Electronic patient file: Trust or risk - What you really need to know!

Published on: March 28.2025Categories: Legal, Tech & E-CommerceReading time: 3 min.
Office staff at their desks
Avatar photo
Kilian Floß writes blog articles on legal and current topics for the Love & Law Blog.

Why the digital health record worries many

In theory, the electronic patient record (EPR) should be a real step forward for the healthcare system. It promises quick access to medical data, avoids duplicate examinations and facilitates coordination between doctors. But - and this is a big but - how secure is our personal health data in this digital record? According to a recent survey, more than half of respondents have concerns. Because even if the advantages are obvious, trust falls by the wayside.

What do the figures say? Trust in the digital file fluctuates

According to a representative survey conducted by ZEIT and the opinion research institute Infas, only 54 percent believe that their health data is secure in electronic records. This means that almost half of the population is at least skeptical when it comes to data protection. Just a few years ago, the picture looked much rosier: Back then, many were positive about the introduction of the ePA. However, following recent security breaches that came to light at the Chaos Computer Club congress, confidence has dropped noticeably. In fact, those responsible at Gematik - the platform for digital health applications - have had to improve the security architecture.

What happens if it goes wrong? Security gaps and concerns

The concerns are not unfounded: The ePA involves sensitive data - diagnoses, treatments and perhaps even mental illnesses. Who can guarantee that this information won't fall into the wrong hands? At the end of 2024, it was discovered that the electronic record had serious security gaps that could theoretically lead to unauthorized persons accessing this data. Gematik then promised rapid improvements, but the public's trust has been shaken.

The ePA is being introduced gradually. Data collection has already begun in some model regions, but many people are asking themselves: what happens if this data is compromised on the network? The answer to this question depends not only on the technology, but also on the users themselves. If you do not consent to the ePA, you can prevent the collection of your data or have it deleted later. But there is still some doubt as to whether the system is really secure.

What does this mean for the future?

Despite the critical voices, there are also positive aspects of the ePA. Anyone who sees the advantages - the rapid networking of medical data and the avoidance of unnecessary examinations - will certainly be willing to accept the security of the digital file. But for all those who are concerned about the security of their data, there is one option: the file can be deleted at any time. However, the question remains: how many people will make use of this option once the record has been introduced across the board?

Trust is good, control is essential!

If you look at the debate surrounding the ePA, you get the impression that many of us in the healthcare sector prefer to play it safe. And that is perfectly understandable! Data protection and data security should be a top priority in a digital healthcare system. However, it wouldn't be the first technology where trust initially wanes and later proves that the benefits outweigh the concerns. However - and this is the harsh truth - we should not simply hand over responsibility for our data to others, but ensure that we have full control over it at all times. Anyone who hands over their file must be sure that it is in good hands. And in this case, trust must first be earned!

Would you like to find out more about the security of electronic patient records? Book a consultation with our experts now!

At a fixed price of 119 EURO (gross)