Tinjauan Yuridis Implementasi Aspek Keamanan dan Perlindungan Data pada Rekam Medis Elektronik di Rumah Sakit Berdasarkan PMK Nomor 24 Tahun 2022

Abstract

Penerapan Rekam Medis Elektronik (RME) merupakan kewajiban hukum bagi fasilitas pelayanan kesehatan sebagaimana diatur dalam Peraturan Menteri Kesehatan Nomor 24 Tahun 2022. Regulasi ini menegaskan tanggung jawab rumah sakit dalam menjamin keamanan dan perlindungan data pasien berdasarkan prinsip confidentiality, integrity, dan availability. Penelitian ini bertujuan untuk mengkaji secara yuridis implementasi aspek keamanan dan perlindungan data RME di RS Sumber Waras Cirebon berdasarkan ketentuan PMK Nomor 24 Tahun 2022. Metode penelitian yang digunakan adalah kualitatif dengan pendekatan yuridis sosiologis melalui wawancara mendalam dengan petugas rekam medis, petugas teknologi informasi, dan penanggung jawab sistem RME, serta studi dokumen. Hasil penelitian menunjukkan bahwa RS Sumber Waras Cirebon telah menerapkan sebagian besar ketentuan keamanan RME, meliputi autentikasi pengguna, kontrol akses berbasis peran, pencatatan audit trail, mekanisme pengaduan, serta sistem pencadangan dan pemulihan data. Namun demikian, masih ditemukan kelemahan pada penerapan autentikasi ganda, enkripsi menyeluruh, dan stabilitas sistem. Penelitian ini menyimpulkan bahwa implementasi RME di RS Sumber Waras Cirebon telah memenuhi kewajiban hukum minimum, tetapi masih memerlukan penguatan aspek teknis dan kebijakan internal guna menjamin perlindungan data pasien secara optimal dan berkelanjutan. 

Abstract: The implementation of Electronic Medical Records (EMR) is a legal obligation for healthcare facilities as stipulated in Minister of Health Regulation Number 24 of 2022. This regulation emphasizes the responsibility of hospitals in ensuring the security and protection of patient data based on the principles of confidentiality, integrity, and availability. This study aims to examine the legal implementation of EMR security and data protection aspects at Sumber Waras Hospital in Cirebon based on the provisions of PMK Number 24 of 2022. The research method used is qualitative with a sociological legal approach through in-depth interviews with medical record officers, information technology officers, and EMR system administrators, as well as document studies. The results show that Sumber Waras Hospital in Cirebon has implemented most of the EMR security provisions, including user authentication, role-based access control, audit trail logging, complaint mechanisms, and data backup and recovery systems. However, weaknesses were still found in the implementation of double authentication, comprehensive encryption, and system stability. This study concludes that the implementation of RME at Sumber Waras Hospital in Cirebon has met the minimum legal requirements, but still needs to be strengthened in terms of technical aspects and internal policies in order to ensure optimal and sustainable protection of patient data.