Digital Care Records and Information Sharing in Colombia: Coordination, Privacy and Continuity of Support

An older person leaves a hospital in Bogotá following treatment for a serious illness. The hospital has recorded the diagnosis, medication changes and rehabilitation recommendations. The person's EPS is involved in arranging subsequent health services, while another IPS may provide follow-up treatment. At home, relatives need to understand what has changed, which appointments are expected and what warning signs require attention.

The information exists, but its usefulness depends on whether the right people can access, understand and act upon it at the right time.

This is one of Colombia's central digital health challenges. Electronic records can improve the availability of clinical information, yet continuity of support extends beyond the systems in which that information is stored. The wider institutional context is explored through the Colombia Aging, Long-Term Care and Community Support Knowledge Hub, which examines how national policy, health services, disability support and community arrangements interact.

Colombia has established a statutory framework for electronic health records and their interoperability. However, the existence of legislation does not mean that every institution operates a fully connected system or that all forms of social and community support are covered by identical information-sharing arrangements.

For older people, persons with disabilities and their families, these distinctions have practical consequences. Information may be incomplete, delayed, difficult to interpret or unavailable to an organization responsible for providing everyday assistance.

The strategic opportunity lies in connecting digital infrastructure with professional responsibilities, lawful information sharing and reliable follow-up. Effective records should support decisions, preserve individual rights and help prevent people from having to reconstruct their care history whenever they encounter a different service.

Why information continuity matters in Colombia's care system

Colombia's Sistema General de Seguridad Social en Salud (SGSSS) brings together institutions with distinct responsibilities for health coverage, service provision, financing and oversight.

Entidades Promotoras de Salud (EPS) are responsible for functions relating to access and management of health services within the applicable system arrangements. Instituciones Prestadoras de Servicios de Salud (IPS) deliver health services, including hospital treatment, outpatient care, rehabilitation and other clinical interventions according to their authorized activities.

The Ministerio de Salud y Protección Social establishes national health policy and regulatory requirements, while departmental, district and municipal health authorities exercise responsibilities within their respective competencies.

Beyond the formal health system, older people and persons with disabilities may receive assistance through residential institutions, Centros Vida, community organizations, privately arranged support and unpaid family caregiving.

These services do not necessarily share the same regulatory status or information infrastructure as an IPS.

A clinical record may document treatment, investigations and professional decisions. A residential support record may describe mobility assistance, personal preferences, daily routines, nutrition or social participation. A family caregiver may maintain appointment details and practical observations without operating a formal digital system.

Each information source serves a different purpose.

Problems arise when the relationship between them is poorly understood. A hospital may provide an accurate discharge document, but a family may not know which service is responsible for arranging rehabilitation. A community organization may observe deteriorating mobility but lack a clear route for communicating concerns to the appropriate health professional.

The aim should not be to combine every record into a single unrestricted database.

Instead, organizations need to identify which information is necessary for particular decisions, who is authorized to receive it and how communication can be completed reliably.

This connects Colombia's experience with the wider principles of coordination across health and social support.

Effective continuity depends on the relationship between information, responsibility and action. A record has limited operational value if the next organization does not know what it is expected to do.

Law 2015 of 2020 and the electronic health record framework

Colombia's Law 2015 of 2020 established the framework for the Historia Clínica Electrónica Interoperable, commonly referred to as the HCEI.

The law provides for the interoperability of electronic clinical histories, seeking to enable relevant health information to be available across authorized parts of the health system while protecting confidentiality and individual rights.

Its significance lies in the distinction between digitization and interoperability.

Digitization means that information is recorded electronically. Interoperability concerns the ability of different information systems to exchange and use information appropriately.

An IPS may maintain detailed electronic clinical records without those records being automatically accessible or usable by another institution.

Interoperability requires agreed technical structures, data definitions, identity arrangements, access controls and institutional responsibilities.

Law 2015 establishes a national legal direction, but the practical implementation of interoperable records depends on subsequent regulation, technical arrangements and institutional adoption.

It would therefore be misleading to describe Colombia as already operating one universally accessible clinical record across every health and care organization.

The framework should also be distinguished from nonclinical social support records. A residential institution or community organization is not automatically incorporated into the HCEI arrangements merely because it supports an older person.

Whether a particular organization has duties under the health information framework depends on its activities, legal status and the applicable requirements.

For health institutions, the operational challenge is to ensure that records are complete, accurate and capable of supporting authorized exchange.

For people receiving care, the intended benefit is greater continuity when moving between professionals and services.

For system leaders, implementation needs to be assessed through actual information availability and use, rather than through the number of organizations reporting that they have electronic record software.

From clinical documentation to meaningful interoperability

Colombia's digital health development builds upon existing requirements for clinical records, information management and the exchange of health information.

Resolution 1995 of 1999 established important rules concerning the management of clinical histories, including their confidentiality, custody and documentation. These obligations remain part of the legal context, subject to subsequent developments and applicable provisions.

Law 2015 of 2020 introduced a more explicit framework for interoperable electronic clinical histories.

Resolution 866 of 2021 addressed the Conjunto de Elementos de Datos Clínicos Relevantes para la Interoperabilidad, a set of relevant clinical data elements intended to support interoperability within the applicable framework.

These developments illustrate that interoperability requires agreement about what information is exchanged, not simply the technical ability to transmit a file.

A hospital and an outpatient provider may both record medication information, but their systems may use different terminology, classifications or data structures.

Without common definitions, a receiving professional may need to interpret information manually, increasing workload and creating opportunities for misunderstanding.

Interoperability therefore involves several connected requirements:

  • Clinical meaning: information needs to be sufficiently standardized for receiving professionals to understand its significance.
  • Reliable identification: records must be associated with the correct person and relevant encounter.
  • Technical compatibility: systems need appropriate methods for exchanging and processing information.
  • Lawful access: information must be available only to people and institutions with an appropriate basis for using it.
  • Operational accountability: organizations need to know who is responsible for reviewing, correcting and acting upon shared information.

The practical importance of these requirements becomes apparent during transitions between services.

A technically successful exchange may still be inadequate if a receiving team cannot distinguish current medication from discontinued treatment or cannot identify who is responsible for follow-up.

Organizations examining similar questions can use the Digital Transformation, AI and Cybersecurity Readiness Assessment to structure an initial review of information systems, organizational preparedness and digital risks. It is a general management resource rather than a Colombian interoperability certification instrument.

The more meaningful measure of progress is whether authorized professionals can obtain dependable information and use it to improve decisions.

Illustrative scenario: hospital discharge and rehabilitation in Bogotá

Consider a hypothetical 79-year-old woman who is discharged from a hospital in Bogotá after treatment for a hip fracture.

She requires medication review, rehabilitation and assistance with mobility. Her daughter will provide support at home, but the family is uncertain about the timing of follow-up appointments and the equipment that may be needed.

The hospital's clinical team prepares the discharge information, including the diagnosis, relevant treatment, medication instructions and recommendations for continued care.

Through the applicable EPS and IPS arrangements, subsequent services need to be organized according to the woman's clinical needs and the relevant health system processes.

The operational difficulty emerges when the receiving rehabilitation provider cannot immediately access all the information required to understand her recent treatment.

Rather than assuming that electronic documentation has automatically completed the handover, the receiving team identifies the missing information and seeks clarification through an authorized channel.

The hospital and receiving service establish which clinical details are necessary, while the woman and her daughter receive explanations of the rehabilitation plan and the responsibilities of the organizations involved.

The daughter's involvement is guided by the woman's preferences and the applicable confidentiality requirements.

During the first rehabilitation appointment, the professional discovers that the woman has misunderstood a mobility precaution. The team clarifies the advice and ensures that the relevant information is reflected in the ongoing clinical documentation.

The institutions subsequently review whether the communication difficulty resulted from a technical exchange problem, incomplete discharge documentation or uncertainty about responsibility.

The scenario demonstrates that continuity requires more than transmitting a discharge summary. Information must be accurate, available, understood and translated into timely professional action.

For the woman, success means receiving coherent support without repeatedly explaining her medical history or experiencing avoidable delays.

Privacy, confidentiality and the legal boundaries of information sharing

Greater connectivity creates opportunities for better care, but it also increases the importance of protecting personal information.

Colombia's Constitution recognizes fundamental protections concerning privacy and personal information. Law 1581 of 2012 establishes the general personal data protection regime, while Law 1266 of 2008 concerns particular aspects of habeas data, especially financial, credit and related information.

Health information is sensitive personal data under Colombia's data protection framework. Its collection, processing, storage and disclosure require careful attention to the applicable legal conditions and safeguards.

Clinical histories also carry specific confidentiality and custody obligations under the health-sector framework, including Resolution 1995 of 1999 and subsequent applicable provisions.

The Superintendencia de Industria y Comercio exercises important personal data protection functions within its legal competence. Health-sector authorities and oversight institutions have distinct responsibilities concerning health services and applicable clinical requirements.

These responsibilities should not be confused. A clinical quality concern, an unauthorized disclosure of personal information and a dispute about access to health services may require different institutional responses.

In practice, information sharing should begin by establishing the purpose of the disclosure and the legal basis for processing the information.

Consent is important, but it is not the only possible legal basis in every circumstance. Nor does a general statement that information is being shared for care purposes automatically authorize unrestricted access.

Applicable statutory obligations, professional duties, individual rights and the specific circumstances of the disclosure must be considered.

The distinction is particularly important where information moves between an IPS and a nonclinical residential or community organization.

A residential support employee may need to understand that someone requires assistance with mobility or has particular communication needs. That does not necessarily mean the employee requires access to the person's complete clinical history.

Organizations should establish proportionate information-sharing arrangements that protect confidentiality while ensuring that necessary support can be delivered.

This approach reflects the broader principles of privacy, confidentiality and personal data protection.

Records should also be protected against inappropriate alteration, accidental loss and unauthorized access. These are operational requirements as well as technical concerns.

A secure system cannot compensate for employees sharing passwords, sending clinical documents to inappropriate recipients or discussing sensitive information where others can overhear.

Consent, legal capacity and the rights of people receiving care

Digital information sharing must preserve the position of the person whose information is being processed.

Older age, disability or reliance on family support does not automatically remove a person's right to participate in decisions about their information.

Colombia's Law 1996 of 2019 is particularly relevant because it recognizes the legal capacity of adults with disabilities and establishes arrangements concerning supports and safeguards for exercising that capacity.

Its implications extend beyond formal legal transactions. Organizations need to avoid assuming that a relative can automatically authorize disclosure or make decisions merely because the individual has a disability or experiences communication difficulties.

Where a person requires assistance understanding information, the appropriate response may involve accessible explanations, communication support or other arrangements consistent with the applicable legal framework.

For digital records, this means explaining how information will be used in a way the individual can understand.

A person who uses augmentative communication may need additional time to consider a proposed disclosure. Someone with hearing loss may require written information or an accessible communication method.

Where formal supports or representation arrangements are relevant, their actual scope and legal authority need to be established rather than presumed.

These considerations connect electronic information systems with rights, consent and decision-making.

Good practice also distinguishes between involving relatives in care discussions and granting them unrestricted access to sensitive records.

Family members may play an essential role in arranging appointments, supporting treatment and monitoring changes in wellbeing. Their contribution should be recognized without displacing the individual's preferences or overlooking confidentiality.

The objective is not to create unnecessary administrative barriers to family participation.

It is to ensure that information sharing is proportionate, legally appropriate and respectful of the person receiving support.

Illustrative scenario: disability support and information sharing in Medellín

Consider a hypothetical 34-year-old man in Medellín who has an intellectual disability and receives outpatient health care alongside support from a community organization.

He experiences occasional difficulties understanding changes to medication and relies on accessible explanations to make informed decisions.

Following a clinical appointment, his sister asks the community organization to obtain his complete medical record so that employees can monitor his treatment.

The organization's coordinator recognizes that employees need appropriate information to support his daily routine, but that access to the entire clinical history may be unnecessary.

The coordinator first discusses the situation with the man, using communication methods that support his understanding. He explains that he wants employees to know when his medication schedule changes but does not want unrelated medical information circulated.

The organization establishes which practical information is needed, whether disclosure is legally appropriate and how it can be obtained through the relevant authorized process.

The treating IPS remains responsible for clinical decisions and the applicable requirements governing clinical information.

The community organization does not independently reinterpret prescriptions or assume a clinical role. Instead, it supports the man to understand the instructions and identifies the appropriate professional contact if clarification is required.

Employees receive the information necessary for their actual responsibilities, subject to the applicable legal arrangements.

The organization also establishes how subsequent changes will be communicated, reducing dependence on informal messages between relatives and individual employees.

The man's sister remains involved to the extent he wishes and the law permits, but her involvement does not automatically replace his decision-making authority.

The scenario illustrates that effective information sharing is not measured by how much information an organization can obtain.

It is measured by whether the correct information supports the person's choices, safety and continuity without unnecessary intrusion into private matters.

Digital records in residential care and community support

Colombia's long-term support arrangements extend beyond the formal clinical record system.

Residential institutions for older people, community programs and organizations providing disability-related assistance may maintain records covering attendance, personal support, activities, incidents, family contacts and changes in everyday functioning.

Their documentation requirements depend on their legal status, the services they provide and the applicable regulatory framework.

Law 1315 of 2009 establishes minimum conditions for specified residential institutions serving older people. Law 1276 of 2009 addresses Centros Vida and related support arrangements.

Neither should be interpreted as making every residential or community organization an IPS or automatically subjecting all its records to the same technical interoperability requirements as clinical histories.

Nevertheless, nonclinical records can contain information that is highly relevant to health and wellbeing.

A care employee may notice that an older resident is eating less, becoming increasingly confused or experiencing repeated difficulties with mobility.

Such observations can support timely clinical assessment when communicated appropriately.

Conversely, a hospital discharge plan may be difficult to implement if a residential organization does not understand the person's new assistance needs.

Organizations therefore need a clear distinction between recording observations and making clinical judgments.

A support worker can document that a resident has declined meals, appeared unusually tired or required more assistance than normal. The worker should not record an unsupported medical diagnosis as though it had been established by a qualified professional.

The record should identify what was observed, when it occurred, what action was taken and which appropriate professional or responsible person was contacted.

Where clinical information is received, employees should understand its relevance to their responsibilities and the restrictions on its further disclosure.

This is an important application of data governance and information accountability.

Digital software may improve the consistency and accessibility of these records, but introducing software does not automatically establish an effective documentation culture.

Managers still need to consider whether employees have time to record meaningful information, whether entries are accurate and whether concerns reach someone able to respond.

Where resources are limited, a reliable, appropriately protected paper-based process may be safer than a poorly implemented digital system. The longer-term objective should be proportionate modernization that strengthens rather than disrupts existing support.

Illustrative scenario: residential care records and deteriorating health in Cartagena

Consider a hypothetical residential institution in Cartagena supporting a 76-year-old woman with several long-term health conditions.

The institution maintains digital records of her daily assistance, mobility, nutrition and general wellbeing. Clinical treatment is provided through separate health services under the relevant EPS and IPS arrangements.

Over several days, employees record that the woman is eating less, becoming increasingly tired and needing additional assistance to move around the building.

Each observation appears relatively minor when viewed separately. However, the institution's coordinator notices the pattern during a review of the records.

The coordinator arranges an appropriate clinical assessment through the relevant health service pathway and ensures that the observations are communicated accurately.

The treating professional receives a concise account of the changes, including their timing and progression, rather than an unsupported diagnosis.

Following assessment, the institution receives relevant instructions for the support it is responsible for delivering. Clinical information is handled according to the applicable confidentiality requirements.

The coordinator then reviews whether employees understand the instructions and whether the woman's support arrangements need adjustment.

During the following week, records show whether her condition is improving and whether additional concerns require professional attention.

The institution subsequently examines whether its digital recording system made the developing pattern sufficiently visible.

It discovers that observations were being entered consistently, but there was no reliable process for drawing repeated changes to a supervisor's attention.

The organization therefore strengthens its internal review arrangements rather than purchasing additional software immediately.

The scenario demonstrates that the value of digital records depends on how information informs decisions.

Accurate documentation supported early recognition, but continuity improved because employees understood when to escalate concerns and who held responsibility for responding.

Workforce capability and the realities of digital implementation

Digital record systems change how professionals and support employees organize their work.

They may reduce repeated transcription, make relevant information easier to locate and support communication between services.

However, poorly designed systems can also increase administrative demands, duplicate existing documentation and divert time from direct interaction with people receiving care.

In Colombia, digital capability varies between institutions and territories. Larger health organizations may have established information technology teams and specialist support, while smaller providers may depend on external suppliers or employees with limited technical training.

The workforce challenge is therefore not simply whether employees can enter information into a computer.

They need to understand the purpose of documentation, the importance of accuracy, the limits of their professional responsibilities and the consequences of inappropriate disclosure.

Clinical professionals must be able to distinguish between information that has been verified and information supplied by another source.

Support employees need to recognize when a recorded observation requires escalation rather than remaining as an isolated note.

Managers need sufficient knowledge to examine system failures, access permissions and documentation quality.

Training should reflect these different responsibilities.

For example, an employee responsible for daily support may need instruction in factual recording, confidentiality and incident escalation. A clinical professional may require additional training concerning structured data, professional documentation standards and interpretation of information received from another institution.

Supervision should examine whether these skills are applied in practice.

Digital systems can also create new forms of inequality within the workforce. Employees with limited digital experience may need additional support, while excessive documentation requirements can place particular pressure on services already operating with constrained staffing.

The stronger implementation approach involves employees in system design, tests workflows before wider adoption and reviews whether documentation improves care rather than merely increasing recorded activity.

Territorial variation, digital exclusion and the limits of connectivity

Colombia's geography creates significant differences in the practical conditions under which digital information systems operate.

Institutions in major cities may have relatively established connectivity, technical support and opportunities to recruit specialist personnel. In rural and remote areas, reliable internet access, equipment maintenance and technical assistance can be more difficult to secure.

These differences are especially relevant in departments containing dispersed populations, challenging transport routes or communities located far from specialist health facilities.

Digital interoperability cannot be evaluated independently of these conditions.

A system that requires uninterrupted connectivity may be unsuitable for a service operating in an area where communications are unreliable. A technically advanced application may offer limited value if employees cannot obtain timely assistance when it stops functioning.

For some organizations, implementation may require arrangements that allow information to be recorded securely during connectivity interruptions and synchronized when an appropriate connection becomes available.

Any such arrangement would need suitable controls to prevent data loss, duplication, unauthorized access and conflicting versions of records.

Territorial planning should also consider the needs of Indigenous and Afro-Colombian communities, without assuming that their circumstances or preferences are uniform.

Language accessibility, local participation, cultural expectations and community relationships may influence how information is explained and how people engage with digital services.

Information systems should support these differences rather than requiring every community to conform to a single communication model.

This is particularly important where older people or persons with disabilities have limited access to digital devices or depend on others to navigate online services.

The principles of digital inclusion and equitable access therefore need to influence both system design and local implementation.

Digital modernization should not make essential care dependent on a person's ability to own a smartphone, understand an application or maintain internet access.

Where necessary, accessible assistance and alternative communication arrangements should remain available.

Illustrative scenario: coordinating information in rural Nariño

Consider a hypothetical older man living in a rural municipality in Nariño who receives treatment for diabetes and requires periodic specialist assessment.

His local health service maintains clinical information, but specialist appointments take place in a larger urban center. Travel is difficult, and his daughter frequently assists with appointment arrangements.

Following a specialist consultation, the man returns home with changes to his treatment plan. However, intermittent connectivity delays the local service's access to the updated information.

The local IPS recognizes that the difficulty cannot be resolved simply by assuming that the electronic record will become available immediately.

Staff use an appropriate authorized communication route to obtain the necessary clinical information and clarify the treatment instructions.

The professional responsible for the man's ongoing care verifies the relevant changes before updating local documentation and explaining the plan to him.

His daughter participates with his agreement, but the team ensures that he receives an explanation he can understand rather than relying entirely on family communication.

The service records the delay and examines whether similar problems affect other patients who attend specialist appointments outside the municipality.

Its review identifies a recurring difficulty involving connectivity and inconsistent arrangements for communicating time-sensitive changes.

Management subsequently develops clearer contingency procedures for obtaining essential information when electronic exchange is temporarily unavailable.

These procedures distinguish between routine administrative delays and situations where missing information could create an immediate clinical risk.

The case illustrates why interoperability needs to include operational resilience.

A connected national information environment offers important opportunities, but continuity still depends on the ability of local services to respond safely when technology or infrastructure is unavailable.

Information security, suppliers and organizational responsibility

As health and care organizations become more dependent on digital records, information security becomes part of everyday service continuity.

Unauthorized access, ransomware, accidental deletion and system outages can affect confidentiality and the availability of information required for care.

These risks are not limited to large hospitals. Smaller IPS, residential institutions and community organizations may also hold sensitive personal information or depend on external software providers.

Organizations need to understand which information they hold, where it is stored, who can access it and what would happen if the system became unavailable.

Where an external supplier provides record management or cloud services, contractual arrangements should address the supplier's actual responsibilities, applicable data protection requirements, access management, incident notification and the secure return or disposal of information.

The allocation of responsibilities depends on the specific processing arrangement. Outsourcing a technical function does not automatically eliminate the organization's legal or professional obligations.

For clinical institutions, information security arrangements also need to support the applicable requirements concerning clinical histories and health information.

Practical controls may include:

  • Individual access credentials and permissions appropriate to employees' responsibilities.
  • Processes for reviewing access when employees change roles or leave an organization.
  • Secure backup arrangements and tested procedures for recovering essential information.
  • Clear responses to suspected unauthorized disclosure, data loss or cyber incidents.
  • Appropriate supplier oversight and documented responsibilities for technical support.

These measures need to be proportionate to the institution's activities, information risks and applicable legal requirements.

Security also requires a culture in which employees can report concerns promptly.

An employee who accidentally sends information to the wrong recipient should understand how to escalate the incident without delay. Concealing the error may increase harm and prevent the organization from taking appropriate protective action.

Digital governance therefore connects technical safeguards with leadership, employee competence and organizational learning.

Measuring whether digital records improve continuity and outcomes

The effectiveness of digital records should not be judged solely through software deployment, expenditure or the number of electronic documents created.

Those measures describe implementation activity. They do not establish whether information sharing improves the experience of people receiving services.

More meaningful evaluation considers whether authorized professionals receive the information they need, whether handovers are completed and whether avoidable duplication or delays are reduced.

For an older person moving between hospital and community support, a useful outcome may be that the receiving service understands the agreed rehabilitation plan without requiring repeated assessments caused by missing information.

For a person with a disability, improvement may mean that communication preferences are recognized consistently across relevant services.

For a rural patient, it may mean that treatment information reaches the local IPS in time to support safe follow-up.

Organizations can examine the relationship between digital records and service outcomes through indicators such as:

  • Availability of essential information at the point of a clinical or support decision.
  • Completeness and accuracy of relevant transfer and discharge documentation.
  • Delays attributable to missing, inaccessible or inconsistent information.
  • Frequency and consequences of duplicate documentation or repeated assessments.
  • Reported privacy incidents, inappropriate access and information security failures.
  • Experiences of people and families concerning communication and continuity.

These are suggested measures for organizational improvement, not a claim that Colombia applies one mandatory national dashboard covering every health and social support organization.

The Quality Dashboard Builder offers a general framework for organizing performance indicators and examining trends. Any measures adopted by Colombian institutions would need to reflect their actual responsibilities and applicable reporting requirements.

Quantitative indicators should also be interpreted alongside individual experiences.

A technically successful information transfer may still leave a family confused about who is responsible for arranging the next appointment. A record may be complete but difficult for the receiving professional to interpret.

Organizations should therefore examine not only whether information moved, but whether it supported the intended decision.

Where recurring problems emerge, the Quality Improvement Action Plan Builder can help leaders structure improvement responsibilities, actions and review arrangements. It is not a substitute for Colombia's clinical, regulatory or data protection requirements.

Effective governance closes the gap between recorded activity and practical improvement.

The future of interoperable care information in Colombia

Colombia's development of interoperable electronic clinical histories provides an important foundation for strengthening information continuity.

However, the long-term opportunity extends beyond connecting existing software platforms.

It involves establishing reliable relationships between information standards, professional practice, institutional responsibilities and the needs of people receiving care.

National policy can define technical and legal expectations. EPS and IPS need to implement applicable requirements within their actual functions. Territorial institutions can identify local barriers and contribute within their competencies.

Residential and community support organizations also have a role, although their responsibilities should not be confused with those of regulated clinical providers.

As digital systems develop, the distinction between clinical information and everyday support information will remain important.

There may be opportunities to improve communication across these boundaries through appropriately governed arrangements. However, the creation of broader information-sharing mechanisms should not be assumed to be an established national system where no such arrangement has been demonstrated.

Future development should also recognize the changing needs of Colombia's aging population.

Older people living with multiple conditions may interact with several professionals and organizations over extended periods. People with disabilities may require consistent communication arrangements across health, rehabilitation, employment and community settings.

These experiences create a strong rationale for improving continuity without unnecessarily expanding access to sensitive personal information.

Artificial intelligence and automated data analysis may eventually help organizations identify missing information, inconsistent records or patterns requiring professional attention.

Such applications should be treated as emerging possibilities requiring careful evaluation, appropriate safeguards and human oversight, rather than as substitutes for professional judgment.

The broader international lesson is that interoperability succeeds when institutional arrangements support its practical use.

Technical standards are necessary, but they cannot independently resolve unclear responsibilities, fragmented service pathways or unequal access to infrastructure.

For Colombia, the strongest direction is a coordinated approach in which national digital ambitions are matched by realistic local implementation, workforce capability and continuing protection of individual rights.

Conclusion

Digital care records have the potential to strengthen continuity across Colombia's health and support arrangements, particularly for older people and persons with disabilities who interact with multiple services.

Law 2015 of 2020 establishes an important framework for interoperable electronic clinical histories, while existing clinical documentation and personal data protection requirements provide essential safeguards.

However, the effectiveness of this framework depends on implementation. Electronic information must be accurate, accessible to appropriately authorized professionals and sufficiently meaningful to support decisions.

The distinction between clinical records and nonclinical support documentation remains fundamental. EPS, IPS, territorial authorities, residential institutions and community organizations operate within different responsibilities, and information-sharing arrangements need to reflect those differences.

For people receiving care, successful coordination should mean fewer unnecessary repetitions, clearer responsibilities and more reliable follow-up. It should also preserve privacy, autonomy and the ability to participate in decisions about personal information.

Colombia's territorial diversity makes practical implementation particularly important. Connectivity, workforce competence, institutional resources and accessible communication will influence whether digital modernization delivers equitable benefits.

The strongest forward direction is therefore not simply to increase the volume of electronic information exchanged. It is to build systems and professional practices that connect reliable information with timely, accountable action.

National legislation can establish the foundations for interoperability, but continuity is ultimately experienced locally: when a professional receives the right information, when a support organization understands its responsibilities and when a person can move between services without losing the coherence of their care.

That is the measure by which Colombia's progress toward more connected health and care information should be assessed.