Electronic medical records (EMR) are no longer “scans of paper files”: the law recognizes their independent legal value — provided the system meets technical standards and bears the digital signature of an authorized person.
Is an EMR as valid as a paper record?
Yes, if it complies with Circular 46/2018/TT-BYT on electronic medical records: the system must ensure data integrity, authenticity and non-repudiation; every creation or amendment must log the actor and timestamp; data must be securely stored and backed up. A compliant EMR carries the same legal weight as paper in dispute resolution, medical appraisal and insurance settlement.
Doctors signing EMRs: conditions
Under the Law on Electronic Transactions 2023 (20/2023/QH15, in force since 1 July 2024), a digital signature is legally valid when it meets security conditions and is issued by a licensed certification provider. The signer must have professional authority (treating physician, professionally responsible person) — a digital signature by an unauthorized person does not validate the record. Hospitals must strictly manage digital certificates: a leaked private key compromises every record signed with it.
Linking medical examination data
The mandatory trend: medical data must be interconnected across facilities and with regulators, serving insurance management, disease surveillance and patient referrals. EMR systems must be built for standards-based connection and sharing — “island” systems that cannot link will need reinvestment.
Frequently Asked Questions
Who is liable if hackers alter an EMR?
The facility is responsible for information-system security. With proper standard-compliant safeguards, criminal liability falls on the attacker; negligent security exposes the facility to patient claims.
A doctor resigns — is their digital certificate still valid?
The hospital must revoke the certificate immediately upon termination. Signatures made after departure no longer bind the hospital.
Is a printout of an EMR legally valid?
A printout is reference only; legal value sits with the original electronic record bearing the digital signature and system logs. For evidence, extract the electronic original with authentication data.
This article has been quality-reviewed by the FLAW AI Legal Council