Analysis of Patient Data Protection in Telemedicine Services in Indonesia: A Juridical-Normative Review and Literature Study
DOI:
https://doi.org/10.15575/jis.v6i3.56030Kata Kunci:
health regulation, personal data protection, telemedicineAbstrak
The digital transformation of Indonesia's healthcare sector through telemedicine presents significant challenges regarding patient data protection. Despite the existence of a legal framework—including Law No. 17 of 2023 on Health, Law No. 27 of 2022 on Personal Data Protection, and Minister of Health Regulation No. 20 of 2019—the practical implementation of patient data protection remains ineffective. This study aims to conduct a normative-juridical analysis of patient data protection in Indonesian telemedicine by examining the prevailing regulatory framework and implementation obstacles. The research methodology combines a literature review with a normative-juridical approach and a comparative analysis of international standards, such as GDPR and HIPAA. The findings indicate that while Indonesian regulations have adopted fundamental data protection principles, there are significant weaknesses in oversight, the application of technical security standards, and the enforcement of sanctions. Major data breach incidents—such as the e-HAC and BPJS data leaks—underscore the lack of effective oversight and protection. Institutional, technical, legal-cultural, and bureaucratic hurdles are the primary factors contributing to this ineffectiveness. The study recommends establishing an independent supervisory body, mandating data breach notifications, implementing minimum security standards, enhancing legal literacy, and strictly enforcing sanctions to ensure sustainable and trustworthy patient data protection in telemedicine services.
Referensi
Alam, R. G. G., Hidayah, A. K., Gunawan, G., Wijaya, A., & Abdullah, D. (2025). Manajemen Risiko Keamanan Informasi [Information Security Risk Management]. PT. Sonpedia Publishing Indonesia.
Anjani, S., & Abiyasa, M. T. (2023). Disrupsi Digital dan Masa Depan Rekam Medis (Kajian Peraturan Menteri Kesehatan Nomor 24 Tahun 2022 Tentang Rekam Medis Elektronik) [Digital Disruption and the Future of Medical Records (A Review of Minister of Health Regulation Number 24 of 2022 Concerni. Selat Media.
Annan, A. (2024). Tinjauan Yuridis Perlindungan Data Pribadi pada Sektor Kesehatan Berdasarkan Undang-Undang No. 27 Tahun 2022 [Legal Review of Personal Data Protection in the Health Sector Based on Law No. 27 of 2022]. Synergy: Jurnal Ilmiah Multidisiplin, 1(4), 247–254.
Ardiansyah, M. R., Buaton, T., & Sutrisno, S. (2025). Kewenangan Klinis dan Tanggung Jawab Hukum Dokter dalam Pelaksanaan Telemedisin ICU di Indonesia [Clinical Authority and Legal Responsibilities of Doctors in the Implementation of ICU Telemedicine in Indonesia]. JIIP - Jurnal Ilmiah Ilmu Pendidikan, 8(11), 12635–12641. https://doi.org/10.54371/jiip.v8i11.9722 [In Indonesian]
BBC, I. (2025). Kebocoran Data 279 Juta Warga [Data Leak Affects 279 Million Citizens]. https://www.bbc.com/indonesia/indonesia-5839334,
Biro Komunikasi, P. P. K. K. R. I. (2023). Transformasi Kesehatan Mewujudkan Masyarakat Indonesia Sehat dan Unggul [Health Transformation: Creating a Healthy and Superior Indonesian Society]. Kementerian Kesehatan RI.
Childress, J. F., & L.Beauchamp, T. (2019). Principles of Biomedical Ethics (8th ed.). Oxford University Press.
Department, U. S., & Services, H. and H. (1996). Health Insurance Portability and Accountability Act of 1996 (HIPAA). HHS.
ELSAM. (2025). Rendahnya Kesadaran Privasi dan Pentingnya Regulasi Pelindungan Data Pribadi [Low Privacy Awareness and the Importance of Personal Data Protection Regulations]. https://www.elsam.or.id/bisnis-dan-ham/rendahnya-kesadaran-privasi-dan-pentingnya-regulasi-pelindungan-data-pribadi.
Faiqy, M. R., Damargara, M. I., Alhidayah, M., & Maulana, J. (2022). Urgensi Realisasi Peran Data Protection Officer (DPO) pada Sektor Kesehatan Ditinjau dari Hukum Pelindungan Data Pribadi [The Urgency of Realizing the Role of Data Protection Officers (DPOs) in the Health Sector in the Light of Personal Data Protection La. Padjadjaran Law Review, 10(1). https://doi.org/10.56895/plr.v10i1.838 [In Indonesian]
Fauzi, E., & Radika Shandy, N. A. (2022). Hak Atas Privasi dan Politik Hukum Undang-Undang Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi [The Right to Privacy and Legal Politics Law Number 27 of 2022 concerning the Protection of Personal Data]. Jurnal Lex Renaissance, 7(3), 445–461. https://doi.org/10.20885/JLR.vol7.iss3.art1 [In Indonesian]
Fitrian, A., Akhyar, C. F., Ibrahim, M., Yuliana, T., Riancana, R., Pakarti, M. H. A., & Herniati. (2025). Hukum Perdata Dan Hak Asasi Manusia: Menjamin Keadilan Individu [Civil Law and Human Rights: Ensuring Individual Justice]. PT. Nawala Gama Education.
Hardisman. (2025). Pendekatan Kontemporer Etika dan Hukum Kesehatan [Contemporary Approaches to Health Ethics and Law]. wawasan Ilmu.
Harefa, J. E., Pandia, E. V. A. P., Situmorang, A. S., & Rumapea, M. S. (2024). Analisis Perbandingan Penegakan Hukum Pidana Korupsi Di Indonesia Dengan Singapura: Pendekatan Normatif Terhadap Kriteria Keberhasilan Penindakan Korupsi [Comparative Analysis of Corruption Criminal Law Enforcement in Indonesia and Singapore: A Normative . Ilmu Hukum Prima (IHP), 7(1), 97–109. https://doi.org/10.34012/jihp.v7i1.5135 [In Indonesian]
Heryana, A. (2021). Asuransi Kesehatan & Managed Care [Health Insurance & Managed Care]. In Universitas Esa Unggul.
Huda, H. U. N., Astaruddin, H. T., Nasution, M. I., Haddad, A. Al, & Gumelar, D. R. (2024). Data Pribadi, Hak Warga, dan Negara Hukum: Menjaga Privasi di Tengah Ancaman Digital [Personal Data, Citizen Rights, and the Rule of Law: Maintaining Privacy Amidst Digital Threats]. Penerbit Widina.
Jannah, M., Amboro, F. Y. P., & Shahrullah, R. (2024). Personal Data Protection in Telemedicine: Comparison of Indonesian and European Union Law. Journal of Law and Policy Transformation, 8(2), 145. https://doi.org/10.37253/jlpt.v8i2.8827
Judijanto, L., Pasrun, Y. P., Rohman, T. B., Sudipa, I. G. I., Selviana, R., Pandawana, I. D. G. A., Listartha, I. M. E., Rusdianto, D., Salsabila, Z., & Nirsal, N. (2025). Sistem Informasi: Teori dan Penerapannya di Berbagai Bidang [Information Systems: Theory and Its Application in Various Fields]. PT. Sonpedia Publishing Indonesia.
Katharina, R. (2021). Pelayanan Publik & Pemerintahan Digital Indonesia [Public Services & Digital Government of Indonesia]. Yayasan Pustaka Obor Indonesia.
Kholis, I. M. (2025). Perlindungan Data Pribadi dan Keamanan Siber di Sektor Perbankan: Studi Kritis atas Penerapan UU PDP dan UU ITE di Indonesia [Personal Data Protection and Cybersecurity in the Banking Sector: A Critical Study of the Implementation of the PDP Law and the I. Staatsrecht: Jurnal Hukum Kenegaraan Dan Politik Islam, 4(2), 275–299. https://doi.org/10.14421/t5sfe747 [In Indonesian]
Kompas. (2025). Data Rekam Medis Pasien Covid-19 Diduga Bocor, Segera Tuntaskan RUU Perlindungan Data Pribadi [COVID-19 Patient Medical Records Allegedly Leaked, Urgent Finalization of Personal Data Protection Bill]. https://www.kompas.id/artikel/data-rekam-medis-pasien-covid-19-diduga-bocor-segera-tuntaskan-ruu-perlindungan-data-pribadi,
Langingi, A. R. C. (2025). Manajemen Informasi Kesehatan: Fondasi, Strategi, dan Inovasi Digital dalam Dunia Akademik dan Klinik [Health Information Management: Foundations, Strategies, and Digital Innovations in Academic and Clinical Practices]. Goresan Pena.
Lestari, R. A., & Lestari, N. M. (2025). Fraud Dalam Implementasi Kartu Pembiayaan Bank Syariah: Tantangan Dan Konstruksi Perlindungan Hukum Bagi Nasabah [Fraud in the Implementation of Islamic Bank Financing Cards: Challenges and the Construction of Legal Protection for Customers]. ISTIKHLAF: Jurnal Ekonomi, Perbankan Dan Manajemen Syariah, 7(1), 44–66. https://doi.org/10.51311/istikhlaf.v7i1.746 [In Indonesian]
Mannas, Y. A., Elvandari, S., & Elvandari., S. (2023). Aspek Hukum Telemedicine di Indonesia [Legal Aspects of Telemedicine in Indonesia] (Vol. 9, Issue 1). PT. RajaGrafindo Persada-Rajawali Pers. http://ejournal.stih-awanglong.ac.id/index.php/juris
Matheus, J., & Gunadi, A. (2023). Pembentukan Lembaga Pengawas Perlindungan Data Pribadi Di Era Ekonomi Digital : Kajian Perbandingan Dengan KPPU [Establishment of a Personal Data Protection Supervisory Agency in the Digital Economy Era: A Comparative Study with the KPPU]. JUSTISI, 10(1), 20–35. https://doi.org/10.33506/jurnaljustisi.v10i1.2757 [In Indonesian]
Menpanrb. (2025). Data BPJS Kesehatan Diduga Bocor, Menteri Tjahjo Dukung Kemkominfo Usut Tuntas [Minister Tjahjo Supports the Ministry of Communication and Information’s Thorough Investigation into Alleged BPJS Health Data Leak]. https://www.menpan.go.id/site/berita-terkini/data-bpjs-kesehatan-diduga-bocor-menteri-tjahjo-dukung-kemkominfo-usut-tuntas,
Murima, W. H., Prayogi, A. R. Y., Rahvy, A. P., Djunaedi, N., & Dhamanti, I. (2022). Telemedicine Use in Health Facility During Covid-19 Pandemic: Literature Review. Jurnal Administrasi Kesehatan Indonesia, 10(2), 251–260. https://doi.org/10.20473/jaki.v10i2.2022.251-260
Nadiroh, A., Wiraguna, S. A., & Nadiroh, A. (2025). Analisis Yuridis Kebocoran Data di Layanan Kesehatan Digital: Studi Kasus Aplikasi Telemedicine di Indonesia [Legal Analysis of Data Leaks in Digital Healthcare Services: A Case Study of Telemedicine Applications in Indonesia]. Media Hukum Indonesia, 2(6), 313–320. https://doi.org/10.5281/zenodo.15520536 [In Indonesian]
Nugroho, S. S., Haryani, A. T., & Farkhani, F. (2020). Metodologi Riset Hukum [Legal Research Methodology]. Oase Pustaka, Surakarta.
OCR HIPAA, P. (2025). Standards For Privacy of Individually Identifiable Health Information [45 CFR Parts 160 and 164. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/introduction/index.html.
Peraturan Menteri Kesehatan Republik Indonesia. (2019). Peraturan Menteri Kesehatan Republik Indonesia Nomor 20 Tahun 2019 tentang Penyelenggaraan Pelayanan Telemedicine Antar Fasilitas Pelayanan Kesehatan [Regulation of the Minister of Health of the Republic of Indonesia Number 20 of 2019 concerning the Provi. In Lembaga Negara Republik Indonesia Tahun 2019 Nomor 890.
Pomantow, M. P., Rokhmat, R., & Retnowati, A. (2024). Perlindungan Hukum Kepada Klinik dan Dokter Terhadap Informasi Data Pasien yang Tidak Lengkap [Legal Protection for Clinics and Doctors Against Incomplete Patient Data Information]. Jurnal Cahaya Mandalika ISSN 2721-4796 (Online), 3(1), 667–680. https://doi.org/10.36312/jcm.v3i1.3667 [In Indonesian]
Raib, M. I. E., Rosadi, S. D., & Cahyadini, A. (2025). Perbandingan Penerapan Prinsip Transparansi Antara Indonesia dengan Irlandia dalam Hal Terjadinya Kegagalan Pelindungan Data Pribadi [Comparison of the Implementation of Transparency Principles between Indonesia and Ireland in Cases of Failure to Protect . Eksekusi : Jurnal Ilmu Hukum Dan Administrasi Negara, 3(2), 51–71. https://doi.org/10.55606/eksekusi.v3i2.1815 [In Indonesian]
Rusman, A. D. P., & Suwardoyo, U. (2022). Penerapan Sistem Informasi Berbasis IT Pengolahan Data Rekam Medis untuk Peningkatan Pelayanan di Rumah Sakit [Implementation of IT-Based Information Systems for Medical Record Data Processing to Improve Hospital Services]. Penerbit Nem.
Santoso, S., Setiadi, A., Kom, S., Kom, M., Asikin, A. M., Pi, S., Radian Ilmaskal, S. K. M., Sadat, L. A., Dewi Nashrulloh, S. K. M., & Putra, E. S. (2025). Sistem Informasi Kesehatan [Health Information System]. CV Rey Media Grafika.
Saraya, S., Lubis, A. F., Juansa, A., Layungasri, G. R., & Rianty, E. (2025). Dinamika Hukum di Indonesia: Perkembangan & Tantangan [Legal Dynamics in Indonesia: Developments & Challenges]. PT. Star Digital Publishing, Yogyakarta-Indonesia.
Sari, A. R., & SH, M. S. (2024). Reformasi Pelayanan Publik. PT Indonesia Delapan Kreasi Nusa.
Sianturi, C. G. S., Nababan, R., & Siregar, R. J. (2024). Peran Hukum dalam Melindungi Data Pribadi [The Role of Law in Protecting Personal Data]. Journal Of Social Science Research Volume, 4, 1–18. https://doi.org/10.31004/innovative.v4i5.15192 [In Indonesian]
Simatupang, J. R., Ardiansah, & Sudi Fahmi. (2023). Efektivitas Penggunaan Media Telemedicine Berdasarkan Hukum Indonesia dan Malaysia [Effectiveness of Telemedicine Media Use Based on Indonesian and Malaysian Law]. Jurnal Hukum Samudra Keadilan, 18(1), 15–32. https://doi.org/10.33059/jhsk.v18i1.7183 [In Indonesian]
Union, E. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation. Official Journal of the European Union.
UUD. (2022). Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi [Law Number 27 of 2022 concerning Personal Data Protection]. In Lembaran Negara Republik Indonesia Tahun 2022.
UUD. (2023). Undang-Undang Nomor 17 Tahun 2023 tentang Kesehatan [Law Number 17 of 2023 concerning Health].
WHO. (2021). Ethics and Governance of Artificial Intelligence for Health. WHO.
Unduhan
Diterbitkan
Terbitan
Bagian
Lisensi
Hak Cipta (c) 2026 Danny Aguswahyudy Jeremy
Artikel ini berlisensiCreative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).