A Korean clinic may keep its records as 전자의무기록 with an electronic signature, provided it holds the facilities to keep them safe and keeps a separate access log of every addition or amendment. A breach of electronic medical information is reported to the Minister of Health and Welfare at once.
What the law allows and asks
의료법 제23조 lets a doctor or the opener keep the 진료기록부 as an electronic document carrying an electronic signature. It asks for the facilities and equipment to manage and keep it safely, forbids anyone to read, leak, alter or damage the personal information in it without good reason, and from 제4항 requires a separate access log whenever an entry is added to or amended.1
The equipment, under 시행규칙 제16조
| Facility or equipment | What it is for |
|---|---|
| Creation, storage and signature checking | Verifying the electronic signature on each record |
| History management | Showing whether a record changed after it was signed |
| Backup storage | A second copy of every record |
| Network security | Where the equipment connects to the internet |
| EMR system security | Protecting the 전자의무기록시스템 itself |
| Physical access control | A controlled area or a lock for the storage location |
| Storage outside the institution | Real-time monitoring, standby equipment, CCTV and disaster prevention |
The access log for additions and amendments is kept on the history management equipment, and the Minister sets the detail in a notice.2 The Minister also sets standards for EMR systems under 의료법 제23조의2, and may certify a system that meets them on standards, compatibility and information security.13
- Sign every record. Each entry carries the doctor's electronic signature under the 전자서명법.
- Keep the history. Show whether a record changed after signing, and keep the original.
- Log every amendment. A separate 접속기록 for each addition or amendment, as 제23조 제4항 asks.
- Back up and secure. Backup storage, network security and a locked or controlled storage area.
- Plan for a breach. Who tells the Minister at once, with the name, time, scope and support needed.
- System ______ Storage location ______
- Electronic signature method ______
- Amendment log kept on ______ Reviewed by ______
- Backup ______ Last restore test ______
- Breach contact ______ Notice route to the Ministry ______
Under 의료법 제23조의3 a 진료정보 침해사고, a leak or disruption from an electronic attack on the record, goes to the Minister at once. 시행규칙 제16조의2 lists what to send, the institution's name, the time, the scope of the leak and the technical support needed.12 Failing to notify carries a fine of up to 3 million won.1
Questions
Must a Korean clinic keep electronic records?
No. 의료법 제23조 allows electronic records with an electronic signature, and paper records remain lawful under 제22조.
What is the 접속기록 for?
It is the separate access log 의료법 제23조 제4항 requires whenever an electronic record is added to or amended, kept on the history management equipment.
Is EMR system certification compulsory?
No. The Minister may certify a system that meets the standards under 의료법 제23조의2. The clinic's own duties under 제23조 apply whatever system it uses.
Sources
- 1국가법령정보센터, Ministry of Government Legislation, 2026의료법, 법률 제21490호, in force 2 October 2026Read source
- 2국가법령정보센터, Ministry of Government Legislation, 2026의료법 시행규칙, 보건복지부령 제1177호, in force 12 June 2026Read source
- 3국가법령정보센터, Ministry of Government Legislation, 2026의료법 시행령, 대통령령 제36083호, in force 10 February 2026Read source
Written by the wai team from Korea Institute for Healthcare Accreditation (의료기관평가인증원) guidance, checked on 16 October 2026. This is guidance, not legal advice. Neither the Ministry of Health and Welfare nor KOIHA endorses wai or any software.