Electronic patient records: What you need to know now!

Transparenz: Redaktionell erstellt und geprüft.
Veröffentlicht am

From January 2025, those with statutory health insurance will receive the electronic patient file. What does this mean for privacy and security?

Electronic patient records: What you need to know now!

The electronic patient record (ePA) is just around the corner and is causing a stir among those with statutory health insurance in Germany. From January 2025, the ePA will be automatically sent to many insured persons unless they actively object. This innovation could revolutionize the way health data is managed, as [BR Fernsehen](https://www.br.de/br- Fernsehenen/versanden/gesundheit/epa-elektronische-patientenakte100.html?womort=Gesundheit) reports.

The ePA is intended to provide a central point of contact for all health data, from laboratory values ​​and diagnoses to vaccination and maternity records. With the insurance card, this information can be accessed by doctors, clinics and pharmacies for a limited period of time. Patients can access their data via a special app provided by their health insurance company. This could not only help doctors access important information more quickly, but also give patients more control over their health data.

A look at the advantages

The benefits of ePA are undeniable. Doctors can access their patients' health history more quickly, which can lead to better treatment. Dr. med. Jürgen Tudyka, medical director at the Helios Klinikum München Perlach, emphasizes: "This means we have an enormous improvement in quality. Improved performance, saving time. This means that we get information earlier, but can also start treatments much more quickly. So all in all, a huge advantage for the patients."

But not everyone is convinced. A survey by Deloitte shows that 58 percent of respondents have concerns about data protection. Jürgen Kretschmer, patient advisor at the Munich health shop, explains that the ePA doesn't just float around on the Internet. "The electronic patient file is extra protected, secured in a network. In addition, the data is stored and transmitted in encrypted form. The German electronic patient file is the safest in a European comparison," says Kretschmer.

Opt-out option and data protection

Anyone who does not want the ePA can make use of the so-called “opt-out option” at any time. This means that insured persons must actively object in order not to receive the file. Sascha Straub from the Bavarian Consumer Center emphasizes: "It's a voluntary decision. You can also object if you don't want it. But whoever decides to do so still has the reins in his hand."

The ePA app will allow users to assign permissions and determine who can access which parts of their file. Doctors get access for 90 days, while pharmacies only have access for three days. However, health insurance companies do not have access to the ePA, which is a reassuring aspect for many.

The security of the ePA in focus

The Fraunhofer Institute for Secure Information Technology SIT carried out a security analysis of the ePA in 2024. The final report shows that the basic architecture of the ePA provides protection against many potential threats. While some specific vulnerabilities have been identified, they are small in scale and are being addressed to increase security. However, Kretschmer warns: "Nevertheless, many hospitals and doctor's practices have fallen victim to hacker attacks recently. A lot has happened there too. However, the patient file itself has not been affected so far."

The introduction of the ePA could therefore bring with it both opportunities and challenges. While the advantages are clear, the public's skepticism does not go unnoticed. The coming months will show how the ePA proves itself in practice and whether citizens' concerns about data protection and security can be addressed.