NMC issues advisory for doctors on remote authentication of medical records via digital signatures

Garima

NMC issues advisory for doctors on remote authentication of medical records via digital signatures

Written By : Garima Published On 2026-10-13T15:21:14+05:30 | Updated On 13 Oct 2026 3:21 PM IST

New Delhi: The Ethics and Medical Registration Board (EMRB) of the National Medical Commission (NMC) has issued an advisory for doctors regarding the remote authentication of medical records through digital/electronic signatures.

A clarification issued today, October 13, 2026, by the NMC Secretary, Dr Raghav Langer, has asked all the registered medical practitioners and other stakeholders to ensure compliance with the provisions of the advisory.

The apex medical regulator noted that rapid advancement of digital healthcare technologies has significantly transformed the manner in which healthcare services are delivered across the country, and divergent practices have evolved across healthcare establishments, resulting in uncertainty regarding the remote review and authentication of medical records.

"The High-Level Committee on Non-Financial Regulatory Reforms has also recommended facilitating the use of Digital and Electronic Signatures in medical practice in accordance with the Information Technology Act, 2000, with the objective of promoting ease of healthcare delivery, improving accessibility and reducing avoidable regulatory impediments," the NMC said.

Therefore, in order to promote uniform implementation of the existing legal framework, remove ambiguity relating to remote authentication of medical records through Digital/Electronic Signatures, ensure patient safety, preserve professional accountability and facilitate responsible adoption of digital healthcare technologies, the National Medical Commission has issued the Advisory.

Accordingly, all Registered Medical Practitioners and other concerned stakeholders are informed and advised to ensure compliance with the provisions of the Advisory as follows:

Remote Authentication of Medical Records through Digital/Electronic Signatures:

The rapid advancement of digital healthcare technologies, including Hospital Information Systems (HIS), Electronic Medical Records (EMR), Electronic Health Records (EHR), Laboratory Information Systems (LIS), Radiology Information Systems (RIS), Picture Archiving and Communication Systems (PACS), telemedicine platforms and other digital health solutions, has significantly transformed the manner in which healthcare services are delivered across the country. These technologies enable Registered Medical Practitioners to remotely review, interpret and authenticate clinical information while ensuring timely and efficient healthcare delivery.

The Information Technology Act, 2000 accords legal recognition to electronic records and electronic signatures, subject to the requirements and conditions prescribed thereunder and the rules made thereunder, while the Telemedicine Practice Guidelines, 2020 of EMRB, NMC recognise the use of information and communication technologies for delivery of healthcare services subject to the applicable professional and regulatory requirements. It is noted that, divergent practices have evolved across healthcare establishments, resulting in uncertainty regarding the remote review and authentication of medical records and clinical documents, professional accountability, adequacy of clinical information, security and integrity of electronic records, inter-State practice, cross-border consultations and other allied issues.

A. It is clarified that there is no prohibition under the National Medical Commission Act, 2019, the Regulations framed thereunder or the Telemedicine Practice Guidelines, 2020 of EMRB, NMC against the remote review and authentication of laboratory reports, pathology reports, radiology reports, diagnostic interpretations, discharge summaries and other electronic clinical documents by a Registered Medical Practitioner (RMP) through a Digital Signature or other Electronic Signature or electronic authentication technique recognised under the Information Technology Act, 2000 and the rules made thereunder, as applicable.

B. Remote authentication shall be undertaken only after the concerned RMP has reviewed the relevant clinical information, records, investigations and other material reasonably necessary for forming the professional opinion, and has exercised independent professional judgment in determining whether the report, interpretation, summary or other clinical document is appropriate for authentication. Where the available information is inadequate for forming such professional opinion, the RMP shall refrain from authentication until such further information, examination, verification or review as may be professionally required has been undertaken.

C. The use of a Digital/Electronic Signature shall constitute only the mode of authentication of an electronic record and shall not dispense with or diminish the professional, ethical, legal responsibility of the RMP authorising such report, and shall not absolve the individual as well as the organisational responsibilities arising under the applicable laws, rules and regulations. Authentication of a report shall not be construed as approval of, or as dispensing with, any process, examination, verification or professional review otherwise required under applicable law or professional standards, and shall not be used to bypass or substitute the independent professional judgment of the concerned RMP.

D. Healthcare establishments shall ensure that electronic records are maintained with appropriate security measures, audit trails, authentication logs, date and time stamps and other safeguards to preserve the integrity, confidentiality and traceability of electronically authenticated medical records. Healthcare establishments shall retain electronically authenticated medical records and related authentication and audit logs for the period prescribed under applicable law. They shall also ensure compliance with applicable requirements relating to data protection, privacy, information security and cybersecurity, including requirements concerning the processing, storage, transmission, access, confidentiality and protection of personal health information.

E. An RMP authorised to practise under the National Medical Commission Act, 2019 may remotely authenticate reports generated by a healthcare establishment with which the RMP is duly appointed, empanelled, contracted or otherwise professionally associated, in accordance with applicable law, provided that such remote authentication is undertaken in the course of the RMP's lawful professional engagement and the RMP has lawful access to the relevant clinical records. Nothing in this Advisory shall be construed as conferring any independent right to practise medicine, or as dispensing with any requirement relating to registration, licensing, appointment, jurisdiction or professional practice applicable under any law.

F. Where a foreign medical expert provides a remote consultation or second opinion to an Indian healthcare establishment, such opinion may be considered by the treating team in accordance with applicable law. The identity, professional qualifications, professional registration/licensure, date and nature of the consultation and the professional opinion provided by the foreign medical expert shall, to the extent applicable, be appropriately documented as part of the patient's medical record. Such consultation or opinion shall not, by itself, constitute authorisation or certification of an Indian medical record by the foreign medical expert or confer any right to practise medicine in India.

G. This Advisory shall not be construed as permitting independent medical practice in India by persons who are not authorised to practise under the National Medical Commission Act, 2019, nor shall it be construed as recognising foreign medical registration for such purpose.

H. Nothing contained in this Advisory shall affect the applicability of the National Medical Commission Act, 2019, the Regulations framed thereunder, the Telemedicine Practice Guidelines, the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, the Bharatiya Sakshya Adhiniyam, 2023, DPDP Act, Clinical Establishment Act or any other applicable law governing medical practice, electronic records, patient confidentiality or professional misconduct.

I. This Advisory is clarificatory in nature and is issued to facilitate uniform implementation of the existing legal framework relating to remote authentication of medical records through Digital/Electronic Signatures. It shall not be construed as creating any new statutory right or dispensing with any requirement prescribed under any applicable law.

J. Digital Signatures, Electronic Signatures, signature creation data, authentication credentials, access tokens or other authentication mechanisms used for authentication of medical records shall remain under the control of the concerned RMP and shall not be shared, disclosed, delegated, transferred or knowingly made available to any other person. The concerned RMP shall exercise reasonable care to prevent unauthorised access or use of such credentials. Any suspected compromise or unauthorised use shall be promptly reported in accordance with applicable institutional and legal requirements and appropriate corrective measures shall be undertaken.

To view the NMC advisory, click here

national medical commissionnmcnmc guidelinesdoctorsmedical recordsdigital signatures

Garima

Garima joined Medical Dialogues in 2017 and currently works as the Senior Editor. She oversees coverage of all healthcare topics, with a focus on medico-legal cases, regulatory updates, decisions by NMC, DCI and medical councils, developments in medical education, government policies, and news on medical and dental colleges. She holds a Master’s degree in Journalism and Mass Communication and can be contacted at editorial@medicaldialogues.in | 011-43720751.

Print Article