Legal Aspects of Patient Data Governance in Digital Health: A Comparative Analytical Study of UAE and Indonesian Legislation
DOI:
https://doi.org/10.15294/jils.v10i2.10025Keywords:
Digital Health, Electronic Medical Records, Artificial Intelligence, Patient Data Protection, Comparative Law, UAE, IndonesiaAbstract
This study provides a comparative legal analysis of the United Arab Emirates (UAE) and Indonesia regarding the regulation of digital health technologies, particularly electronic medical records (EMR) and artificial intelligence (AI). It examines core legal dimensions including data security, patient consent, monitoring mechanisms, and data ownership. Although both countries have adopted ambitious digital health strategies, the UAE has developed a more comprehensive and integrated regulatory framework through Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in Health Fields and the Personal Data Protection Law No. 45 of 2021. These instruments ensure stricter data protection, structured access control, encryption standards, and regular audit mechanisms. In contrast, Indonesia, despite the enactment of Minister of Health Regulation No. 24 of 2022 and Law No. 27 of 2022 on Personal Data Protection, still faces challenges in enforcement, interoperability, and accountability. The findings highlight the need for Indonesia to strengthen its legal and institutional infrastructure to ensure compliance, enhance data privacy, and promote patient trust in digital health systems. Drawing lessons from the UAE experience, the study proposes policy reforms aimed at aligning Indonesia’s legal framework with international standards and fostering a secure, ethical, and innovation-oriented digital health environment.
Downloads
References
Afina, Sevy Septiana, and Rina Arum Prastyanti, “Personal Data Protection Analysis: Comparison of Indonesia, the United States as Federal Countries”. International Journal of Law, Crime and Justice 2, no. 2 (2025): 246-259. https://doi.org/10.62951/ijlcj.v2i2.583
Ahmad, Maiss, Kasem S. Akhras, and Shadi Saleh, “Genuine Policy Learning Is Fundamental: The Journey of the United Arab Emirates toward the Establishment of Health Technology Assessment”, International Journal of Technology Assessment in Health Care 39, Issue 1 (2023). https://doi.org/10.1017/S0266462322003348
'Aisy, Firsta Rahadatul, Muhammad Azil Maskur, and A.M Adzkiya’ Amiruddin, “Establishing Indonesia’s Personal Data Protection Agency: Comparative Administration Sanctions Enforcement from Ireland, Australia, and Singapore”. Journal of Indonesian Legal Studies 10, no. 1 (2025): 431-482. https://doi.org/10.15294/jils.v10i1.13755
Al Hubaishi, Hajar, and Abdelrahim Ali, “The Effect of Public Healthcare Service Quality on Residents' Satisfaction in the United Arab Emirates (UAE), the Case of Ajman Emirate”, Health 14 (2022): 306-321. https://doi.org/10.4236/health.2022.143024
Al Meslamani, Ahmad Z. “Technical and Regulatory Challenges of Digital Health Implementation in Developing Countries”, Journal of Medical Economics 26, Issue 1 (2023).
Alam, Md. Mahmudul, et al., “Impacts of COVID-19 Pandemic on National Security Issues: Indonesia as a Case Study”, Security Journal 35 (2022): 1067-1086. https://doi.org/10.1057/s41284-021-00314-1
Alhashmi, Shaikha FS, Said A. Salloum, and Chaker Mhamdi, “Implementing Artificial Intelligence in the United Arab Emirates Healthcare Sector: An Extended Technology Acceptance Model”, International Journal of Information Technology and Language Studies (IJITLS) 3, Issue 3 (2019): 27-42. https://journals.sfu.ca/ijitls/index.php/ijitls/article/download/107/pdf
Ali, Sheima, Bryan McIntosh, and Anjali Raj, “Determinants of Success and Challenges In Healthcare System: The Case of Abu-Dhabi”, Journal of Medical and Health Sciences (RRJMHS) 9, Issue 4 (2020): 65-75. https://www.researchgate.net/publication/348500119
Alimadadi, Ahmad, et al., “Artificial Intelligence and Machine Learning to Fight COVID-19”, Physiological Genomics 52, Issue 4 (2020). https://doi.org/10.1152/physiolgenomics.00029.2020
Alnaqbi, Khalid A., et al., “Consensus-Based Recommendations for the Implementation of Health Technology Assessment in the United Arab Emirates”, Value in Health Regional Issues 43, 101012 (2024): 1-10. https://doi.org/10.1016/j.vhri.2024.101012
Alshamsi, Amna I. “A Review of the United Arab Emirates Healthcare Systems on Medical Tourism and Accreditation”, Front. Health Serv., 21 February, Vol. 4 (2024). https://doi.org/10.3389/frhs.2024.1329252
Alshamsi, Amna I., Angeli Santos, and Louise Thomson, “Psychosocial Safety Climate Moderates the Effect of Demands of Hospital Accreditation on Healthcare Professionals: A Longitudinal Study”, Front. Health Serv., 22 April, Vol. 2 (2022). https://doi.org/10.3389/frhs.2022.824619
Alyani, Náder. “Formulating Digital Right-Skilling in the Gulf's Healthcare 4.0 Ecosystem to Enhance Professional Capabilities”, Chapter in Book (Nationalization of Gulf Labor Markets: Higher Education and Skills Development in Industry), (2023): 149-177. https://doi.org/10.1007/978-981-19-8072-5_6
Andrianto, Wahyu, and Amira Budi Athira, “Telemedicine (online medical services) in the New Normal Era Reviewed Based on Health Law (Study: Indonesian Telemedicine Program/Temenin at Dr. Cipto Mangunkusumo Hospital)”, Jurnal Hukum & Pembangunan 52, no. 1 (2022): 220-250.
Benseghir, Mourad, and Maamar Bentria, “Artificial Intelligence in Medicine: Is the Legal Framework Prepared to Address Its Risks? A Comparative Analysis”, Journal of Law 49, no. 3 (2025): 183-238. https://doi.org/10.34120/jol.v49i3.3907
Brownie, Sharon M., et al., “Establishing Policy Foundations and Regulatory Systems to Enhance Nursing Practice in the United Arab Emirates”, Policy Politics & Nursing Practice 16, Issue 1-2 (2015): 1-13. https://doi.org/10.1177/1527154415583396
Charpenet, Julie. “The progressive development of civil liability in the field of personal data”, Dalloz IP/IT, N° 6, Jun (2024): 372-375.
Dinakrisma, Anastasia A., et al., “The Role of Digital Mobile Technology in Elderly Health Management among Health Care Workers in Indonesia: Analysis of Knowledge, Attitudes, and Practice”, Digital Health, Vol. 8 (2022): 1-13. https://doi.org/10.1177/20552076221102771
Douville, Thibault. “Civil liability of a data controller: the need to prove the existence of damage”, Gazette du palais, no. 32 (10 Oct. 2023): 1-2. n° GPL454l2. https://lext.so/GPL454l2
Downing, N. Lance, David W. Bates, and Christopher A. Longhurst, “Physician Burnout in the Electronic Health Record Era”, Annals of Internal Medicine 170, No. 3 (2019): 216-217. https://doi.org/10.7326/L18-0604
Emirates Today Report, “$26 billion in healthcare spending by 2028”, May 01, 2024. Online at https://www.emaratalyoum.com/business/local/2024-05-01-1.1848492
European Union, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. (General Data Protection Regulation). https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng
Gooding, Piers, and Timothy Karotis, “Ethics and Law in Research on Algorithmic and Data-Driven Technology in Mental Health Care: Scoping Review”, JMIR Ment Health 8, Issue 6: e24668 (2021): 1-22. https://doi.org/10.2196/24668
Habibah, Nurul Aini. “Implementation of Electronic Medical Records in Health Facilities in Indonesia”, BBKPM Bandung (2023). Available online at https://bbkpm-bandung.org/blog/2023/07/penerapan-rekam-medis-elektronik-di-fasilitas-kesehatan-di-indonesia
Hayward, Martin, and Noriswadi Ismail, “General Data Protection Rules”, 7 Jul 2021. Available online at https://www.lexis.ae/wp-content/uploads/2021/09/LexisNexis__Practice-Note_UAE_General_Data_Protection_Rules_pdf.pdf
Horn, Alexandre. “CheckNews, Will the 500,000 victims of the health data breach be compensated by Dedalus?”, Published on 28/04/2022. https://www.liberation.fr/checknews/les-500-000-victimes-de-la-fuite-de-donnees-de-sante-seront-elles-indemnisees-par-dedalus-20220428_TFW732Y5URHXRKZQLAJWNWBQ4E/
Hutapea, Margareth Cynthia, et al., “Hospital Responsibility for Medical Records Leaked by Medical Personnel Without the Patient's Consent”, Journal of Law, Politics and Humanities (JLPH) 5, no. 1 (2024): 430-435. https://doi.org/10.38035/jlph.v5i1.1044
Ibrahim, Halah, et al., “Should I Stay or Should I Go Now? The Impact of “Pull” Factors on Physician Decisions to Remain in a Destination Country”, The International Journal of Health Planning and Management 34, Issue 4 (2019): 1909-1920. https://doi.org/10.1002/hpm.2819
Knesch, Jonas. “Litigation concerning compensation for damages caused by violations of the GDPR: the tensions within the CJEU”, Contract Law Review, Jun (2024), N° RDC202a3. Online at https://lext.so/RDC202a3
Koornneef, Erik J., et al., “Health System Reform in the Emirate of Abu Dhabi, United Arab Emirates”, Health Policy 108, Issues 2–3, December (2012): 115-121. https://doi.org/10.1016/j.healthpol.2012.08.026
Koornneef, Erik J., Paul Robben, and Iain Blair, “Progress and Outcomes of Health Systems Reform in the United Arab Emirates: A Systematic Review”, 17 BMC Health Services Research 672 (2017): 1-13. https://doi.org/10.1186/s12913-017-2597-1
Kurniawan, Muhamad Beni. “Government Legal Politics in Handling the Covid-19 Pandemic Reviewed from the Right to Health's Perspective”, Jurnal HAM 12, no 1 (2021): 37-55. http://dx.doi.org/10.30641/ham.2021.12.37-56
Kusumasari, Bevaola, Widodo Agus Setianto, and Li Li Pang, “A Study on Digital Democracy Practice: Opportunities and Challenges of e-Health Implementation in Indonesia”, Jurnal Ilmu Sosial dan Ilmu Politik 22, Issue 1 (July 2018): 1-16. https://doi.org/10.22146/jsp.28863
Lukitasari, Dian Ayu, et al., “Hospital Legal Responsibilities Against Misuse of Patient Personal Data in Electronic Medical Records”, Journal of Indonesia Law & Policy Review (JILPR) 5, no. 1 (2023): 60-74. https://doi.org/10.56371/jirpl.v5i1.164
Madjido, Masyri, et al., “Health Information System Research Situation in Indonesia: A Bibliometric Analysis”, The Fifth Information Systems International Conference, 23-24 July 2019, Surabaya, Indonesia, Procedia Computer Science, 161 (2019): 781-787. https://www.sciencedirect.com/journal/procedia-computer-science/vol/161/suppl/C.
Mamzer, Marie-France. “Ethics and Artificial Intelligence in Health: The Emergency of an Integrated Approach”, Annales de Pathologie 39, no 2 (2019): 85-86. https://doi.org/10.1016/j.annpat.2019.02.007
Marcoux, Aude Marie. “The Ethics of AI as a Healthcare Practice”, Public Ethics Review 25, no. 1 (2023). https://doi.org/10.4000/ethiquepublique.7991
Marmore Mena Intelligence, “UAE Healthcare Report - Growth fuelled by private healthcare”, Marmore Research Report, (2021). Available online at https://www.marmoremena.com/wp-content/uploads/pdf/1633351667_UAE%20Healthcare%20-Executive%20Summary%20-%20Marmore%20Research%20Report.pdf
Morley, Jessica, and Luciano Floridi, “An Ethically Mindful Approach to AI for Health Care”, The Lancet 395, Issue 10220 (2020): 254-255. doi: https://doi.org/10.1016/S0140-6736(19)32975-7
Pool, Javad, et al., “A systematic analysis of failures in protecting personal health data: A scoping review”, International Journal of Information Management 74 (2024): 1-29. https://doi.org/10.1016/j.ijinfomgt.2023.10271
Putra, Andika, Redyanto Sidi, and Syaiful Asmi Hasibuan, “Legal Responsibility of Third Parties and Hospitals for the Implementation of Electronic Medical Records”, JIIP (Jurnal Ilmiah Ilmu Pendidikan) 6, no. 8 (2023): 6280-6289. https://doi.org/10.54371/jiip.v6i8.2380
Raihan, Kevin, and Sinta Dewi Rosadi, “Have AI-Enhanced Telemedicines in Indonesia Adopted the Principles of Personal Data Protection?”, Yustisia Jurnal Hukum 13, no. 2 (2024): 151-167. https://doi.org/10.20961/yustisia.v13i2.85996
Rawal, Jignesh “Healthcare/Digital Health Market”, Report ID: FBI100227, September 29, 2025, Available online at https://www.fortunebusinessinsights.com/ar/industry-reports/digital-health-market-100227
Republic of Indonesia, “Law of the Republic of Indonesia No. 11 of 2008 concerning Electronic Information and transactions”. https://www.icnl.org/wp-content/uploads/Indonesia_elec.pdf
Republic of Indonesia, “Law of the Republic of Indonesia No. 17 of 2023 on Health”. https://peraturan.bpk.go.id/details/258028/uu-no-17-tahun-2023
Republic of Indonesia, “Law of the Republic of Indonesia No. 27 Year 2022 on Personal Data Protection (UU PDP)”, Pub. L. No. 27 (2022). https://jdih.setkab.go.id/PUUdoc/176837/Salinan_UU_Nomor_27_Tahun_2022.pdf
Republic of Indonesia, “Minister of Health Regulation No. 24 of 2022, on Medical Records”. https://fr.scribd.com/document/700590200/Permen-Kes-24-2022-En
Republic of Indonesia, “Regulation of the Minister of Communication and Information on Personal Data Security No. 20 of 2016”. https://makna.co/wp-content/uploads/2018/01/MOCI-Regulation-No-20-of-2016-Makna-Eng.pdf
Republic of Indonesia, “The Minister of Health. The Regulation of the Minister of Health Number 20 of 2019 on The Implementation of Telemedical Services Between Health Services Facilities”. The Minister of Health. 2019.
Rowland, Simon P., et al., “Digital health technology-specific risks for medical malpractice liability”, NPJ Digital Medicine 5, no. 157 (2022): 1-6. https://doi.org/10.1038/s41746-022-00698-3
Rubiyanti, Neng Sari. “Implementation of Electronic Medical Records in Hospitals in Indonesia: Juridical Study”, AL-ADALAH: Journal of Politics, Social, Law and Humanities 1, no. 1 (2023): 179-187. https://doi.org/10.59246/aladalah.v1i1.163
Santhi, Ni Nyoman Putri Purnama. “Patient Data Privacy Challenges in Electronic Health Systems: A Juridical Analysis of Medical Information Protection in Indonesia”, West Science Law and Human Rights 3, no. 01 (2025): 1-8. https://doi.org/10.58812/wslhr.v3i01.1577
Sarabdeen, Jawahitha, Immanuel Azaad Moonesar, “Privacy protection laws and public perception of data privacy: The case of Dubai e-health care services”, Benchmarking: An International Journal 25, Issue 6 (2018): 1883-1902. https://doi.org/10.1108/BIJ-06-2017-0133
Sulistyo, Afnan Rifai, Laksanto Utomo, Erwin Owan Hermansyah, Rahmat Saputra, “Comparison of Personal Data Protection in Indonesia and Thailand: Case Studies and Comparisons”, Greenation International Journal of Law and Social Sciences 3, no. 3 (2025): 773-782. https://doi.org/10.38035/gijlss.v3i3
Suraji, Charisma Septi Jayanti. “The Issues of Data Protection Against Leaking of Personal Data in Social Security Health Services (A Comparison Between Indonesia and Other Countries Regulations)”, International Journal of Business, Economics and Law 26, Issue 1 (2022): 103-107. https://ijbel.com/wp content/uploads/2022/03/IJBEL26.ISU1_239.pdf
UNDP, “Indonesia Launches a Blueprint on Digital Health to Expand Inclusive Health Care Coverage”, UNDP (2021), https://www.undp.org/indonesia/press-releases/indonesia-launches-blueprint-digital-health-expand-inclusive-health-care-coverage
United Arab Emirates, Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data. https://uaelegislation.gov.ae/en/legislations/1972
United Arab Emirates, Federal Law No. (13) of 2020 on the Public Health. https://uaelegislation.gov.ae/en/legislations/1456
United Arab Emirates, Federal Law No. (2) of 2019, Concerning the Use of the Information and Communications Technology in Health Fields. https://uaelegislation.gov.ae/en/legislations/1209
United Arab Emirates, Federal Law No. (5) of 2019 Regulating the Practice of the Medical Profession. https://uaelegislation.gov.ae/en/legislations/1201
United Arab Emirates, The Constitution of the United Arab Emirates 1971. https://uaelegislation.gov.ae/en/legislations/1000
Wahyudiono, Gunawan, Joko Ismono and Nuryanto A. Daim, “Legal Protection of Health Personnel (Anesthesians) After the Issue of the Health Law Number 17 of 2023”, Law Humanity 2, Issue 1 (2024): 1-17. https://doi.org/10.37504/lh.v2i1.605
World Government Summit. World Government Summit Proceeding Report 2022, May 31, 2022, Retrieved online from https://www.worldgovernmentssummit.org/ar/observer/publications/detail/world-government-summit-proceeding-report_2022
Yusriando, Yusriando. “Konstruksi Sistem Jaminan Sosial Nasional Bidang Kesehatan”, Bestuur 7, Issue 2 (2019): 122-130. https://doi.org/10.20961/bestuur.v7i2.41538
Downloads
Published
Article ID
10025Issue
Section
License
Copyright (c) 2025 Mourad Benseghir, Aouatef Zerara, Maamar Bentria, Halima Bendriss, Mohamad Hidayat Muhtar (Author)
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
All writings published in this journal are the personal views of the authors and do not represent the views of this journal and the author's affiliated institutions. Author(s) retain copyrights under the license of Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0).
