PERLINDUNGAN HUKUM DATA PRIBADI PASIEN DALAM DIGITALISASI PELAYANAN KESEHATAN DI INDONESIA: KAJIAN PUSTAKA

Authors

  • Gunawan Widjaja Senior Lecturer Faculty of Law Universitas 17 Agustus 1945 Jakarta Author
  • Hotmaria Hertawaty Sijabat Gunawan Widjaja Learning Centre Author

DOI:

https://doi.org/10.5281/zenodo.23905063

Keywords:

legal protection, patient personal data, healthcare digitalisation, electronic medical records, data security

Abstract

The digitalisation of healthcare services in Indonesia through the use of electronic health records, telemedicine, health applications and data exchange between healthcare facilities offers benefits in terms of improving the efficiency, accessibility, speed and quality of services. However, digitalisation also poses risks to the security and confidentiality of patients’ personal data, such as data breaches, unauthorised access, misuse of medical information and cyber-attacks. This study aims to analyse the legal framework for the protection of patients’ personal data, as well as the challenges and strategies for strengthening it within the digitalisation of healthcare services in Indonesia. The study employs a literature review using a normative legal approach and descriptive-qualitative analysis. The findings indicate that the protection of patients’ personal data has a legal basis in Law No. 27 of 2022 on the Protection of Personal Data, Law No. 17 of 2023 on Health, and Minister of Health Regulation No. 24 of 2022 on Medical Records. Health data constitutes specific personal data and therefore requires a higher level of protection. Nevertheless, its implementation still faces challenges in the form of regulatory fragmentation, infrastructure limitations, low digital literacy, cyber security threats, weak access controls, and unclear third-party responsibilities. Therefore, there is a need to strengthen data governance, implement multi-layered technological security, enhance the competence of human resources, ensure transparency in data processing, and establish effective oversight and law enforcement. The protection of patient data must be an integral part of the development of digital healthcare services that are secure, trustworthy and patient-rights-oriented.

Downloads

Download data is not yet available.

References

Angraeni, W. O. N., Takke, J. A. M., & Kamaruddin, M. I. (2026). Digital Governance and Health Innovation for Strengthening Community Health Systems: A Cross-Sectional Study in Indonesia. Journal Interdisciplinary Health, 2(2), 83–91. https://doi.org/10.61099/jih.v2i2.258

Eliyah, E., & Aslan, A. (2025). STAKE’S EVALUATION MODEL: METODE PENELITIAN. Prosiding Seminar Nasional Indonesia, 3(2), Article 2.

Lestari, A. Y., Misran, M., Raharjo, T., Annas, M., Riskanita, D., & Prabandari, A. P. (2024). Improving Healthcare Patient Data Security: An Integrated Framework Model For Electronic Health Records From A Legal Perspective. LAW REFORM, 20(2), 329–352. https://doi.org/10.14710/lr.v20i2.56986

Lukitasari, D. A., Zamroni, M., & Putera, A. P. (2023). Hospital Legal Responsibilities for Misuse of Patient Personal Data In Electronic Medical Records. JILPR Journal Indonesia Law and Policy Review, 5(1), 60–74. https://doi.org/10.56371/jirpl.v5i1.164

Mandey, A. W. (2025). Legal Analysis of Patient Privacy Violation in Electronic Medical Records and its Implications for Health Data Protection in Indonesia. Jurnal Multidisiplin Sahombu, 5(02), 589–594.

Nocker, M., & Sena, V. (2019). Big Data and Human Resources Management: The Rise of Talent Analytics. Social Sciences, 8(10), 273. https://doi.org/10.3390/socsci8100273

Nugroho, F. N. P., Listanto, M. F., Amelia, N., & Annisa, S. (2024). Analisis Kebocoran Data Pribadi Dalam Media Sosial. Fibonacci: Jurnal Ilmu Ekonomi, Manajemen Dan Keuangan, 1(2), 58–65. https://doi.org/10.63217/fibonacci.v1i2.70

Putri, T. S., & Putra, M. R. S. (2024). Implementasi Undang-Undang Pelindungan Data Pribadi: Peran Manajemen Risiko Hukum bagi Prosesor Data Pribadi. Jurnal Hukum Lex Generalis, 5(4). https://ojs.rewangrencang.com/index.php/JHLG/article/view/730

Rinjani, M. A., & Firmansyah, R. (2025). Hambatan Implementasi UU 27/2022 dan Strategi Penguatan Perlindungan Data Pribadi di Indonesia. Jurnal Analisis Hukum, 8(1), 70–83. https://doi.org/10.38043/jah.v8i1.6793

Riyantori, R., & Buka, S. P. Y. (2025). Digital Transformation in Primary Health Care: Evaluation of Information Technology Adoption and Management Practices. Smart International Management Journal, 2(4), 48–55. https://doi.org/10.70076/simj.v2i4.129

Safitri Rahmadaniah, A., & Harmanto, D. (2024). ANALISIS PENYEBAB BELUM TERLAKSANANYA REKAM MEDIS ELEKTRONIK (RME) DI PUSKEMAS PERAWATAN LUBUK TAPI BENGKULU SELATAN [Other, Sekolah Tinggi Ilmu Kesehatan Sapta Bakti]. https://repository.stikessaptabakti.ac.id/478/

Salijeni, G., Samsonova-Taddei, A., & Turley, S. (2018). Big Data and Changes in Audit Technology: Contemplating a Research Agenda (SSRN Scholarly Paper No. 3148904). Social Science Research Network. https://papers.ssrn.com/abstract=3148904

Santo, M. F. O. da, Sari, L., Kamilah, A., & Reumi, F. (2024). Pengantar Hukum Perdata: Teori & Referensi Komprehensif Dasar-dasar Hukum Perdata di Indonesia. PT. Sonpedia Publishing Indonesia.

Siregar, R. A., & Astuti, N. K. (2025). Assessing legal and institutional readiness for patient data protection in the age of big health data: An empirical study of health facilities in Indonesia. International Journal of Law, Policy and Social Review, 7(3), 15–21.

Sun, J., Fan, Z., Kou, M., Wang, X., Yue, Z., & Zhang, M. (2025). Impact of nurse-led self-management education on type 2 diabetes: A meta-analysis. Frontiers in Public Health, 13. https://doi.org/10.3389/fpubh.2025.1622988

Suraya, A., Maryuni, Aryanie, D., Lelitasari, Sulandari, U., Setyawati, M., Narulita, S., Jenie, R. P., Ningsih, S. U., Kusrini, E., Triwibowo, A. C., Suyanti, T., Soeharno, R., & Shetye, M. (2026). Childhood Lead Exposure in Primary Health Care Settings in Indonesia: A Cross-Sectional Study in Bogor City and Bogor Regency. International Journal of Environmental Research and Public Health, 23(8), 1046. https://doi.org/10.3390/ijerph23081046

Susilo, D., Wulandari, L. P. L., Sukmayeti, E., Asante, A., Jan, S., Thabrany, H., Tangcharoensathien, V., Wiseman, V., & Liverani, M. (2025). Can Indonesia achieve universal health coverage? Organisational and financing challenges in implementing the national health insurance system. SSM - Health Systems, 5, 100138. https://doi.org/10.1016/j.ssmhs.2025.100138

Syadina, A., Putra, D. H., Sonia, D., & Satrya, B. A. (2025). TRANSFORMASI RME DI RUMAH SAKIT INDONESIA: TINJAUAN PMK NOMOR 24 TAHUN 2022. PROSIDING SEMINAR NASIONAL REKAM MEDIS DAN INFORMASI KESEHATAN, 1(1). https://prosiding.esaunggul.ac.id/index.php/RMIK/article/view/349

Takaryanto, D., & Lany, A. (2025). Legal Protection of Personal Data in the Exchange of Electronic Medical Record in Healthcare Services. Research Horizon, 5(6), 2817–2830. https://doi.org/10.54518/rh.5.6.2025.897

Udiana, G. K., & Pramana, I. B. N. T. (2025). Legal protection of patients in Indonesia’s National Health Insurance (JKN) era: A comprehensive review of regulatory framework and hospital practice. Dharmaputra Medical Law Journal, 1(2), 21–26. https://doi.org/10.51559/rmpp6519

Ventura, M., & Coeli, C. M. (2018). Beyond privacy: The right to health information, personal data protection, and governance. Cadernos de Saúde Pública, 34, e00106818. https://doi.org/https://doi.org/10.1590/0102-311X00106818

Versaci, G. (2018). Personal Data and Contract Law: Challenges and Concerns about the Economic Exploitation of the Right to Data Protection. European Review of Contract Law, 14(4), 374–392. https://doi.org/10.1515/ercl-2018-1022

Walliman, N., & Walliman, N. (2021). Research Methods: The Basics (3 ed.). Routledge. https://doi.org/10.4324/9781003141693

Widyawati, A. M. J., Legowo, M. I., & Purnomo, H. (2025). The Validity of Electronic Agreements in the Perspective of Indonesian Civil Law. International Journal of Health, Economics, and Social Sciences (IJHESS), 7(2), 749~753-749~753. https://doi.org/10.56338/ijhess.v7i2.7218

Wiley, L. F., & Gostin, L. O. (2025). Public Health Law and Ethics: Power, Duty, Restraint. Univ of California Press.

Xiaying, M. (2019). The Legal Attributes of Electronic Data and the Positioning of Data in Civil Law*. Social Sciences in China, 40(1), 82–99. https://doi.org/10.1080/02529203.2018.1519208

Yandi, R., Zuhri, B., Yatim, Y., & Kaksim, K. (2025). The Implementation and Historical Perspective of Health Law in Law No. 17 of 2023. TOFEDU: The Future of Education Journal, 4(6), 2492–2499. https://doi.org/10.61445/tofedu.v4i6.786

Yu, X., & Zhao, Y. (2019). Dualism in data protection: Balancing the right to personal data and the data property right. Computer Law & Security Review, 35(5), 105318. https://doi.org/10.1016/j.clsr.2019.04.001

Zhang, N., Li, Q., Chen, S., Wu, Y., Xin, B., Wan, Q., Shi, P., He, Y., Yang, S., & Jiang, W. (2024). Effectiveness of nurse-led electronic health interventions on illness management in patients with chronic heart failure: A systematic review and meta-analysis. International Journal of Nursing Studies, 150, 104630. https://doi.org/10.1016/j.ijnurstu.2023.104630

Kementerian Kesehatan Republik Indonesia. (2022). Peraturan Menteri Kesehatan Nomor 24 Tahun 2022 tentang Rekam Medis. Berita Negara Republik Indonesia Tahun 2022 Nomor 829.

Kementerian Kesehatan Republik Indonesia. (2022a). Peraturan Menteri Kesehatan Nomor 24 Tahun 2022 tentang Rekam Medis. Berita Negara Republik Indonesia Tahun 2022 Nomor 829.

Kementerian Kesehatan Republik Indonesia. (2022a). Peraturan Menteri Kesehatan Republik Indonesia Nomor 24 Tahun 2022 tentang Rekam Medis. Berita Negara Republik Indonesia Tahun 2022 Nomor 829.

Kementerian Kesehatan Republik Indonesia. (2022b, September 9). Fasyankes wajib terapkan rekam medis elektronik.

Kementerian Kesehatan Republik Indonesia. (2022b, September 9). Fasilitas pelayanan kesehatan wajib menerapkan rekam medis elektronik.

Kementerian Komunikasi dan Informatika Republik Indonesia. (2022). Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. JDIH Kementerian Komunikasi dan Informatika.

Republik Indonesia. (2022a). Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi. Jakarta: Sekretariat Negara.

Republik Indonesia. (2023). Undang-Undang Nomor 17 Tahun 2023 tentang Kesehatan. Jakarta: Sekretariat Negara.

Republik Indonesia. (2023). Undang-Undang Nomor 17 Tahun 2023 tentang Kesehatan. Jakarta: Sekretariat Negara.

Republik Indonesia. (2024). Peraturan Pemerintah Republik Indonesia Nomor 28 Tahun 2024 tentang Peraturan Pelaksanaan Undang-Undang Nomor 17 Tahun 2023 tentang Kesehatan.

World Health Organization. (2021). Global strategy on digital health 2020–2025. Geneva: World Health Organization.

World Health Organization. (2024). Indonesia digital health transformation strategy 2024. Geneva: World Health Organization.

World Health Organization. (2024). WHO personal data protection policy. Geneva: World Health Organization.

World Health Organization. (2024). WHO personal data protection policy. World Health Organization.

World Health Organization. (2025). Global strategy on digital health 2020–2027. World Health Organization.

Downloads

Published

2026-11-02