<![CDATA[Digital transformation in the healthcare sector has become an important part of health service reform in Indonesia through the implementation of Electronic Medical Records (EMR) under Minister of Health Regulation Number 24 of 2022 concerning Medical Records. Although EMR improves the efficiency and integration of healthcare services, the digitalization of health data also creates risks to the protection of patients’ personal data, particularly for Tuberculosis (TB) patients who are vulnerable to stigma and discrimination if their medical information is disclosed. This research analyzes the implementation of personal data protection for TB patients in the management of EMR at Purbowangi Hospital based on Law Number 27 of 2022 concerning Personal Data Protection. It uses an empirical juridical method with a descriptive-analytical approach, applying statutory and conceptual approaches. Data were collected through library research, documentation studies, and [interviews and field observation], then analyzed qualitatively through legal interpretation and descriptive analysis. The findings show that personal data protection for TB patients has been implemented through role-based access restrictions, user authentication, data encryption, audit trails, and electronic signatures. However, the implementation is not yet optimal due to limited information technology infrastructure, low digital literacy among healthcare workers, and insufficient harmonization between health regulations and personal data protection regulations. This study concludes that protecting TB patients’ personal data is essential not only for cybersecurity but also for protecting privacy rights, human dignity, and human rights in digital healthcare services.]]>
