An Overview of the Implementation of Data Security Principles in Electronic Medical Records at Kota Tengah Community Health Center

Abstract

Electronic Medical Records (EMR) are an important component of the digital transformation of healthcare services because they support efficiency, accuracy, and access to patient information. However, the use of EMR must be accompanied by appropriate data security measures to protect sensitive health information. This study aimed to describe the implementation of data security principles in EMR at Kota Tengah Community Health Center based on confidentiality, integrity, availability, authentication, and access control. A qualitative descriptive approach was used. Data were collected through interviews, observation, and documentation involving five informants selected by purposive sampling: the head of the community health center, the person responsible for medical records, an IT officer, a physician, and a nurse. Data were analyzed using the Miles, Huberman, and Saldaña interactive model through data condensation, data display, and conclusion drawing and verification. The findings indicate that the five data security aspects had generally been implemented adequately. Confidentiality was supported by individual accounts and restricted access; integrity was supported by data checking and correction procedures; availability was supported by daily system use and data backup; authentication was implemented through individual usernames and passwords; and access control was arranged according to users’ duties and responsibilities. Nevertheless, several weaknesses remained, including insecure password storage practices, suboptimal use of audit trails, occasional internet network disruptions, and the need for periodic review of user access rights. Continuous improvement in password management, audit trail utilization, access review, and network infrastructure is therefore required.