Juridical Review of the Implementation of Security and Data Protection Aspects of Electronic Medical Records in accordance with PMK number 24 of 2022 concerning Medical Records (Research Study at Adam Malik Hospital Medan)

Abstract

The Ministry of Health of the Republic of Indonesia is carrying out a digital health transformation to accelerate a more advanced and equal health sector. This commitment is demonstrated by the Minister of Health Regulation Number 21 of 2020 concerning the Ministry of Health's Strategic Plan, which directs government health reform including the information integration system. With the issuance of Regulation of the Minister of Health of the Republic of Indonesia Number 24 of 2022 concerning Medical Records, all Health service facilities must maintain electronic medical records in accordance with the provisions of this Ministerial Regulation no later than December 31, 2023. In this regulation electronic medical records must comply with security principles. and data protection includes confidentiality, integrity and availability. Adam Malik Hospital has implemented electronic medical records starting from outpatient medical record services since December 10, 2021. This research focuses on juridical insight into aspects of security and data protection in electronic medical records at Adam Malik Hospital. This research is empirical juridical research, the data source uses primary and secondary data. Data collection through field observations and interviews and document study. Data will be analyzed qualitatively. The conclusion of this research is that the implementation of electronic medical records at Adam Malik Hospital has fulfilled the principles of security and data protection stated in Article 29 of the Minister of Health Regulation Number 24 of 2022 concerning Medical Records. However, several things were found that could hinder the fulfillment of security and data protection principles in the implementation of electronic medical records, namely employee discipline in changing passwords regularly and not giving users and passwords to other officers.