Digital patient records: risks and errors you need to know!
The electronic patient record (ePA) has been mandatory for those with statutory health insurance since October 2023 and requires active use and data protection awareness.

Digital patient records: risks and errors you need to know!
The electronic patient record (ePA) has caused a stir for everyone with statutory health insurance in Germany since its introduction in October 2023. Treating doctors are obliged to enter their findings, diagnoses and laboratory reports in the ePA. But not everything goes smoothly. Patients repeatedly report incorrect or exaggerated diagnoses in their documents, which is particularly common in the area of mental illnesses. Anja Lehmann from the Independent Patient Advice Service warns that such incorrect entries can have serious consequences, for example in the form of higher insurance premiums or difficulties when applying for occupational disability or life insurance.
In order to access their own ePA, patients must know which steps are necessary. Access is via smartphone apps from health insurance companies, including AOK, IKK, Barmer and Techniker Krankenkasse (TK). Every insured person must first create an online account with their health insurance company and then go through a complicated two-factor authentication. An identification document and a PIN are required, which in most cases are sent with the health insurance card. AOK and TK also require a third app for identification. If you don't want to work with a smartphone, you can also log in using a computer or laptop.
Incorrect diagnoses in the ePA
In cities like Bielefeld, more and more patients are reporting incorrect diagnoses in their electronic files. Behind these problems could be an incentive system between health insurance companies and doctors that pays better for certain diagnoses. The German Association of General Practitioners explains that such errors are the exception and that diagnoses are documented to the best of our knowledge and belief. However, incorrect entry in the ePA still poses dangers, as diagnoses once created can have negative effects on access to certain professions or other insurance. Tips from Anja Lehmann include the urgent request to check your personal file regularly in order to avoid serious consequences.
From October 1, 2025, not only those with statutory health insurance, but also doctors' practices and pharmacies will have to introduce electronic patient files. Although it is possible to actively refuse the EHR, easy access to health data should promote exchange between doctors and avoid unnecessary examinations.
Data protection and information security
How secure is our data actually? Data protection advocates are critical of the storage of sensitive information in the ePA. There have been hacker attacks in the past and security holes have been discovered. Consumer advocates criticize the fact that patients were informed one-sidedly about the advantages of the ePA, while the possible risks were hardly mentioned. Actively managing one's own data is becoming increasingly mandatory as patients are responsible not only for documenting their treatments, but also for releasing sensitive information.
Anyone who does not actively engage with the ePA could miss or overlook valuable information. Instructions from health insurance companies in the form of videos and written materials are available to help insured people take the necessary steps.
It remains to be seen whether the introduction of the ePA will ultimately bring about the desired success in improving health care. What is clear, however, is that everyone involved must act carefully to ensure patient safety.