Kepatuhan Rumah Sakit terhadap Tata Kelola Akses Sistem Informasi Pelayanan Kesehatan dalam Menjamin Perlindungan Data Pasien

Irsyam Risdawati; Hardian Faisal Hasibuan; Adeodata Lily Wibisono; Adrian Martin Hutauruk; Alfred Trisakti; Dhani Muhammad Romadon Malikul

doi:10.55606/klinik.v5i3.7638

Authors

Irsyam Risdawati Universitas Pembangunan Panca Budi
Hardian Faisal Hasibuan Universitas Pembangunan Panca Budi
Adeodata Lily Wibisono Universitas Pembangunan Panca Budi Medan
Adrian Martin Hutauruk Universitas Pembangunan Panca Budi Medan
Alfred Trisakti Universitas Pembangunan Panca Budi Medan
Dhani Muhammad Romadon Malikul Universitas Pembangunan Panca Budi Medan

DOI:

https://doi.org/10.55606/klinik.v5i3.7638

Keywords:

Access Governance, Health Information Systems, Hospital Compliance, Legal Liability, Patient Data Protection

Abstract

The digital transformation of the healthcare sector has driven hospitals to adopt Health Service Information Systems to improve the efficiency and quality of healthcare delivery. However, alongside these benefits, the implementation of such systems also increases the risks of unauthorized access, data breaches, and violations of patient confidentiality. These challenges highlight the urgent need for robust access governance that is not only technically sound but also aligned with legal frameworks governing patient data protection. This study aims to analyze the legal regulations concerning access governance in Health Service Information Systems, examine hospital compliance in implementing such governance, and assess the legal liability of hospitals for violations that compromise patient data protection. This research employs a normative legal method using statutory and conceptual approaches. The data used are secondary data obtained through library research, including legislation, legal textbooks, scientific journals, and relevant literature. The findings reveal that access governance is regulated under several legal instruments, including Law Number 17 of 2023 on Health, Law Number 27 of 2022 on Personal Data Protection, Minister of Health Regulation Number 24 of 2022 on Medical Records, and Minister of Health Regulation Number 6 of 2026 on Hospitals. Hospital compliance is demonstrated through access control mechanisms, protection of Electronic Medical Records, supervision of system usage, and the application of accountability principles. In cases of violations, hospitals may be held administratively, civilly, criminally, and corporately liable in accordance with applicable laws.

References

Andriana, D., Firmansyah, G., Tjahjono, B., Widodo, A. ., & Akbar, H. (2025). Audit Tata Kelola Teknologi Informasi Menggunakan Framework COBIT 2019 Pada Rumah Sakit. Jurnal LOCUS: Penelitian & Pengabdian, 4(8), 8312–8324 (2025). https://locus.rivierapublishing.id/index.php/jl. Jurnal LOCUS: Penelitian & Pengabdian, 4(8), 8312–8324.

Bonsapia, M., & Jumiran, J. (2025). Harmonisasi Regulasi Perlindungan Data Pasien Dalam Sistem Telemedicine Dan Informasi Kesehatan Nasional. Jurnal Kajian Teknologi Informasi, 3(1), 45–56 (2025). Jurnal Kajian Teknologi Informasi, 3(1), 45–56.

Dea, A., Risdawati, I., & Sidi, R. (2026). JURIDICAL ANALYSIS OF THE ROLE OF ADVOCATES IN PROVIDING NON-LITIGATION LEGAL ASSISTANCE AS AN EFFORT TO RESOLVE DISPUTES OVER DOCTORS’ MEDICAL ACTIONS IN HOSPITALS (CASE STUDY IN HOSPITALS). Multidiciplinary Output Research For Actual and International I. Multidiciplinary Output Research For Actual and International Issue (MORFAI), 5(1), 5821–5827.

Fatuhu, M. S., Yanti, N. K. W., Septiana, A. P., & Khairani, F. (2025). Tinjauan Keamanan Data Rekam Medis Elektronik Pasien di RSUD Patut Patuh Patju Gerung Lombok Barat Jurnal Kesehatan Qamarul Huda, 13(2), 179-185. https://doi.org/10.37824/jkqh.v13i2.2025.1126. Jurnal Kesehatan Qamarul Huda, 13(2), 179–185.

Firdaus, M. A., & Hasanah, U. (2025). Penyalahgunaan Hak Akses Data Pribadi Pasien Oleh Tenaga Medis Dan Implikasi Hukumnya. Jurnal Media Hukum Indonesia, 2(4), 674–680 (2025). Jurnal Media Hukum Indonesia, 2(4), 674–680.

Firmansyah, M. P., & Parid, M. (2024). Audit Kepatuhan Sistem Informasi Rumah Sakit di Penajam Paser Utara: Tantangan Kontrol Akses dan Solusi Manajemen. Saturnus: Jurnal Keamanan Sistem Informasi, 2(3), 268–279 (2024). https://doi.org/10.61132/saturnus.v2i3.268. Jurnal Keamanan Sistem Informasi, 2(3), 268–279.

Ginting, F. B., & Sitompul, M. (2026). Perlindungan Hukum Preventif Dan Represif Terhadap Hak Privasi Pasien Atas Ancaman Kebocoran Data Siber. Jurnal Hukum Dan Keadilan Kontemporer, 4(1), 12–25 (2026). Jurnal Hukum Dan Keadilan Kontemporer, 4(1), 12–25, 4(1), 12–25.

Gunawan, R., Santoso, B., & Prasetyo, H. (2022). Mitigasi Risiko Serangan Ransomware Pada Server Rekam Medis Elektronik Berdasarkan Standar Keamanan Informasi. Jurnal Cyber Security Dan Forensik Digital, 5(2), 88–99 (2022). Jurnal Cyber Security Dan Forensik Digital, 5(2), 88–99.

Harianto, Simarmata, M., & Risdawati, I. (2026). TELEMEDICINE SERVICES IN PERSONAL DATA PROTECTION (LEGAL REVIEW). Multidiciplinary Output Research For Actual and International Issue (MORFAI), 5 (1), 5265–5271. https://radjapublika.com/index.php/MORFAI/article/view/5711. Multidiciplinary Output Research For Actual and International Issue (MORFAI), 5(1), 5265–5271.

Ismaidar, & Yudhistira, B. (2025). Kewenangan Bagi Jaksa untuk Melakukan Penyidikan dalam Perkara Tindak Pidana Korupsi. Hukum Inovatif : Jurnal Ilmu Hukum Sosial Dan Humaniora, Volume 2(Nomor 2), Universitas Pembangunan Panca Budi, hlm. 200. https://journal.lpkd.or.id/index.php/Humif/article/view/1504

Kartika, R. W., Nasser, M., & Suswantoro, T. A. (2025). Analisis Yuridis terhadap Perlindungan Privasi Pasien dalam Era Digital: Studi Kasus Aplikasi Satu Sehat. Jurnal Ilmu Hukum, Humaniora Dan Politik, 6(1), (2025) 1–8. https://doi.org/10.38035/jihhp.v6i1.5874. Jurnal Ilmu Hukum, Humaniora Dan Politik, 6(1), 1–8.

Nazuhra, F., Novratilova, S., Aprilia, D. F., & Pramudita, F. G. (2026). Perlindungan dan Keamanan Privasi Data Pasien pada Sistem Rekam Medis Elektronik di Fasilitas Pelayanan Kesehatan : Studi Literatur Volume 04 Nomor 03 Juni 2026, https://journal.larpainstitute.com/index.php/jkti. Jurnal Kesehatan Tropis Indonesia, 4(3), 417–427.

Sinaga, H. S. R., & Siregar, R. A. (2025). Aspek Hukum Perlindungan Data Pasien Dalam Penyelenggaraan Rekam Medis Elektronik Di Indonesia. Jurnal Hukum To-Ra, 11(1), 106–116 (2025). https://doi.org/10.55809/tora.v11i1.433. Jurnal Hukum To-Ra, 11(1), 106–116.

Sintyasari, D., & Risdawati, I. (2025). URGENSI REFORMASI HUKUM KESEHATAN DI ERA DIGITAL: ANTARA ETIKA, PRIVASI DATA, DAN PERLINDUNGAN HAK PASIEN Indonesia of Journal Business Law Volume: 4 Nomor 2 July 2025, DOI: 10.47709/ijbl.v4i2.5878. Indonesia of Journal Business Law, 4(2).

Sofia, S., Ardianto, E. ., Muna, N., & Sabran. (2022). Analisis Aspek Keamanan Informasi Pasien Pada Penerapan RME di Fasilitas Kesehatan Vol. 1, No. 2, Oktober 2022, hlm. 94 - 10 https://rammik.pubmedia.id/index.php/rmik. RAMMIK : Jurnal Rekam Medik Dan Manajemen Informasi Kesehatan, 1(2), 94–103.

Wardani, E., Putra, D. H., Sonia, D., & Yulia, N. (2024). Keamanan Sistem Informasi Rekam Medis Elektronik di Rumah Sakit Islam Jakarta Sukapura RAMMIK : Jurnal Rekam Medik dan Manajemen Informasi Kesehatan Vol. 3, No. 2, Oktober 2024, hlm. 31 - 38, https://rammik.pubmedia.id/index.php/rmik. RAMMIK : Jurnal Rekam Medik Dan Manajemen Informasi Kesehatan, 3(2), 31–38.