ABDM rules

ABDM stands for Ayushman Bharat Digital Mission, a flagship initiative by the Government of India (launched as National Digital Health Mission in 2020 and renamed ABDM in 2021). It is implemented by the National Health Authority (NHA) under the Ministry of Health and Family Welfare. It aims to create a seamless, interoperable digital health ecosystem for India, enabling citizens to access and share health records securely, bridging gaps between stakeholders, and supporting universal health coverage.8

It is voluntary for citizens and healthcare providers.35

Key Objectives

  • Build digital public infrastructure for health (e.g., unique IDs, registries, consent systems).
  • Enable creation and linking of Personal Health Records (PHR).
  • Ensure secure, consent-based sharing of health data.
  • Promote interoperability between different health IT systems using standards like HL7 FHIR.
  • Improve efficiency, reduce paperwork, and enhance care quality.0

Core Building Blocks (Digital Public Goods)

  • ABHA (Ayushman Bharat Health Account): A unique 14-digit health ID (like a digital health passport) for citizens. Linked to Aadhaar/mobile for verification. Allows storing/viewing/sharing health records. Over 100 crore created as of recent updates.
  • Health Professional Registry (HPR): Verified registry of doctors and healthcare professionals.
  • Health Facility Registry (HFR): Registry of hospitals, clinics, labs, etc.
  • Health Information Exchange & Consent Manager (HIE-CM): Manages secure data exchange with explicit patient consent.
  • Unified Health Interface (UHI): Enables discovery of services (e.g., labs, ambulances) and seamless transactions.
  • Electronic Health Records (EHR): Standardized, interoperable records.12

Main Rules and Regulations (Key Details)

ABDM operates under a federated architecture (data stays with the original creator/facility, not centralized) with strong emphasis on privacy by design, consent, and security. There is no single “ABDM Act,” but it relies on existing laws (IT Act 2000, DPDP Act 2023) plus specific policies/guidelines.

  1. Health Data Management Policy (HDMP, 2022) — The cornerstone document:
  • Consent is mandatory for data sharing: Explicit, informed, granular (purpose, duration, data type), revocable, and auditable via consent artefacts.
  • Data principals (patients) have rights: access, correction, erasure, portability, grievance redressal (30-day TAT).
  • Federated model: No central database of all records.
  • Security: Encryption (in transit/rest), audit logs, role-based access, breach notification.
  • Data localization: Primarily in India.
  • Applies to all participants: Health Information Providers (HIPs — e.g., hospitals), Health Information Users (HIUs), repositories, etc.
  • Anonymized/aggregated data can be used for public health/research with safeguards.65
  1. Interoperability & Technical Standards:
  • Must use ABDM-compliant software (FHIR R4 standards, SNOMED/ICD terminologies).
  • Providers need to integrate via ABDM Sandbox testing and certification for production access.
  • HIPs (healthcare facilities) must enable “Scan & Share” and link records to ABHA.30
  1. Registry Rules:
  • Professionals: Only duly approved/registered practitioners (via medical/nursing councils) can join HPR. They must follow conduct rules of their councils and ABDM services.
  • Facilities: All types (hospitals, labs, pharmacies) can register.
  1. Privacy & Security Rules:
  • Compliance with DPDP Act 2023.
  • No commercial exploitation of health data without consent.
  • Grievance mechanisms and penalties for violations (via existing laws).
  • Special protections for minors and sensitive data.18
  1. Other Guidelines:
  • Hardware, offline ABHA creation, volunteer data provisioning, HIP/HIU onboarding.
  • Incentives: Up to ₹4 crore for hospitals/labs adopting ABDM.2

Participation & Compliance

  • Citizens: Create ABHA via ABHA app, Aarogya Setu, or linked apps (voluntary).
  • Providers: Register on ABDM portal, integrate software, get certified. Non-compliance limits interoperability benefits but is not mandatory.
  • Enforcement: NHA manages sandbox, certification, and ecosystem compliance.

For official details, visit abdm.gov.in (FAQs, policies, guidelines, and documents like HDMP are available there).4

ABDM is evolving rapidly with linkages to PM-JAY (Ayushman Bharat health insurance) and other schemes. It focuses on citizen empowerment while maintaining high data protection standards. If you need specifics (e.g., how to create ABHA or hospital guidelines), let me know!

Leave a comment