Criteria groups, the deadline, sanctions, and an EMR readiness checklist — explained by a vendor that builds its own system, complete with an honest mapping of what is already full and what is still being matured.
Summary
Permenkes 24/2022 on Medical Records requires health facilities to implement Electronic Medical Records, with a deadline for implementation no later than 31 December 2023. Compliance is not merely installing an application — it demands meeting criteria for content, security, retention, and interoperability.
This guide maps those criteria thematically, explains the risk of non-compliance without scaremongering, and then presents a checklist hospitals can use to assess themselves.
28 criteria, 4 groups
The EMR assessment criteria can be grouped into four broad themes. This is a map to make them easier to assess, not a replacement for the official Permenkes text.
The EMR must be maintained from patient admission through discharge, capturing complete and structured medical record content (identity, history/SOAP, examination results, procedures, and care outcomes).
Protection of the confidentiality, integrity, and availability of data — covering access control, audit trails over medical record operations, and protection against unauthorized changes.
Storage aligned with retention periods: patient medical records for at least 5 years from the last visit, with longer terms required for certain records.
Data belongs to the patient/health facility with regulated access rights, plus readiness for data sharing (interoperability) — including connectivity to the national health data ecosystem.
Honest mapping to Adievia
Transparency is our main weapon. Here it is as it stands — not a claim of "100% compliant".
Self-assess
Seven concise points to gauge how ready your hospital is — and, at the same time, a list of questions to put to a prospective vendor.
FAQ
Permenkes 24/2022 (the medical records regulation) requires health facilities to implement Electronic Medical Records, with a deadline for implementation no later than 31 December 2023. After that, health facilities that have not adopted an EMR may be subject to guidance and administrative sanctions.
Non-compliance can lead to escalating administrative sanctions — starting with a warning, and affecting assessment/accreditation as well as licensing. Concrete sanctions follow the applicable guidance and oversight provisions; this page does not aim to alarm, but to map the risk reasonably.
EMR readiness assessment refers to a set of assessment criteria (often cited as 28 criteria) covering implementation, medical record content, security, retention, and interoperability. On this page we group them thematically and map them honestly to system capabilities — including the ones we are still maturing.
The EMR becomes the data source for submission to SATUSEHAT (interoperability), while UU 27/2022 (the personal data protection / PDP law) governs the protection of patients' personal data. All three are interconnected: a compliant EMR makes SATUSEHAT and PDP compliance easier at the same time.