In the space of a few weeks, Indonesia linked hospital electronic records to national insurance claims and launched a national record for every patient. For hospitals, the quality of what sits inside their records now matters well beyond their own walls.
For years, a patient's history in Indonesia has lived in pieces: a set of results at one hospital, a prescription at a clinic, a scan report somewhere else. Each facility held its own record, and patients were often asked to repeat their history every time they sought care.
That is changing quickly. The Ministry of Health describes health data as no longer just an administrative output, but a strategic national asset (Ministry of Health). Two announcements in July and September 2026 put that into practice, and together they change what a hospital's electronic record is for.
This guide explains what has changed, why it matters for hospitals and their claims, and how to prepare. It draws on our experience at Jonda Health, where our work is turning health records from many different sources, in more than ten languages, into structured, standardised information that clinicians and systems can actually use.
Figure 1. Indonesia: records, claims and data protection converge.
On 30 July 2026, the Ministry of Health announced a joint circular with the Corruption Eradication Commission (KPK), the Ministry of Home Affairs, BPJS Kesehatan and the National Cyber and Crypto Agency (BSSN). It makes the integration of hospital electronic medical records (RME) with SATUSEHAT, using the patient's National Identity Number (NIK), part of the documentation for JKN claims and service management. The scope runs from district and city hospitals to national referral and vertical hospitals, and the stated aims include transparency, accountability, fraud prevention and traceable data for oversight (Ministry of Health).
A month later, on 1 September 2026, the Ministry launched SATUSEHAT RME, a national integrated medical record that stores data by patient rather than by facility. It brings together diagnoses, laboratory results, medicines, procedures, vital signs and radiology. It is starting at two pilot hospitals, RSUP Dr. Wahidin Sudirohusodo in Makassar and RS PON Prof. Dr. dr. Mahar Mardjono in Jakarta, before expanding to all facilities connected to SATUSEHAT. Patients using SATUSEHAT Mobile can view their own summaries, with consent codes for routine access and logged emergency access (Ministry of Health).
In the Health Minister's words, when someone receives care at several facilities, all of that data now connects within one patient health account (Ministry of Health).
The practical effect for a hospital is that the same electronic record now serves three purposes at once: care for the patient across facilities, evidence for the claim, and a traceable trail for oversight.
Figure 2. From hospital record to national record and claim.
That raises the stakes on consistency. A laboratory result recorded with a local test name, a medicine entered as a brand name, or a patient registered with a slightly different NIK or date of birth no longer stays inside one hospital. It travels to the national record, where other clinicians will read it, and to the claim, where it may be checked.
At the same time, Indonesia's Personal Data Protection Law is moving from principle to practice. Government Regulation 33 of 2026 was enacted on 16 July 2026 and takes effect on 16 January 2027. It requires data protection impact assessments before certain types of processing, and its elucidation expressly names artificial intelligence and machine learning among the technologies that trigger one. It also sets out a framework for cross-border transfers, although the data protection authority that will publish adequacy lists and standard clauses has not yet been established (HLC).
For hospitals, this means projects that move, clean or analyse patient records, especially with AI, should be planned with an impact assessment in mind, and with clarity about where data is processed. Where records are reused beyond direct care, the distinctions between de-identification, pseudonymisation and anonymisation matter too, which we explain in this guide.
In the records we work with across the region, the same patterns appear again and again.
None of this reflects poor practice. It is what happens when records build up across busy departments and systems that were never designed to share. AI can help with much of this work at speed, and we use it extensively ourselves, but in a clinical and financial setting it needs clinical review and quality checks behind it. That is why we argue that healthcare AI will not work without trusted data infrastructure.
Hospitals serving patients from other countries face an extra layer of foreign-language records, which we cover in Patients Cross Borders, Their Records Don't.
At Jonda Health, we have worked with Indonesian health records and the SATUSEHAT ecosystem, and we know how much of this work only becomes visible once real data starts to move. Depending on where your organisation is today, there are three ways we can help.
SATUSEHAT RME is the Ministry of Health's national integrated electronic medical record, launched on 1 September 2026. It stores records by patient rather than by facility, bringing together diagnoses, laboratory results, medicines, procedures, vital signs and radiology from the facilities a patient visits.
A joint circular announced on 30 July 2026 by the Ministry of Health, the Corruption Eradication Commission, the Ministry of Home Affairs, BPJS Kesehatan and the National Cyber and Crypto Agency makes electronic medical records integrated with SATUSEHAT, and linked to the patient's NIK, part of the supporting documentation for JKN claims at referral hospitals.
The Ministry of Health describes the scope as district and city hospitals through to national referral hospitals and vertical hospitals. Hospitals should check the circular itself for detailed requirements and timelines.
Government Regulation 33 of 2026, which implements the Personal Data Protection Law, was enacted on 16 July 2026 and takes effect on 16 January 2027. It requires data protection impact assessments for certain processing, including processing that uses artificial intelligence.
Verified SATUSEHAT Mobile users can view their medical summaries after receiving care. Non-emergency access by others requires the patient's six-digit authorisation code, and emergency access is logged so patients can review it.
Sources: Ministry of Health, announcements of 30 July 2026 and 1 September 2026; Government Regulation 33 of 2026 (via HLC). This article is for general information and is not legal or regulatory advice.
