Specialty EHR & IT

Antimicrobial stewardship EHR reporting that holds up

Nobody argues about antimicrobial stewardship any more. The argument is about where the numbers come from, and it is usually settled by whoever is willing to export a spreadsheet every month.

9 min read
September 8, 2026
Updated September 8, 2026
Antimicrobial stewardship EHR reporting that holds up
Quick answer
Antimicrobial stewardship EHR reporting

Antimicrobial stewardship EHR reporting means getting antimicrobial use and resistance data out of the record and into NHSN in a standard format, automatically. The clinical programme is well defined. What stops most organisations is that the data sits across pharmacy, lab and ADT systems that were never asked to agree.

Stewardship has a clear playbook and a messy data supply.

CDC sets out seven core elements for a hospital programme — leadership commitment, accountability, pharmacy expertise, action, tracking, reporting and education — and the tracking element asks organisations to “monitor antibiotic prescribing, impact of interventions, and other important outcomes, like C. difficile infections and resistance patterns.” None of that is contentious. All of it assumes you can get the numbers.

In practice the numbers live in three places that do not naturally speak to each other: the pharmacy system knows what was dispensed, the electronic medication administration record knows what was given, and the laboratory system knows what grew and what it was sensitive to. Stewardship reporting is the work of making those three agree about the same patient on the same day.

Healthcare IT consulting perspective
The RealityStewardship is a reporting problem before it is a clinical one
⚠️
The Problem
The data is in three systems and one spreadsheet.
Pharmacy, eMAR and lab each hold part of the picture, and the monthly report is assembled by a person who is very good at it and eventually leaves.
🔧
The Solution
Submit from the source, on a schedule.
Map the feeds once, submit in the standard format NHSN accepts, and check the acknowledgement rather than assuming it.
✅
The Resolution
Numbers the committee can argue with.
Consistent denominators, comparable months, and a resistance picture that reflects the lab rather than last year’s summary.

The AUR module and what NHSN actually wants

Antimicrobial use and resistance reporting goes to CDC’s National Healthcare Safety Network through its AUR module, and it is not a spreadsheet upload. It expects a structured electronic submission generated from your systems.

The standard is specific, and specifically dated. ONC lists the named implementation guide for reporting antimicrobial use and resistance to public health agencies as the HL7 CDA Release 2 Healthcare Associated Infection Reports guide, and adds a warning worth reading twice: “While there are more current releases of the Healthcare Associated Infection Reports IG, they are not valid for AU or AR submissions to NHSN.” Newer is not better here. Newer is rejected.

That single sentence explains a category of stalled projects. A vendor upgrades to the current release of a guide, the submission stops validating, and the failure surfaces months later as a gap in the data rather than as an error anybody saw.

The condition of participation, read properly

Hospitals have a regulatory obligation here, and it is more specific than most summaries suggest. The Medicare condition of participation requires an antibiotic stewardship programme that demonstrates “coordination among all components of the hospital responsible for antibiotic use and resistance,” and that the hospital document the evidence-based use of antibiotics in all departments and services and document improvements, including sustained improvements, in proper antibiotic use.

Two words in that do real work. “All” means the programme cannot be a medicine-floor exercise. “Sustained” means a single good quarter is not the evidence being asked for. Both are documentation requirements before they are clinical ones, and both are answered by a reporting pipeline rather than by a policy.

Key takeaway
  • The regulation asks you to document improvement over time across every service. That is a longitudinal, organisation-wide dataset. You cannot produce it retrospectively from a programme that was tracking in a spreadsheet.

Days of therapy, not prescriptions counted

The measure that matters is exposure, not orders. Days of therapy counts each antimicrobial a patient receives on each day, so a patient on two agents for three days contributes six. It is normalised against patient days to make wards and months comparable.

This is where the eMAR earns its place. An order that was written and never given is not therapy, and a system counting orders will overstate use in exactly the units the committee is trying to reduce. If your data comes from pharmacy dispensing rather than administration, say so on the report, because the two are not interchangeable and the difference is not constant.

Practices moving from manual counting to an automated feed should expect the numbers to move, sometimes substantially. That is not the new system being wrong. It is usually the first time anyone measured the denominator consistently.

Clinical and IT staff reviewing antimicrobial stewardship EHR reporting configuration
Submission failures are silent. NHSN returns a report either way, and a practice that never opens it can spend a year believing it is reporting.

Your antibiogram is a data-quality report

A cumulative antibiogram summarises which organisms were isolated and what they were susceptible to. Clinicians read it to choose empiric therapy, which makes it the most consequential report the laboratory produces.

It is also the most revealing test of your data. Duplicate isolates from the same patient inflate resistance. Missing organism identifiers break the grouping. Surveillance cultures mixed in with clinical ones change the picture. If the antibiogram looks implausible to the infectious disease physicians, the fault is almost always upstream of the report, and finding it is the same work as preparing to submit AR data.

Treat building the antibiogram as the pilot for the submission rather than as a separate task. Where several source systems have to be reconciled, a dedicated interface layer gives you one place to fix a mapping instead of three.

Qventive Healthcare

Not sure whether your AUR submission is actually landing?

We check what your systems send, what NHSN returns, and where the feed is failing quietly, then hand you written findings.

Getting prescribing data out without a project

Not every organisation is a hospital submitting to NHSN, and an outpatient infectious disease practice still needs to see its own prescribing data. The useful starting point is smaller than people expect: antimicrobial orders by clinician, by agent, by indication where it is recorded, over a rolling quarter.

That report exists in every certified system. What stops it being useful is usually that indication is captured as free text, so the most interesting cut is unavailable. Fixing that is a template change rather than an integration, and it is worth doing before anything more ambitious — usually alongside rebuilding the ordering workflow around it.

  • Start with the acknowledgement. If you already submit, check that NHSN is accepting it. Silence is not success.
  • Pin the implementation guide version. Write down which release you validate against and who is told before it changes.
  • Count administrations, not orders. Or state clearly that you are not.
  • Build the antibiogram first. It surfaces the same data faults at a fraction of the effort.

Qventive provides antimicrobial stewardship EHR reporting services in Hackensack NJ and across the surrounding counties, usually as part of our infectious disease EHR and IT support and a broader infectious disease practice management engagement. Because these feeds move identifiable clinical data between systems and out to a public health agency, the design belongs in your HIPAA risk analysis alongside the clinical plan.

Stewardship reporting: common questions

Do we have to submit AUR data, or is it optional?
It depends on what programme you are participating in and what kind of organisation you are, which is why this question produces so much confusion. For hospitals in the Medicare promoting interoperability programme, active engagement with NHSN to submit antimicrobial use and resistance data has been one of the public health reporting measures, with defined exclusions for organisations that lack the underlying systems — an electronic medication administration record with barcode administration, a laboratory information system, or an admission-discharge-transfer system. Separately, the condition of participation requires an antibiotic stewardship programme and the documentation that goes with it, which is a different obligation from the reporting measure. The practical answer is to confirm your own position against the current programme specification for the reporting period you are in, rather than relying on what was true two years ago, because both the measures and the exclusions have moved.
How long does an AUR submission take to stand up?
The technical work is usually a few months rather than a few weeks, and the reason is rarely the interface itself. It is the data mapping underneath. Antimicrobials have to map to the right codes, administration records have to be complete enough to count days of therapy accurately, organism and susceptibility results have to carry consistent identifiers, and patient days have to come from somewhere defensible. Each of those is a conversation with a different department. The organisations that move fastest are the ones that treat the first submission as a test rather than a launch: send a month, read what comes back, fix what failed, send it again. The ones that stall are the ones that try to perfect the mapping before sending anything, because the errors you most need to see only appear once real data meets the validator.
What are the HIPAA implications of public health surveillance reporting?
Public health reporting has a recognised basis, but that does not make the pipeline exempt from the ordinary questions, and those questions are frequently unasked because the project is framed as a compliance obligation rather than as a data flow. What exactly is being transmitted, and is it the minimum necessary for the purpose rather than a whole-record extract because that was easier to configure. Is the transport encrypted and authenticated at both ends. Who inside the organisation can access the staging data, which often sits on a server nobody has reviewed. Are the intermediate files deleted after submission or accumulating quietly. Does the feed appear in your system inventory and your risk analysis. In our engagements the staging area is usually the weak point — not the submission itself, but the months of extracts sitting beside it.
Can an outpatient practice do meaningful stewardship without NHSN?
Yes, and for most outpatient practices NHSN is not the relevant mechanism at all. CDC publishes core elements for outpatient antibiotic stewardship as a separate framework, and the work it describes is achievable with reporting a practice already owns. The high-value starting point is prescribing by clinician for the conditions where guidance is clearest, reviewed as a group rather than individually at first, because the conversation goes better when nobody is singled out in the first meeting. What makes this hard is almost never the analysis and almost always that indication is not captured in a structured field, so you can count prescriptions but cannot say what they were for. Fix the template, run the report for a quarter, and you will have a more useful picture than most organisations get from a much larger project.
What happens when the implementation guide version changes?
Someone has to own that question in advance, because the failure mode is silent. Submissions validate against a specific release, and a newer release of the same guide is not automatically accepted — ONC’s own listing warns that more current releases of the healthcare associated infection reports guide are not valid for these submissions. So a well-meant vendor upgrade can stop your data being accepted without anybody receiving an error they recognise as important. Three things prevent it. Record which release you validate against, in writing, somewhere other than the head of the person who built the feed. Name who must be consulted before any change to that component. And read the acknowledgement report on a schedule rather than when someone asks, because that report is the only place a rejection reliably shows up.
Ready when you are

Let’s meet

Qventive works with infectious disease programmes across New Jersey on surveillance feeds, antibiogram data quality and reporting. Thirty years healthcare-exclusive, from our office in Hackensack.

Sources
  1. Seven core elements of hospital antibiotic stewardship, including the tracking element. cdc.gov
  2. Condition of participation requiring coordination, documentation of evidence-based antibiotic use in all departments, and sustained improvement. ecfr.gov
  3. Named HL7 CDA implementation guide for AU and AR reporting, and the warning that newer releases are not valid. isp.healthit.gov
Qventive Healthcare
Healthcare IT consulting and managed services, healthcare-exclusive since 1994. 200 Passaic Street, Hackensack, New Jersey. We serve as a business associate to the practices we support.
AI Assistant Online

Schedule a Consultation

Fill out the form below and we'll get back to you within 24 hours.

Request Sent!

We've received your request and will be in touch within 24 hours.

Something went wrong