Analysis of Patient Data Security and Privacy in Electronic Medical Record Systems in Hospital X

Abstract

The development of digital technology has had a significant impact on the world of healthcare, especially in terms of patient data management, which is now turning to Electronic Medical Records (RME). RME is expected to be a mainstay solution to improve efficiency, accuracy, and ease of access to patient data between various health facilities. In Indonesia, the One Health Data initiative from the Ministry of Health plays a crucial role in this data integration process. However, the digitization of health information also raises new problems, especially related to the protection of sensitive patient personal data. This study aims to review the extent to which security and privacy aspects have been implemented in the RME system, particularly in Hospital X. This research uses a qualitative approach through observation, in- depth interviews, and document studies. The results of the study revealed that although the RME system is equipped with a simple authentication system using usernames and passwords, the security practices implemented are still less than optimal. There is still a lack of weak password use, a reluctance to change passwords periodically, and the absence of a special Standard Operating Procedure (SOP) that regulates the security and confidentiality of patient data. In addition, user awareness of the importance of protecting data is also still relatively low. These findings show that the successful implementation of RME does not only depend on the availability of technology, but also requires strengthening administrative policies and increasing understanding of cybersecurity among medical personnel. Therefore, a comprehensive strategy is needed to ensure the protection of patient data on an ongoing basis.