NINETEENTH CONGRESS OF THE
)
REPUBLIC OF THE PHILIPPINES
)
First Regular Session
HOUSE OF REPRESENTATIVES
HOUSE BILL NO. ____
Introduced by REPRESENTATIVE VIRGILIO S. LACSON
EXPLANATORY NOTE
This bill aims to establish the use of electronic medical records in all hospitals and clinics
in the country. Its goals include providing accurate, up-to-date, and complete information about
patients at the point of care, and improving all aspects of patient care, in terms of timeliness,
efficiency, and patient-centeredness. It also aims to improve clinical decision making by
integrating patient information from multiple sources.
By using information and communications technology, patients will have access to their
medical records electronically through the internet. The availability of records online will not
only save time, money and effort but more importantly, it will serve as a convenient, fast and
reliable means of obtaining medical information of patients that can be used in times of
emergency.
Other benefits of this measure include: securely sharing electronic information with
patients and other clinicians; helping providers more effectively ; enabling safer prescribing;
helping promote legible and complete documentation; and reducing costs through decreased
paperwork and reduced duplication of testing, among others.
For the foregoing reasons, the immediate passage of this bill is earnestly sought.
VIRGILIO S. LACSON
Manila Teachers Party-list
February 20, 2023
11:55 am
7214


NINETEENTH CONGRESS OF THE
)
REPUBLIC OF THE PHILIPPINES
)
First Regular Session
HOUSE OF REPRESENTATIVES
HOUSE BILL NO. ____
Introduced by REPRESENTATIVE VIRGILIO S. LACSON
AN ACT
MAKING AVAILABLE ELECTRONIC MEDICAL RECORDS OF ALL  PATIENTS OF
HOSPITALS
AND
CLINICS,
ESTABLISHING
FOR
THIS 
PURPOSE
THE
ELECTRONIC MEDICAL RECORD CENTER UNDER THE  DEPARTMENT OF
HEALTH APPROPRIATING FUNDS THEREFORE AND  FOR OTHER PURPOSES  
Be it enacted by the Senate and House of Representatives of the Philippines in  Congress
assembled: 
SECTION 1. Title of the Act. - This Act shall be known as the “Electronic  Medical
Records Act”.
SEC. 2. Declaration of Policy. - It is hereby declared the policy of the State to adopt a
modern, integrated, and comprehensive approach in the development of health sector. The State
shall endeavor to make quality healthcare and other social services  available to all the people.
Towards
this
end,
the
State
shall
encourage
the
use 
of
Information
and
Communications Technology (ICT) for the fast, easy and  reliable access to medical records of
7214


all patients by making available on-line their  medical information in order to benefit them in
times of emergency and  immediate needs for the records.  
SEC. 3. Definition of Terms. - For purposes of this Act the following term  shall mean:  
1) Electronic Medical Records refer to medical background and history of  medical
service provider’s patients and such other information to be designed  and developed
by the Records Center. It shall come in a standard electronic format. 
2) Medical service providers refer to all medical practitioners, hospitals,  clinics, centers
and other similar institutions that provide medical care service  and assistance. 
3) Medical practitioners refer to licensed physicians practicing in urban  cities and
municipalities  
4) Department refers to the Department of Health 
5) Records Center refers to the Electronic Medical Records Center created  under this
Act.  
6) Secure Socket Layer, also known as SSL, is a technology which negotiates  and
employs the essential functions of mutual authentication, data encryption,  and data
integrity for secure transactions. The SSL security protocol provides  data encryption,
server authentication, message integrity, and client  authentication for a TCP/IP
connection.  
7) 128-bit encryption refers to a strong method of encryption generated  by every
encrypted transaction. The process of encryption hides data or the  contents of a
message in such a way that the original information can be  recovered through a
corresponding
decryption
process.
Encryption
and 
decryption
are
common
techniques in securing electronic data communications.  
SEC. 4. Creation, Maintenance and  Uploading of Electronic Medical Records. -
Notwithstanding all provisions of existing laws to the contrary,  medical service providers shall
create and maintain electronic medical records, which shall be electronically uploaded on a


regular basis. The medical service  providers shall likewise maintain hard copies of the
electronic records to be  printed and stored as back-up records.  
All concerned medical service providers may elect to keep their own  existing format in
addition to the new electronic records and its back-up for  purposes of their own use or in
providing hard copies to patients. Provided however, that back-up copies of electronic records
shall, at all times, be included  when providing hard copies to the requesting patients.  
SEC. 5. Electronic Medical Records Center. - There shall be created an  Electronic
Medical Record Center to be placed under the Office of the Secretary  of the Department of
Health. The center shall serve as a hub of all databanks of  medical records and other pertinent
information significant to the patient's  medical history.  
The Records Center shall generate specialized software to be distributed  and used as the
standard platform for the maintenance, updating, uploading and making available electronic
Medical Records.  
The Records Center shall endeavor to create an emergency contact center to assure the
availability of records and assistance to patients accessing medical records any time of the day.
SEC. 6. Security Features of Electronic Medical Records. - In order to ensure the privacy
of all medical records, electronic communications and transactions, electronic medical records
system shall use 128-bit  encryption or higher form of Secure Socket Layer (SSL) technology
which may be devised in the future.  
The security features of electronic medical records shall likewise comply  with the
security provisions as provided for in RA 8792 or the Electronic  Commerce Law of 2000.  


SEC 7. ​Data Privacy and Protection. – All persons covered under this Act shall ensure the
protection of patients’ data used and processed  at all times. The employees of the Department,
hospitals and clinics handling sensitive personal information shall be educated on all relevant
laws concerning data privacy and protection. For this purpose, the provisions of the Data
Privacy Act of 2012 shall have suppletory effect.
SEC. 8. Funding. - There is hereby authorized to be appropriated for the  implementation
of this Act the amount of One Hundred Million Pesos (P 100,000,000.00) for  the initial
operations of the Electronic Medical Records Center as an attached  agency of the Department.
Thereafter, such amount needed to implement this  Act shall be included in the Annual
Appropriations Act of the Department. 
SEC. 9. Implementing Rules and Regulations. - The Department shall  create a special
committee to draft the Implementing Rules and Regulations  governing this Act. Within three
(3) months from the effectivity of this Act, the  special committee shall submit the IRR to the
Secretary of the Department who  shall approve it within thirty (30) days.  
SEC. 10. Separability Clause. - If any provision of this Act or the application  of such
provision to any person or circumstances is held invalid, the remainder of  this Act or the
application of such provision to other persons or circumstances  shall not be affected thereby.  
SEC. 11. Repealing Clause. -All laws, rules or orders inconsistent with the provisions of
this Act are hereby repealed.  
SEC. 12. Effectivity. - This Act shall take effect upon completion of its  publication in at
least one (1) national newspaper of general circulation. 
Approved,