Senate moves to integrate e-health services in Nigeria hospitals

The Nigerian Senate has advanced a significant legislative initiative by passing for second reading a bill aimed at establishing a comprehensive legal and regulatory framework for the integration of e-health services in hospitals across Nigeria. This proposed legislation seeks to address the current fragmentation and inconsistency in digital healthcare delivery, which has been highlighted by the COVID-19 pandemic. The bill is expected to improve access to quality medical services, enhance efficiency, strengthen data protection, and stimulate innovation within the health sector, providing a much-needed statutory foundation for modern, technology-driven healthcare in the country.

Nigeria's healthcare landscape is on the cusp of a transformative shift with the recent move by the Senate to integrate e-health services into the nation's hospitals. The Senate, on Wednesday, passed for second reading a bill designed to establish a comprehensive legal and regulatory framework for the development, coordination, and integration of electronic health services. This legislative action signals a proactive approach to modernizing healthcare delivery, leveraging technology to overcome persistent challenges such as limited access to specialist care, fragmented patient information, and the burden of distance on patients, particularly in remote communities.

The sponsor of the bill, Senator Jibrin Barau, emphasized that digital healthcare has become indispensable globally for improving service delivery, and Nigeria cannot afford to remain on the margins of this transformation. The COVID-19 pandemic underscored the critical importance of telemedicine, remote consultations, and electronic health information systems in ensuring continuity of care during emergencies. This article will delve into the existing legal framework, analyze the implications of the proposed legislation, and highlight key considerations for legal practitioners navigating this evolving regulatory environment.

The current regulatory landscape for telemedicine and e-health in Nigeria is largely fragmented, lacking a single, dedicated substantive law. Instead, various existing legal instruments intersect with digital healthcare practices. The foundational legislation for the health sector is the National Health Act 2014, which provides a framework for the regulation, development, and management of Nigeria's health system, setting standards for service delivery and mandating confidentiality of patient records. Section 26(1) of the National Health Act specifically declares that all information related to a patient's health must be treated as confidential, with disclosure only permitted under limited circumstances such as patient consent, medical necessity, court order, or public health purposes.

Beyond the National Health Act, other critical pieces of legislation include the Nigeria Data Protection Act (NDPA) 2023 and the Cybercrime Act 2015. The NDPA 2023, which replaced the Nigeria Data Protection Regulation 2019, provides a comprehensive framework for safeguarding personal information, including sensitive health data. It mandates explicit consent for data collection, encrypted storage, patient rights to access and correct data, and a 72-hour notification period for data breaches to the Nigeria Data Protection Commission (NDPC). The Cybercrime Act 2015 is also relevant, as it provides a legal framework for the prohibition, prevention, detection, prosecution, and punishment of cybercrimes, including those affecting critical national information infrastructure, which can encompass health data systems. Additionally, the Medical and Dental Council of Nigeria's (MDCN) Code of Medical Ethics 2008 and the Federal Ministry of Health's National Telemedicine Guidelines 2020 offer professional and administrative guidance, though they are not standalone statutes.

The proposed e-health bill aims to fill the existing legislative vacuum by providing a unified and comprehensive framework for digital health services. This is crucial, as the absence of such legislation has led to inconsistent standards and uncertainty regarding legal responsibilities in digital healthcare delivery. The bill's objectives include strengthening data protection, improving disease surveillance, reducing waiting times through electronic appointment systems, and stimulating innovation. This aligns with broader government initiatives, such as President Bola Tinubu's transmission of 24 health sector bills to the Senate, including a 'Records Officers Registration and Digital Health Bill 2025,' indicating a concerted effort to overhaul and digitize the health sector.

One of the primary legal challenges the new bill must address is the interplay with existing data protection laws. While the NDPA 2023 provides a robust framework for personal data, the e-health bill will need to specifically tailor these provisions to the unique context of health data, which is considered sensitive personal data. This includes detailed guidelines on obtaining informed consent for electronic health records (EHRs), ensuring interoperability of digital health platforms with national healthcare systems, and establishing clear cybersecurity measures to protect patient data from unauthorized access and breaches. The bill is expected to mandate compliance with the NDPA 2023 for all digital health service providers and explicitly link penalties for data breaches to the NDPA.

Furthermore, the legislation will need to clarify issues surrounding the licensing and accreditation of e-health providers, the standard of care in virtual consultations, and liability in cases of medical errors or data breaches in a digital environment. The MDCN Code of Medical Ethics already recognizes telemedicine and cautions practitioners on medico-legal pitfalls such as confidentiality, professional competence, and equipment reliability. The new bill is expected to build on these guidelines, potentially establishing a mandatory licensing requirement for digital health service providers from the Federal Ministry of Health, subject to annual renewal and periodic review. It should also address cross-border practice, given that Nigerian doctors can practice telemedicine from abroad, provided they maintain a registered practice address in Nigeria and comply with MDCN guidelines.

The integration of e-health services also necessitates robust infrastructure and technical standards. The bill is likely to empower the Ministry of Health to develop these technical standards to facilitate seamless integration and data exchange. This will be critical for achieving efficient data exchange, enabling electronic medical records, and supporting data-driven decision-making, as envisioned by initiatives like the Nigeria Digital in Health Initiative (NDHI). The success of this legislative push will depend on its ability to harmonize with existing laws, provide clear regulatory guidance, and foster an environment of trust and security for both patients and providers.

The Senate's move to integrate e-health services into Nigerian hospitals through a comprehensive legal framework marks a pivotal moment for the nation's healthcare sector. This legislation holds the promise of significantly expanding access to quality healthcare, particularly for underserved populations, and enhancing the overall efficiency and resilience of the health system. For legal practitioners, this development signals an impending shift in the regulatory landscape, necessitating a deep understanding of the new compliance requirements.

Attorneys advising healthcare providers, technology companies, and investors in the digital health space must closely monitor the bill's progression and its eventual enactment. Key areas of focus will include data privacy and cybersecurity protocols, licensing and accreditation processes for digital health platforms and practitioners, liability frameworks, and the implications for cross-border healthcare delivery. Practitioners should proactively engage with the evolving regulatory environment to ensure their clients are well-positioned to navigate the opportunities and challenges presented by Nigeria's digital health transformation. The effective implementation of this bill will be crucial in realizing the full potential of e-health to deliver universal health coverage and foster a healthier Nigeria.