Table of Contents:

In the Swiss healthcare sector, across private clinics, hospital networks, and multidisciplinary outpatient centers (MVZ), the electronic health record (EHR) and the statutory Electronic Patient Record (EPR / Elektronisches Patientendossier – EPD) form the digital foundation for clinical care quality, patient safety, and cross-facility communication. The legislative mandate of the EPR under the Federal Act on the Electronic Patient Record (EPDG, SR 816.1 ), strict data privacy rules for sensitive health data under the revised Data Protection Act (FADP, SR 235.1 ), and mandatory documentation standards under the Medical Professions Act (MedPA) require certified software architectures. Unstructured local PDF shares, unencrypted email transmissions of laboratory findings, or non-interoperable data silos compromise clinical care and violate statutory medical confidentiality under Art. 321 SCC. An EPDG-certified clinical ERP synchronizes structured clinical histories, PACS-linked DICOM imaging archives, lab results, and HIN-secured specialist referrals in real time.

1. Statutory Framework: Federal Act on the Electronic Patient Record (EPDG) and FADP

Digital patient record management and inter-institutional clinical data exchange are governed by the Federal Medical Professions Act (MedPA, SR 811.11 ), the EPDG (SR 816.1 ), and the Data Protection Act (FADP ):

  • Mandatory EPR Affiliation (Art. 3 EPDG): Acute care hospitals, birthing centers, rehabilitation clinics, and newly licensed outpatient practitioners billing compulsory health insurance (OKP / KVG) must legally connect to a certified core community (e.g., CARA, Abilis, e-health Aargau, Post Sanela).
  • Patient Sovereignty & Confidentiality Levels: Patients control viewing rights and classify clinical documents under defined confidentiality tiers ("Normally Accessible", "Restricted Access", "Secret").
  • Emergency Break-the-Glass Protocols: Regulated exception mechanism for life-threatening clinical emergencies, granting temporary override access for medical teams while logging access and automatically notifying the patient.
Certification Mandate for Primary Clinical Systems: Hospital and clinic management software must comply with integration requirements defined by eHealth Suisse (implementing IHE profiles such as XDS.b, PIX/PDQ) to publish treatment records into the Swiss EPR framework.

2. Technical Interoperability: HL7/FHIR Standards, DICOM PACS Integration, and IHE Profiles

A clinical software platform requires data interchange across diagnostic subsystems:

  1. HL7 / FHIR Protocols (Fast Healthcare Interoperability Resources):
    • Standardized electronic exchange of structured patient data (demographics, vital signs, medication schedules complying with the Swiss eMediplan standard, allergy lists, and pathology results).
    • DICOM & PACS Integration (Digital Imaging and Communications in Medicine):
    • Direct connection to diagnostic imaging modalities (X-ray, CT, MRI, ultrasound) with an integrated high-performance Web-DICOM viewer embedded in the electronic patient record.
    • Automated Laboratory Data Pipelines (LDT / HL7 ORU):
    • Automated ingestion of laboratory findings from external clinical diagnostic laboratories (Unilabs, Viollier, Risch), highlighting abnormal values and updating historical trends.

3. Data Security & Access Controls: HIN Identities, Two-Factor Authentication, and Permissions Matrices

Protecting statutory medical confidentiality under Art. 321 SCC requires security measures:

  • HIN Integration (Health Info Net): Encrypted email transmission and referral exchange across the Swiss HIN network with automated attachment cryptography.
  • Role-Based Access Control (RBAC): Granular permissions matrix (attending physician, resident, nursing specialist, MPA, billing administration) with immutable audit logging of every document view.
  • Strong Two-Factor Authentication (2FA / Passkey): Mandatory hardware-token authentication (FIDO2 keys or HIN Sign) for all local and remote clinical system access.

4. Clinical Documentation & Retention Mandates under MedPA / KVG and Compliant Electronic Archiving

Retaining clinical data is subject to statutory retention periods:

  • Statutory Clinical Record Retention Periods:
General Adult Medical Records (Art. 40 let. c MedPA):* Minimum 10 years (and up to 20 years under cantonal health acts in Zurich, Bern, Vaud, or Geneva) from the last recorded treatment. Pediatric & Obstetric Case Files:* Retention required until the patient reaches age 25 to 30. Radiation Therapy & Oncology Records:* Minimum 30 years pursuant to the Swiss Radiological Protection Ordinance (StSV).
  • Audit-Proof Digital Archiving per GeBüV: Digital signatures and timestamping ensure that closed clinical progress notes cannot be altered.

5. System Comparison: Paper Records & Local PDF Folders vs. EPDG-Certified Clinical ERP

Evaluation Criterion Paper Case Files & Local Server Folders EPDG-Certified ACCSoft Clinical ERP
EPR Connection (EPDG) No interface to certified core communities Automated IHE-compliant synchronization with Swiss EPR networks
Data Privacy & FADP Physical loss risks, unencrypted email transfers End-to-end HIN encryption with Swiss ISO 27001 certified hosting
Diagnostic Finding Access Manual physical searches through filing archives Instant real-time access to patient histories and lab results
Interoperability (FHIR/DICOM) Disconnected media breaks for lab and imaging data Integrated Web-DICOM viewer and native HL7/FHIR pipelines
Audit Compliance (Art. 321 SCC) No logging of who viewed physical patient files Tamper-proof digital audit trail logging every record interaction

6. Swiss Statutory Sources, Medical Authorities, and Technical Standards