Challenges and Concerns in India’s Digital Health Ecosystem

India’s healthcare system is undergoing a massive digital transformation, driven by ambitious initiatives like the Ayushman Bharat Digital Mission (ABDM). While the promise of connected health records, remote consultations, and AI-powered diagnostics is exciting, this transformation brings significant challenges. From cybersecurity vulnerabilities and privacy concerns to infrastructure gaps and regulatory ambiguities, India’s digital health ecosystem must overcome several hurdles before it can deliver on its potential.

Security risks in smart healthcare systems 🔗

Healthcare systems are increasingly attractive targets for cybercriminals. India ranked second globally in healthcare cyberattacks in 2021, accounting for nearly 8% of total attacks on the healthcare industry worldwide and almost 30% of all such attacks in the Asia-Pacific region. The consequences of such attacks extend far beyond data theft-they directly impact patient care and can endanger lives.

The AIIMS ransomware attack: a wake-up call 🔗

In November 2022, the All India Institute of Medical Sciences (AIIMS) Delhi suffered one of India’s most severe ransomware attacks. The attack crippled hospital operations for nearly two weeks, forcing staff to switch to manual record-keeping. Patient registration, billing, discharge, and laboratory systems were all affected. The attackers reportedly demanded approximately Rs 200 crore in cryptocurrency.

The breach compromised data of approximately 3-4 crore patients, including sensitive medical records and personally identifiable information. Given that AIIMS treats high-profile patients including government officials, the attack became a national security concern. Investigations traced IP addresses to servers in China, highlighting the vulnerability of critical healthcare infrastructure to sophisticated cyber threats.

Key security requirements for digital health 🔗

Smart healthcare ecosystems need robust security measures including strong authentication protocols, role-based authorization, end-to-end encryption, and comprehensive audit trails. The AIIMS incident revealed critical gaps including improper network segmentation, inadequate backup systems, and lack of a dedicated cybersecurity division. Healthcare institutions must prioritize cybersecurity budgets-experts recommend allocating 0.25% to 1% of annual budgets specifically for cyber defence.

Interoperability and health information exchange 🔗

Interoperability-the ability of different health systems to exchange and use data efficiently-is the backbone of digital health. Without it, patient records remain fragmented across providers, leading to duplication of tests, delayed diagnoses, and compromised care coordination.

India’s approach through ABDM 🔗

ABDM aims to create a unified digital health ecosystem by establishing key building blocks. Over 67 crore Ayushman Bharat Health Accounts (ABHA) have been created, providing citizens with unique digital health IDs. More than 42 crore health records have been linked to these accounts, enabling access to medical histories across providers.

The mission has established verified registries including the Health Facility Registry (HFR), Healthcare Professionals Registry (HPR), and a Drug Registry. The Health Information Exchange and Consent Manager (HIE-CM) facilitates secure exchange of health information with patient consent, ensuring an open, interoperable, and standards-based digital system.

Challenges in adoption 🔗

Despite comprehensive planning, private sector participation remains limited. Currently, 70% of the Health Facility Registry and 83% of the Health Professional Registry entries come from public sector institutions. Only about 2% of health records linked through registered facilities are shared by private healthcare providers. Key barriers include lack of clear guidelines, integration costs, and concerns about data sharing.

Individual privacy and data confidentiality concerns 🔗

Health data is among the most sensitive categories of personal information. Patients often hesitate to share complete medical histories due to fears about data misuse, discrimination by insurers or employers, or unauthorized access by third parties.

The data protection landscape 🔗

The Digital Personal Data Protection Act (DPDPA) of 2023 represents an important step in regulating personal data processing in India. However, questions remain about its implementation in healthcare settings. The digitalization of health records necessitates stringent data protection measures, particularly given the scale of ABDM covering hundreds of millions of citizens.

When patient information is pooled across multiple applications or shared with third parties-including insurance companies, researchers, or law enforcement-risks of data breaches multiply. The ICMR data leak in 2023, which allegedly exposed personal information of over 81 crore Indians, demonstrates how large-scale health databases can become targets for malicious actors.

Challenges in the Indian context: infrastructure and access 🔗

India’s digital divide poses fundamental challenges for digital health adoption. While urban areas have benefited from improved connectivity and digital literacy, rural regions struggle with limited internet access. Although there are over 400 million internet subscribers in rural areas as of 2024, the quality and reliability of this connectivity often falls short of what is needed for robust digital health services.

Technological constraints 🔗

Low data rates, intermittent connectivity, and limited access to smartphones hinder telemedicine adoption in remote areas. About 70% of Indians live in rural areas where digital literacy remains low. Expanding 5G networks and improving last-mile connectivity are essential for telemedicine to reach underserved populations.

Skilled manpower shortage 🔗

India has approximately 1.1 million doctors, but the doctor-patient ratio still falls short of the recommended 1:1000. This shortage is especially acute in rural areas. Digital literacy among healthcare workers also varies significantly-many practitioners lack formal training in using digital health tools, creating adoption barriers at the provider level.

Legal, ethical, and regulatory issues in telemedicine 🔗

India’s telemedicine landscape was largely unregulated until March 2020, when the government released the Telemedicine Practice Guidelines. These guidelines were incorporated into the Indian Medical Council regulations, providing a framework for remote consultations.

Patient rights and informed consent 🔗

The guidelines establish that any Registered Medical Practitioner (RMP) enrolled with state or national medical registers can provide telemedicine consultations. Key provisions address patient consent, prescribing limitations, and record-keeping requirements. RMPs can prescribe most drugs via teleconsultation except those in Schedule X or regulated under narcotics laws.

Jurisdictional and liability questions 🔗

Since health is a state subject in India, local regulations may conflict with national guidelines. When grievances arise from interstate teleconsultations, legal jurisdiction remains unclear. Questions about what constitutes “reasonable” confidentiality standards or adequate evidence in breach cases need further clarification. The guidelines acknowledge these nascent issues while providing basic protections until comprehensive legislation evolves.

Technology platform responsibilities 🔗

AI and machine learning platforms are not permitted to provide consultations or prescribe medicines directly-they may only assist registered practitioners. Technology platforms must verify that practitioners are properly registered and must report any non-compliance to regulatory authorities. Platforms found in breach can be blacklisted, barring all practitioners from using them.

Economic barriers and reimbursement policies 🔗

High implementation costs and uncertain returns deter many healthcare providers from adopting digital health solutions. Small and medium-sized facilities often lack the capital for necessary infrastructure upgrades, cybersecurity measures, and staff training.

Reimbursement challenges 🔗

Until recently, many insurance policies did not cover telemedicine consultations. In June 2020, IRDAI issued guidelines advising insurers to allow telemedicine wherever in-person consultations are covered under policy terms. However, uniform reimbursement frameworks for digital health services remain underdeveloped.

Incentivizing adoption 🔗

The government has introduced the Digital Health Incentive Scheme (DHIS) to encourage healthcare providers to adopt digital solutions. In FY 2023-2024, the government allocated Rs 341.02 crore to ABDM-a 70% increase from the previous year. Value-based reimbursement models and public-private partnerships can further incentivize adoption of AI and ML-based health systems, making digital health economically viable for providers across the spectrum.

The future role of technology: will computers replace doctors? 🔗

This question generates both excitement and anxiety in healthcare circles. AI’s strength lies in its ability to learn patterns from large datasets, potentially translating entire medical records into diagnostic insights within seconds. From detecting abnormalities in medical imaging to predicting disease outbreaks, AI capabilities are expanding rapidly.

AI as an augmentation tool 🔗

Over 1,000 health-related AI tools have been authorized by the US FDA, and more than two-thirds of physicians globally report using AI to some degree. In India, Apollo Hospitals uses AI to guide doctors in preventing heart attacks by providing personalized risk breakdowns. Startups like Dozee (remote patient monitoring), Niramai (breast cancer detection), and Augnito (medical transcription) are setting benchmarks in healthcare innovation.

Limitations and the human element 🔗

A survey of Indian doctors found that 61% disagree with the notion that AI will replace physicians, while only 16% agreed. The consensus emerging is that AI will complement rather than replace doctors. AI excels at pattern recognition and processing large datasets, but it cannot replicate the empathy, contextual judgment, and trust inherent in doctor-patient relationships.

AI tools can misdiagnose patients and doctors’ own skills can weaken with over-reliance on AI. The recommended approach is to build tools using Intelligent Choice Architecture-systems designed to support human judgment rather than replace it. AI should prompt doctors to look again and weigh alternatives, keeping them actively engaged in clinical reasoning.

The hybrid future 🔗

AI cannot replace general physicians entirely, but it can serve as a powerful support tool-especially in underserved areas where access to trained professionals is limited. The future likely involves a hybrid model where AI handles routine diagnostics, administrative tasks, and preliminary triage, allowing physicians to focus on complex decision-making and personalized patient interactions.

What do you think? As India advances its digital health infrastructure, how can we balance the benefits of technology with the need to protect patient privacy and maintain the human touch in healthcare? What role should citizens play in advocating for both innovation and security in their health data?

References

1. https://pmc.ncbi.nlm.nih.gov/articles/PMC10064942/
2. https://www.orfonline.org/expert-speak/the-aiims-cyberattack-reflects-indias-critical-vulnerabilities
3. https://www.cm-alliance.com/cybersecurity-blog/aiims-ransomware-attack
4. https://pmc.ncbi.nlm.nih.gov/articles/PMC11855927/
5. https://blog.lukmaanias.com/2023/03/22/topic-cyberattack-on-critical-information-ci-infrastructure-a-case-study-of-ransomware-on-aiims/
6. https://www.mohfw.gov.in/?q=en/pressrelease-87
7. https://www.adlittle.com/en/insights/report/catalyzing-digital-health-india
8. https://www.nature.com/articles/s41746-024-01279-2
9. https://ehealth.eletsonline.com/2024/11/advancing-the-digital-health-revolution-in-india-requires-targeted-actions/
10. https://www.cloudthat.com/resources/blog/the-future-of-healthcare-in-india-can-generative-ai-replace-general-physicians
11. https://pmc.ncbi.nlm.nih.gov/articles/PMC10448835/
12. https://pmc.ncbi.nlm.nih.gov/articles/PMC8106416/
13. https://www.ibanet.org/article/15234243-b534-45f6-b303-4919cfe9a2dc
14. https://pmc.ncbi.nlm.nih.gov/articles/PMC9111269/
15. https://pmc.ncbi.nlm.nih.gov/articles/PMC8285156/
16. https://time.com/7315960/ai-healthcare-murali-doraiswamy-marc-benioff-essay/
17. https://pmc.ncbi.nlm.nih.gov/articles/PMC12357720/