The digital transformation of the healthcare sector in Indonesia is driving the use of electronic medical records (EMRs) as a means of improving the efficiency, accuracy and quality of medical services. However, this digitalisation also poses serious risks to the confidentiality and security of sensitive patient health data. This study aims to analyse the legal framework for the protection of the confidentiality of EMRs and patients’ health data in Indonesia, as well as to identify implementation challenges and legal loopholes within the current regulatory framework. The research method employed is a literature review (library research) using a normative legal approach. The findings indicate that the legal framework for the protection of health data confidentiality in Indonesia is already fairly comprehensive and multi-layered; however, its implementation still faces significant challenges, including regulatory inconsistencies, gaps in technological infrastructure, limitations in human resources, cyber security threats, and sub-optimal oversight and law enforcement mechanisms. This study recommends regulatory harmonisation, capacity building for human resources, strengthening of cyber security infrastructure, and improved effectiveness of oversight as strategic steps to ensure optimal protection of patient privacy in the era of digital transformation in the healthcare sector.
Copyrights © 2026