SOEPRA Jurnal Hukum Kesehatan
Vol 12, No 1: Juni 2026

Tinjauan Yuridis Implementasi Aspek Keamanan dan Perlindungan Data pada Rekam Medis Elektronik di Rumah Sakit Berdasarkan PMK Nomor 24 Tahun 2022

Destri Maya Rani (Politeknik Bina Trada Semarang)
Antonius Artanto Endro (Politeknik Bina Trada Semarang)
Eddy Heri Purnomo (Politeknik Bina Trada Semarang)



Article Info

Publish Date
22 Jun 2026

Abstract

Penerapan Rekam Medis Elektronik (RME) merupakan kewajiban hukum bagi fasilitas pelayanan kesehatan sebagaimana diatur dalam Peraturan Menteri Kesehatan Nomor 24 Tahun 2022. Regulasi ini menegaskan tanggung jawab rumah sakit dalam menjamin keamanan dan perlindungan data pasien berdasarkan prinsip confidentiality, integrity, dan availability. Penelitian ini bertujuan untuk mengkaji secara yuridis implementasi aspek keamanan dan perlindungan data RME di RS Sumber Waras Cirebon berdasarkan ketentuan PMK Nomor 24 Tahun 2022. Metode penelitian yang digunakan adalah kualitatif dengan pendekatan yuridis sosiologis melalui wawancara mendalam dengan petugas rekam medis, petugas teknologi informasi, dan penanggung jawab sistem RME, serta studi dokumen. Hasil penelitian menunjukkan bahwa RS Sumber Waras Cirebon telah menerapkan sebagian besar ketentuan keamanan RME, meliputi autentikasi pengguna, kontrol akses berbasis peran, pencatatan audit trail, mekanisme pengaduan, serta sistem pencadangan dan pemulihan data. Namun demikian, masih ditemukan kelemahan pada penerapan autentikasi ganda, enkripsi menyeluruh, dan stabilitas sistem. Penelitian ini menyimpulkan bahwa implementasi RME di RS Sumber Waras Cirebon telah memenuhi kewajiban hukum minimum, tetapi masih memerlukan penguatan aspek teknis dan kebijakan internal guna menjamin perlindungan data pasien secara optimal dan berkelanjutan. Abstract: The implementation of Electronic Medical Records (EMR) is a legal obligation for healthcare facilities as stipulated in Minister of Health Regulation Number 24 of 2022. This regulation emphasizes the responsibility of hospitals in ensuring the security and protection of patient data based on the principles of confidentiality, integrity, and availability. This study aims to examine the legal implementation of EMR security and data protection aspects at Sumber Waras Hospital in Cirebon based on the provisions of PMK Number 24 of 2022. The research method used is qualitative with a sociological legal approach through in-depth interviews with medical record officers, information technology officers, and EMR system administrators, as well as document studies. The results show that Sumber Waras Hospital in Cirebon has implemented most of the EMR security provisions, including user authentication, role-based access control, audit trail logging, complaint mechanisms, and data backup and recovery systems. However, weaknesses were still found in the implementation of double authentication, comprehensive encryption, and system stability. This study concludes that the implementation of RME at Sumber Waras Hospital in Cirebon has met the minimum legal requirements, but still needs to be strengthened in terms of technical aspects and internal policies in order to ensure optimal and sustainable protection of patient data.

Copyrights © 2026






Journal Info

Abbrev

shk

Publisher

Subject

Health Professions Law, Crime, Criminology & Criminal Justice Social Sciences

Description

The Journal focuses on the development of health law in Indonesia: national, comparative and international. The exchange of views between health lawyers in Indonesia is encouraged. The Journal publishes information on the activities of European and other international organizations in the field of ...