Pandemi Covid-19 telah mendorong transformasi digital yang pesat di berbagai lini industri, termasuk industri kesehatan. Di institusi rumah sakit, transformasi digital sedang gencar dilakukan dengan digitalisasi rekam medis yaitu EMR (Electronic Medical Record). Rekam Medis Elektronik dikenal luas memiliki lebih banyak manfaat, meningkatkan efisiensi dan menjaga privasi pasien yang lebih baik. Namun digitalisasi rekam medis belum sepenuhnya diterapkan di seluruh rumah sakit di Indonesia, salah satunya Rumah Sakit XYZ yang berada di Bekasi. Penelitian dilakukan untuk menganalisis manajemen keamanan informasi data Rekam Medis di Rumah Sakit XYZ dan mempertimbangkan rekomendasi yang tepat untuk implementasinya. Penelitian ini menggunakan pendekatan kualitatif yang dilakukan pada bulan Februari sampai Mei 2022. Peneliti mewawancarai dua belas staf rekam medis dengan berbagai tugas. Selain itu, peneliti juga menganalisis data sekunder yaitu dokumen rekam medis di RS XZY. Berdasarkan analisis, meskipun masih mengikuti pendekatan rekam medis konvensional, RS XYZ telah menerapkan keamanan informasi pada aspek kerahasiaan dengan aspek keamanan CIA (Confidentiality, Integrity, and Availability). Bahkan saat melakukan penelitian, RS XYZ memiliki rencana untuk melakukan digitalisasi. Kajian ini memiliki beberapa rekomendasi tindak lanjut untuk mendukung digitalisasi dan efektifitas proses rekam medis. Dengan mulai membangun kesadaran petugas rekam medis melalui poster atau penyuluhan, memberikan kebijakan yang lebih konkrit, evaluasi berkala, restrukturisasi teknis gedung rumah sakit, dan mengembangkan sistem IT.

---

The Covid-19 pandemic has driven rapid digital transformation in various industry lines, including health industry. In hospital institutions, digital transformation is being intensively carried out by digitizing medical records, namely EMR (Electronic Medical Records). The Electronic Medical Records are widely known to have more benefits, increasing efficiency and maintaining better patient privacy. However, digitizing medical records have not been fully implemented in all hospitals in Indonesia, one of them is the XYZ Hospital located in Bekasi. The study is conducted to analyse the information security management of Medical Record data at XYZ Hospital and consider appropriate recommendations for its implementation. This study employs a different approach which is carried out from February to May 2022. Researchers interviewed twelve medical record staff with various tasks. In addition, the researcher also analyses secondary data, which is the medical record document at XZY Hospital. Based on the analysis, although still following the conventional medical record approach, XYZ Hospital has implemented information security in the confidential aspects by the CIA (Confidentiality, Integrity, and Availability) security aspects. Even when conducting the research, XYZ Hospital had a plan for digitization. The study has several follow-up recommendations to support the digitalization and effectiveness of medical record process. By starting to build awareness for medical record officers through posters or counselling, providing more concrete policies, periodic evaluations, technical restructuring of hospital buildings, and developing IT systems.