<![CDATA[The digital transformation of Indonesia's healthcare sector through telemedicine presents significant challenges regarding patient data protection. Despite the existence of a legal framework—including Law No. 17 of 2023 on Health, Law No. 27 of 2022 on Personal Data Protection, and Minister of Health Regulation No. 20 of 2019—the practical implementation of patient data protection remains ineffective. This study aims to conduct a normative-juridical analysis of patient data protection in Indonesian telemedicine by examining the prevailing regulatory framework and implementation obstacles. The research methodology combines a literature review with a normative-juridical approach and a comparative analysis of international standards, such as GDPR and HIPAA. The findings indicate that while Indonesian regulations have adopted fundamental data protection principles, there are significant weaknesses in oversight, the application of technical security standards, and the enforcement of sanctions. Major data breach incidents—such as the e-HAC and BPJS data leaks—underscore the lack of effective oversight and protection. Institutional, technical, legal-cultural, and bureaucratic hurdles are the primary factors contributing to this ineffectiveness. The study recommends establishing an independent supervisory body, mandating data breach notifications, implementing minimum security standards, enhancing legal literacy, and strictly enforcing sanctions to ensure sustainable and trustworthy patient data protection in telemedicine services.]]>
