Skip to main content
Welcome to Deloitte

If we have selected the wrong experience for you, please change it above.

Strengthening India’s healthcare ecosystem

Unlocking data governance in alignment with the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025

Digital healthcare has evolved over decades through standardised data protocols, digitised health records, and regulatory frameworks such as HIPAA for data privacy and EHR incentive programmes in Western healthcare.

Introduction

While these international benchmarks provide important context for modern healthcare regulation, India has followed a distinct path by leveraging Digital Public Infrastructure (DPI) through the Ayushman Bharat Digital Mission (ABDM) to advance interoperability and security, alongside the DPDP Act, 2023. Regulatory shifts and the growing demand for patient-centred solutions continue to shape this transformation, driving innovation and empowering health management. The implementation of the DPDP Act, 2023 and the DPDP Rules, 2025 has far-reaching and multifaceted implications for individuals and healthcare organisations in India, as demonstrated through the use cases and scenarios explored in this report.

India’s digital health market

India’s digital health ecosystem has expanded significantly through the convergence of AB PM-JAY and ABDM. As of 2026, over 43.52 crore Ayushman Cards, including 1.14 crore Ayushman Vay Vandana Cards for citizens aged 70 and above, have been generated, supported by 36,229 empanelled hospitals, including 19,483 public hospitals. The latest health benefit package provides cashless treatment across 27 medical specialities.

On the digital front, ABDM has enabled over 90 crore ABHA IDs and the linking of more than 100 crore digital health records, with over 5 lakh healthcare facilities using ABDM-enabled software and 9 lakh+ verified healthcare professionals.

These milestones underscore India’s rapid emergence as a digitally integrated and interoperable healthcare ecosystem. 

India’s digital healthcare transformation under the DPDP Act, 2023 requires coordinated efforts across the government, healthcare providers, technology companies, and other stakeholders, with a focus on patient-centred care, data security, and regulatory compliance to harness the potential of digital technologies.

A trusted and patient-centric digital health ecosystem in India depends on strong data governance, with the DPDP Act, 2023 and DPDP Rules, 2025 placing patient data privacy at the forefront while reinforcing healthcare organisations’ legal obligations to safeguard personal data. This framework provides a foundation for responsible digital healthcare, strengthening patient trust and enabling secure, compliant health data practices.

Improved patient outcomes

Maximising EHR investment can empower clinicians and caregivers to focus on helping patients get and stay well, while a highly qualified and experienced Deloitte team serves needs across clinical, revenue and technical disciplines.