<![CDATA[The digitalisation of healthcare services in Indonesia through the use of electronic health records, telemedicine, health applications and data exchange between healthcare facilities offers benefits in terms of improving the efficiency, accessibility, speed and quality of services. However, digitalisation also poses risks to the security and confidentiality of patients’ personal data, such as data breaches, unauthorised access, misuse of medical information and cyber-attacks. This study aims to analyse the legal framework for the protection of patients’ personal data, as well as the challenges and strategies for strengthening it within the digitalisation of healthcare services in Indonesia. The study employs a literature review using a normative legal approach and descriptive-qualitative analysis. The findings indicate that the protection of patients’ personal data has a legal basis in Law No. 27 of 2022 on the Protection of Personal Data, Law No. 17 of 2023 on Health, and Minister of Health Regulation No. 24 of 2022 on Medical Records. Health data constitutes specific personal data and therefore requires a higher level of protection. Nevertheless, its implementation still faces challenges in the form of regulatory fragmentation, infrastructure limitations, low digital literacy, cyber security threats, weak access controls, and unclear third-party responsibilities. Therefore, there is a need to strengthen data governance, implement multi-layered technological security, enhance the competence of human resources, ensure transparency in data processing, and establish effective oversight and law enforcement. The protection of patient data must be an integral part of the development of digital healthcare services that are secure, trustworthy and patient-rights-oriented.]]>
Copyrights © 2026
