Revolution in healthcare: The new ePA explained – simple & secure!

Transparenz: Redaktionell erstellt und geprüft.
Veröffentlicht am

Readers will find out how the electronic patient record will be introduced automatically from 2025, what this means for insured people and how the data will be secured.

Leser erfahren, wie die elektronische Patientenakte ab 2025 automatisch eingeführt wird, was dies für Versicherte bedeutet und wie die Daten gesichert werden.
Readers will find out how the electronic patient record will be introduced automatically from 2025, what this means for insured people and how the data will be secured.

Revolution in healthcare: The new ePA explained – simple & secure!

The introduction of the electronic patient record (ePA) will bring about a number of changes in the German healthcare system. Its primary aim is to improve both communication between doctors and patients and the treatment itself. Treating doctors can access a new patient's medical history and analyze possible risks during their first visit. This is intended to minimize the need for long conversations and cumbersome paperwork, which also makes it easier to switch between doctors or obtain a second opinion.

This initiative is in the context of a digital transformation, which particularly aims to reduce the administrative burden in the healthcare system. New technical possibilities can help treatments to be more efficient and targeted, which should ultimately benefit patient safety.

Automatic creation of the ePA

A central aspect of the new regulation is that the ePA should be created automatically for all insured persons who do not actively object. From 2025, an opt-out procedure will come into force, which means that health insurance companies will automatically create an ePA if patients do not expressly object. Previously, it was necessary to actively decide to have such a file created, which is known as the opt-in procedure. Federal Health Minister Karl Lauterbach (SPD) described the objection procedure as “very unbureaucratic”. Those interested can already receive forms to tick in order to object to the creation of the ePA, if desired.

Despite digitalization, there will still be opportunities to use the ePA without modern devices. For example, patients can continue to access their data through their health insurance companies and with the support of their doctors, even if they do not have a smartphone or tablet.

Technical requirements and data storage

The ePA is primarily designed for mobile devices such as smartphones and tablets. Corresponding apps are available in common app stores so that patients can download them easily. However, there are also desktop versions for use on a PC or laptop, although some features may be limited.

The ePA data is stored securely on central servers in Germany and is subject to strict European data protection regulations. According to the health organization Gematik, these servers are highly secured and the data is processed in protected data centers. Every step of data processing takes place in a so-called “Trusted Execution Environment” to ensure the integrity and security of sensitive information.

The ePA is designed as a long-term file, which is why there should be no storage space limit for the health data collected. In terms of formats that can be uploaded to the ePA, common formats such as PDF, JPG and DOCX are already permitted, while other file types such as X-ray images or MRI data are also planned to be added in the future.

For further information and details on the background to these changes, see the current reporting on www.mdr.de.