Patient Data Protection Compliance Model in Electronic Medical Record Systems Following the Implementation of the Personal Data Protection Law in Indonesia
DOI:
https://doi.org/10.31941/pj.v25i1.7364Keywords:
Electronic Medical Records, Personal Data Protection, Legal Compliance, GDPR, HIPAA.Abstract
The implementation of Electronic Medical Records (EMR) in Indonesia has undergone significant development with the enactment of Minister of Health Regulation No. 24 of 2022. However, the main challenge in implementing EMR is the protection of patient personal data, which remains suboptimal. This study aims to analyse the management of personal data in the EMR system in Indonesia, compare national regulations with international standards, and formulate a compliance model that can improve the protection of patients' personal data. The method employed in this study is a normative juridical approach, which examines legislation, legal documents, and compares them with international standards, such as the GDPR and HIPAA. The results of the study indicate that, despite Indonesia's existing strong regulations on personal data protection, significant gaps remain in medical data management, particularly in areas such as audit trails, data security, and law enforcement. This study proposes a compliance model that incorporates the implementation of strict audit trails, enhanced data security through encryption, and more stringent law enforcement to ensure compliance with applicable regulations. In conclusion, collaboration among the government, the private sector, and healthcare facilities is essential to enhance the implementation of secure Electronic Medical Records that comply with Indonesia's personal data protection regulations.
Downloads
References
Budiyanti, R. T., Herlambang, P. M., Fuad, A., & Kusumastuti, W. (2023). Integration of electronic medical record and SATUSEHAT’s platform: Patient’s legal protection perspective. International Journal of Health Literacy and Science, 1(2). https://doi.org/10.60074/ihelis.v1i2.18
Darmadi, A. (2023). Theory and Practice of Normative Legal Research. Jakarta: Erlangga.
Hossain, K., Sutanto, J., Handayani, P. W., Haryanto, A., Bhowmik, J., & Frings-Hessami, V. (2025). An exploratory study of electronic medical record implementation and record-keeping culture: The case of hospitals in Indonesia. BMC Health Services Research, 25, Article 249. https://doi.org/10.1186/s12913-025-12399-0
Indonesia. (2022). Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection. LN 2022/No.196.
Indonesia. (2009). Law of the Republic of Indonesia Number 36 of 2009 concerning Health. LN 2009/No.144.
Indonesia. (2022). Regulation of the Minister of Health of the Republic of Indonesia Number 24 of 2022 concerning Electronic Medical Records. BN 2022/No.829.
Indra, A., Dewi, S., & Wibowo, A. (2024). The legal implications of patient privacy violations in electronic medical records in Indonesia. Journal of Health Policy and Legal Studies, 8(1), 113-127.
Izza, A., & Lailiyah, S. (2024). Literature review: Overview of the implementation of electronic medical records in Indonesian hospitals based on Minister of Health Regulation (Permenkes) No. 24/2022 concerning Medical Records. Media Gizi Kesmas, 13(1), 549–562.
Juliansyah, R., Aqid, B. M., Salsabila, A. P., & Nurfiyanti, K. (2024). Implementation of EMR system in Indonesian health facilities: Benefits and constraints. ArXiv Preprint. https://arxiv.org/abs/2410.12226
Lestari, A. Y., Misran, M., Raharjo, T., Annas, M., Riskanita, D., & Prabandari, A. P. (2024). Improving healthcare patient data security: An integrated framework model for electronic health records from a legal perspective. Law Reform: Journal of Law and Policy, 20(2). https://doi.org/10.14710/lr.v20i2.56986
Komalasari, R., & Mustafa, C. (2024). Electronic health records in Indonesia: A law- , and policy analysis. Jurnal Mahkamah Keadilan, 2(1). https://doi.org/10.15366/jmk.v2i1.311
Kusumah, H. (2021). Legal Research Methodology. Jakarta: Rajawali Pers.
Marzuki, P. M. (2019). Legal Research (Revised Edition). Jakarta: Kencana.
Mishra, V., Gupta, K., Saxena, D., & Singh, A. K. (2024). A global medical data security and privacy-preserving standards identification framework for electronic healthcare consumers. ArXiv Preprint. https://arxiv.org/abs/2410.03621
Rohman, R. (2020). Legal implications of patient data privacy in electronic health records: Challenges and opportunities in Indonesia. Journal of Health Law, 12(3), 67-84.
Siregar, R. A., & Astuti, N. K. (2025). Assessing legal and institutional readiness for patient data protection in the age of big health data: An empirical study of health facilities in Indonesia. International Journal of Law, Policy and Social Review, 7(3), 15-21.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Elsy Nur Anggraeni Elsy, Dey Ravena, Aslan Noor
This work is licensed under a Creative Commons Attribution 4.0 International License.
