express is relevant because it provides a sophisticated framework for analysing two-sided platforms.

An HIE may similarly connect several groups:

Providers ↔ HIE ↔ Data users

or:

Hospitals ↔ HIE ↔ Physicians ↔ Insurers

The value of the platform to one participant may depend upon participation by others.

Consequently, competition analysis may need to examine the platform as an integrated system rather than analysing every participant in isolation.

16. United States v. Visa U.S.A.

The Visa litigation concerning payment networks is also instructive for HIEs because it demonstrates how network infrastructure can create significant entry barriers.

An HIE may exhibit similar characteristics:

network effects;

interoperability dependence;

switching costs;

participant lock-in;

standardisation;

scale economies.

The larger the network becomes, the greater its value may be to participants.

This can produce a self-reinforcing competitive advantage.

17. Essential Facilities and HIE Access

The essential-facilities doctrine is potentially relevant where an HIE controls infrastructure that rivals cannot reasonably duplicate.

The principal European authority is:

Bronner, Case C-7/97

The Court of Justice imposed demanding conditions before a refusal to provide access becomes an abuse.

For an HIE, questions could include:

Is access genuinely indispensable?

Can a rival reasonably establish an alternative exchange?

Is refusal capable of eliminating effective competition?

Is there objective justification?

Would access create legitimate privacy or security risks?

The existence of a technically useful exchange does not automatically make it an essential facility.

18. Interoperability as a Competition Issue

Interoperability is arguably the central competition issue for HIEs.

Healthcare information may be stored across:

hospitals;

laboratories;

pharmacies;

EHR systems;

insurers;

health applications.

If one dominant platform prevents competitors from interoperating, it can potentially increase switching costs.

Potential anti-competitive mechanisms include:

closed APIs;

excessive API fees;

discriminatory access;

technical degradation;

incompatible formats;

unnecessary certification requirements.

Interoperability therefore performs both a healthcare function and a competition function.

19. Data Portability and Switching Costs

A healthcare provider may be reluctant to leave an HIE if doing so means losing:

patient connections;

integration tools;

historical data;

referral networks;

analytical systems;

interoperability.

These switching costs may create significant market power.

Competition authorities may therefore examine whether contractual or technical restrictions artificially increase switching costs.

20. Self-Preferencing by HIE Operators

Consider an HIE that also sells:

analytics;

health-management software;

clinical decision tools;

insurance products;

pharmaceutical analytics.

The HIE may possess information unavailable to competing providers.

Potential competition concerns arise if it:

collects data from participating providers;

analyses that data;

competes against those providers;

gives its own products preferential access or ranking.

This resembles the broader digital-platform self-preferencing problem.

21. Vertical Foreclosure

Healthcare information exchanges frequently sit between different layers of the healthcare system.

For example:

EHR platform → HIE → hospital → insurer → patient

A dominant HIE could theoretically use its position at one layer to foreclose competition at another.

Examples include:

exclusive contracts;

discriminatory data access;

bundled analytics;

compulsory use of affiliated services;

technical restrictions on rival applications.

This raises traditional vertical-abuse questions under competition law.

22. HIEs and Collective Standard-Setting

Healthcare interoperability requires common technical standards.

Participants may need to agree on:

data formats;

authentication;

security protocols;

API standards;

terminology;

patient-matching methods.

Standard-setting can create substantial efficiencies.

However, standard-setting bodies can also be used to exclude competitors.

Competition law therefore asks whether standards are:

transparent;

objective;

accessible;

proportionate;

non-discriminatory.

A standard should ideally not be designed merely to disadvantage a rival technology.

23. Information Exchange and Cartel Risks

Suppose several competing hospitals participate in one HIE.

The platform has access to:

hospital prices;

occupancy;

planned expansion;

physician recruitment;

negotiated insurance rates.

If competitors can observe this information in sufficiently current and detailed form, the HIE could facilitate coordination.

The competition risk can be illustrated as:

Hospital A → sensitive information

Hospital B → sensitive information

Hospital C → sensitive information

HIE → centralised exchange

This may reduce uncertainty among competitors.

Competition law is particularly concerned when the exchange involves future or strategically sensitive information.

24. Aggregation and Anonymisation

Not every information exchange creates the same competitive risk.

Risk can potentially be reduced through:

aggregation;

anonymisation;

delayed publication;

minimum participant thresholds;

independent administration;

access controls.

For example, aggregated historical statistics are generally less competitively sensitive than individually identifiable current pricing information.

However, anonymisation must be sufficiently robust to prevent participants from reconstructing individual competitors' information.

25. Algorithmic Competition Issues

Modern HIEs increasingly use algorithms for:

patient matching;

referral routing;

fraud detection;

provider recommendations;

resource allocation;

analytics.

Algorithms can create competition issues where they are used to:

discriminate against competitors;

allocate patients unfairly;

favour affiliated providers;

facilitate coordinated behaviour.

The legal focus should remain on actual conduct and competitive effects, rather than assuming that algorithmic decision-making is inherently anticompetitive.

26. Merger Control and Health Data

Healthcare data infrastructure can create significant merger-control concerns.

Consider:

Dominant hospital system + major HIE

or:

EHR provider + health-information exchange

or:

HIE + healthcare analytics platform

The competitive effects may include:

increased data concentration;

foreclosure of competing providers;

interoperability restrictions;

increased switching costs;

loss of potential competition.

The value of the target may therefore exceed its conventional revenue because its data and network position may have substantial strategic significance.

27. Indian Competition-Law Framework

Under India's Competition Act, 2002, the principal provisions are Sections 3 and 4.

Section 3

Potential HIE concerns include:

information-sharing arrangements;

collective exclusion;

exclusive agreements;

discriminatory agreements;

anti-competitive standard-setting.

Section 4

A dominant HIE could potentially face scrutiny for:

denial of market access;

discriminatory conditions;

unfair contractual conditions;

leveraging;

exclusionary conduct.

The relevant market must first be identified, taking into account the specific characteristics of healthcare information services.

28. Indian Healthcare and Digital-Platform Context

An Indian HIE could operate within a broader digital-health architecture involving:

hospitals;

laboratories;

pharmacies;

insurers;

health-tech firms;

digital health records;

health-data intermediaries.

The competition analysis should therefore be coordinated with other legal considerations, particularly:

privacy;

patient consent;

cybersecurity;

healthcare regulation;

data governance.

Competition law does not require an HIE to disclose information where disclosure would violate legitimate privacy or security obligations.

The challenge is distinguishing legitimate regulatory restrictions from strategically unnecessary restrictions designed to exclude competitors.

29. Key Case Laws and Their Relevance

30. The Central Tension: Information Sharing vs Competition

The most important conceptual issue can be expressed as follows:

Information sharing can increase competition by:

reducing search costs;

improving healthcare quality;

increasing patient choice;

enabling better coordination;

lowering administrative costs;

improving interoperability.

But information sharing can reduce competition by:

facilitating price coordination;

revealing strategic plans;

creating exclusionary networks;

increasing entry barriers;

facilitating discrimination;

strengthening dominant platforms.

Thus, competition law should not adopt either extreme:

“All health-information sharing is anti-competitive.”

or

“Healthcare information exchanges are automatically pro-competitive.”

The appropriate analysis depends on the type of information, participants, governance, purpose, market structure and competitive effects.

31. Compliance Framework for HIE Operators

An HIE can reduce competition risks through:

1. Information governance

Separate clinical information from commercially sensitive information.

2. Neutral governance

Avoid allowing dominant healthcare providers to control access rules solely for their own commercial benefit.

3. Non-discrimination

Apply objectively defined access requirements.

4. Interoperability

Maintain reasonable interoperability with competing systems.

5. Data minimisation

Collect and disclose only information necessary for the legitimate purpose.

6. Aggregation

Aggregate competitively sensitive market information wherever possible.

7. Independent administration

Use neutral administrators for competitively sensitive functions.

8. Access safeguards

Establish transparent eligibility and technical-access criteria.

9. Algorithmic governance

Audit ranking and allocation systems for discriminatory exclusion.

10. Merger review

Assess acquisitions involving HIE infrastructure, EHR systems and health-data businesses for foreclosure risks.

32. Conclusion

Health Information Exchanges occupy a potentially critical position at the intersection of healthcare, data infrastructure and competition.

Their economic value derives from connecting otherwise fragmented healthcare participants. But that same network position can create gatekeeper power, information asymmetry, switching costs and network effects.

The principal antitrust risks concern:

information exchange among competitors;

collective control of HIE infrastructure;

refusal to provide access;

interoperability restrictions;

exclusive agreements;

discriminatory access;

self-preferencing;

use of competitor data;

vertical foreclosure;

healthcare consolidation; and

algorithmic coordination.

The cases of Indiana Federation of Dentists, U.S. Gypsum, North Carolina Dental, Surescripts, Bronner, Microsoft, American Express, Phoebe Putney and Butterworth Health collectively demonstrate that the competition analysis must account for both the efficiency value of information infrastructure and its potential use as a competitive bottleneck.

The central principle is therefore:

A health-information exchange should facilitate the flow of information necessary for healthcare without becoming a mechanism through which dominant providers or the exchange operator can control, exclude, or coordinate the competitive activities of healthcare-market participants.