Patient may voluntarily participate in eHRSS. You can register in-person at any registration centres of the Hospital Authority (HA), Department of Health (DH), Electronic Health Record (eHR) Registration Office, or registration centres of private healthcare providers providing healthcare to you. You can also register through online, fax, postal mail or drop-in box and then activate your eHR next time you visit any registration centres in HA or DH, eHR Registration Office, or a registered private healthcare provider next time you receive healthcare.
Any patient who does not hold a HKID card (香港身份證) but holds an alternative identity document permitted under the Electronic Health Record Sharing System Ordinance (Cap 625) (eHRSSO) can apply to join eHRSS:
*Note: For children under the age of 12 who do not have HKID cards or Hong Kong Birth Certificates
You should inform either eHR Registration Office or any registered healthcare provider with HCR registration function to correct your personal particulars.
Upon successful registration, you can further give sharing consent to individual private healthcare provider who is registered with eHRSS to access your medical record under the sharable scope in the eHR sharing platform. Your records within sharable scope in HA, DH and registered healthcare providers that you have granted consent will be shared.
Yes, you can revoke your sharing consent at any time to any particular healthcare provider (except HA and DH).
You can give sharing consent to registered healthcare provider via the 24-hour IVRS of eHRSS Patient Hotline (3467 6300) with the following steps (this method is also applicable to Healthcare Recipient registered by the following types of Substitute Decision Maker: parent, family member or residing person):
By eHRSS Patient Hotline (3467 6300)
Upon successful registration with eHRSS or record activation (for applications submitted online, by fax, post or drop-in box), you will receive an 8-digit Access Key through a confirmation letter and/or your selected communication means (SMS/ e-mail/ postal mail).
When using the Access Key to manage sharing consent on behalf of a patient, an SDM should be aware and ensure that -
Substitute Decision Maker (SDM)
You can register for a minor (under 16) or an individual who is aged 16 or above and meets any of the following descriptions as his/her SDM:
As an SDM, you may act on a patient’s behalf for eHRSS registration matters including -
Protection of my records
There are various protections against unauthorised access under legislation and code of practice. You may lodge a complaint to eHR Office if you suspect your eHR has been accessed without authorisation.
Only limited and restricted download of your information such as Participant Master Index (e.g. Name, Identity Document Type and Number, Date of Birth, Sex) and allergy / adverse drug reaction data is allowed.
eHRs which are under “ordinary control” refer to types of data that are accessible by the respective group of healthcare professionals without additional access restrictions, whereas those under “restricted control” are subject to certain additional access controls (e.g. patient’s additional consent). Accesses to eHRs by different groups of healthcare professionals are categorised and defined in accordance with their clinical needs and functions in an organisation.
Please refer to the eHRSS webpage for more information about the access rights of different groups of healthcare professionals.
Healthcare professionals providing healthcare to you may request to access your eHRs which are under restricted control on a “need-to-know” basis in order to obtain the additional information necessary to provide appropriate healthcare services to you. Healthcare professionals are required to provide and explain the reason(s) of access to you, and obtain your additional consent1 before accessing these records. You can authorise the access by using your Smart HKID card or the One-Time Password sent by the system to you1. You will also receive an additional notification about the access1 via your selected communication means. All accesses will be logged and are subject to audit and inspection.
1 Applicable to accesses by healthcare professionals in the community only
If you are the SDM of the child, the healthcare professional is required to provide and explain the reason(s) of access to you, and obtain your additional consent1 before accessing the child’s records. You can provide the One-Time Password sent by the system to authorise the access1. An additional notification about the access1 will also be sent via the selected communication means.
For more information about SDM, please refer to Q13.
Benefits and rights
eHRSS will enhance the quality of care provided to patients by enabling better access by healthcare providers to acquire health information. The healthcare quality benefits will be delivered specifically by:
Yes. Under Personal Data (Privacy) Ordinance (Cap. 486) (PDPO), any individual can enquire and ask for a copy of his/her personal data in eHRSS and make request for correction if necessary (Data Access Request (DAR) and Data Correction Request (DCR)).
|Giving healthcare providers consent for access||By giving your password||By using HK Smart ID Card, one-time password or signing a written form|
|Consent is given each time during each clinical consultation||Consent is given once and it remains valid until it is expired or revoked|
|Sharing of data from healthcare providers||Records from HA only||Records from all eHRSS participating healthcare providers with your sharing consents|
|Healthcare providers accessing your records||PPI-ePR participating doctors||eHRSS participating healthcare providers (who may also be existing PPI-ePR participating doctors)|
|Participating in Public-Private Partnership (PPP) programme||If you have joined any existing PPP programmes, you can still participate in these related programmes but not the coming new PPP programmes||You can join any existing or new PPP programmes (e.g. Colorectal Cancer Screening Pilot Programme)|
If you have not joined eHRSS, your existing healthcare providers in PPI-ePR / PPP programme can still access your health record shared by HA through PPI-ePR programme.
If you have joined eHRSS, your existing PPI-ePR / PPP healthcare providers who have not joined eHRSS can still access your health record shared by HA through PPI-ePR; and whereas those who have also joined eHRSS can access your health record shared by HA, DH and other private healthcare providers with your sharing consent through eHRSS.