The author in this paper has attempted to understand the hurdles faced by the Indian Healthcare sector due to its digitization. Medical information of a patient comes under the set of sensitive personal data and this research is aimed to understand whether the current Indian laws in force are strong enough to deal with data confidentiality and data privacy of such medical information. The paper further critically analyses the problem of data privacy in the Indian healthcare sector by understanding the various provisions contained in a number of statutes. The paper also brings into light an ideal legislation that should be enacted to minimize this issue and look after the rights of patients in respect of their sensitive medical data. Finally, the research proposes certain practices and measures to be followed by healthcare organizations in India in the absence of a proper legal framework so that they can keep a check on this problem and take steps to curb it.
