The Legal Framework for Personal Data Protection Amidst Hospital Competition: Ensuring Patient Safety in the Era of Healthcare Digitalization T. Keizerina Devi Azwar1, a), Ningrum Natasya Sirait2, b)
1) 2) Faculty of Law, Universitas Sumatera Utara, Indonesia
a) Corresponding author: deviazwar[at]yahoo.com
b) ningrum.sirait[at]gmail.com
Abstract
This study investigates the legal framework for protecting patients^ data in Indonesia, particularly in the context of increasing hospital competition and the digitalization of the healthcare sector. Through a literature review and legal analysis of regulations such as Indonesia^s Data Protection Law (UU No. 27 of 2022) and Health Law (UU No. 36 of 2009), this research aims to explore how these laws protect patient data amidst the growing use of digital health technologies, including Electronic Health Records (EHR) and telemedicine. The study also compares Indonesia^s legal framework with more advanced countries, such as the General Data Protection Regulation (GDPR) in the European Union and the Health Insurance Portability and Accountability Act (HIPAA) in the United States. The findings reveal significant challenges in implementing existing regulations, especially as hospitals prioritize digitalization and patient acquisition over privacy protection. This research concludes with policy recommendations to strengthen Indonesia^s legal framework and improve compliance with data privacy standards in the healthcare sector.