What is G10 Certification? Mandatory Requirements for Healthcare Data Interoperability using FHIR and SMART on FHIR
WSO2 Healthcare: Achieving G10 Certification with Ease
Summary
G10 certification, mandated by the ONC, requires health IT systems to provide standardized and secure APIs based on FHIR and SMART on FHIR. This critical compliance requirement aims to enhance interoperability and strengthen patient data access.
Details
The Office of the National Coordinator for Health IT (ONC) has set December 31, 2025, as the deadline for mandatory G10 certification. This standard mandates the use of FHIR R4 US Core 3.1.1 profiles, authorization flows based on SMART App Launch 1.0.0, and secure access via OAuth 2.0 and OpenID Connect (OIDC). G10 aims to ensure consistency in API behavior across EHR systems, thereby promoting data portability, third-party app integration, and overall improvement of digital healthcare delivery. The core mechanism involves securing FHIR resource access through the SMART on FHIR framework. The process requires applications to discover endpoints, obtain user consent via an authorization server, exchange codes for tokens, and finally access resources using those tokens. Furthermore, compliance mandates OIDC support, requiring the issuance of a signed ID token containing standard claims like `fhirUser`. Achieving G10 involves coordinating these complex standards (OAuth 2.0, OIDC, FHIR R4) into a seamless and secure flow, necessitating deep technical expertise.
Original content copyright by respective publishers