Is EMR mandatory for private clinics in India? What the NMC, MoHFW, ABDM and state rules actually require.

Short answer: for a private OPD clinic, we found no national rule that requires you to keep patient records in software today. You must keep records, in a set format, and hand over copies on request; that duty is the same on paper or on screen. The places where electronic records do appear in the rules are the Clinical Establishments (Central Government) Rules, 2012, which tie them to whatever the Centre or your state notifies, and the NMC's 2023 conduct regulations, which are not in force. If your clinic is in a state with its own clinical establishments law, read that state's rules before you rely on this answer.

What the NMC requires: records, not software

Doctors' record-keeping duties come from the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002, published in the Gazette on 6 April 2002 and amended up to 8 October 2016. Section 1.3 has four parts. Regulation 1.3.1 asks every physician to keep indoor patient records for 3 years from the start of treatment in the Appendix 3 proforma. Regulation 1.3.2 says a request from the patient, an authorised attendant or a legal authority is acknowledged and the documents issued within 72 hours. Regulation 1.3.3 requires a Register of Medical Certificates and a copy of each certificate.

Regulation 1.3.4 is the only line about computers: "Efforts shall be made to computerize medical records for quick retrieval." That is an expectation of effort, not a requirement to buy software. What is enforceable is the record itself. Regulation 7.2 lists failing to keep indoor records for three years, and refusing to provide them within 72 hours, as professional misconduct. A complaint on this goes to your state medical council.

Retention periods, what counts as an OPD record and how to handle a copy request are covered in our post on how long a clinic must keep medical records. This post sticks to the paper-or-electronic question.

The 2023 "fully digitised" rule is on hold

Most "EMR is mandatory" claims trace back to the NMC's Registered Medical Practitioner (Professional Conduct) Regulations, 2023, notified on 2 August 2023. Regulation 13 D said that within 3 years of publication "the RMP shall ensure fully digitized records". Three weeks later, by a notification dated 23 August 2023 (Gazette of India No. 596, 24 August 2023), the NMC held those regulations "in abeyance with immediate effect", said they "shall not be operative and effective till further Gazette Notification", and adopted the 2002 regulations again.

We checked the NMC's e-gazette listing on 23 October 2026. The August 2023 amendment is still the latest entry on professional conduct. Until the NMC publishes a new notification, the 3-year digitisation deadline is not a rule anyone can hold you to.

Are the MoHFW EHR Standards 2016 compulsory?

The Electronic Health Record (EHR) Standards for India, 2016 come from the e-Health Division of the Ministry of Health and Family Welfare. They revise a set first notified in September 2013, and the document's own cover calls it "Standards Set Recommendations v2.0". Its scope section says it gives "recommendations relevant to adoption of electronic health informatics standards in EHR/EMR and other similar clinical information systems" and "does not cater to wider implementation scenarios such as of administrative, legal or regulatory nature."

Read it as a description of how a good EMR system should behave, not as an order to every clinic to use one. Two of its principles are worth knowing when you compare EMR software in India. Data once saved "must become immutable", with any correction stored as a new version and "a complete audit trail" kept. And records should be preserved for the patient's lifetime, which is much longer than the 3-year floor in the conduct regulations. Ask any vendor how its product handles edits and how you get your data out. Our HIS, HMS, HMIS and EMR explainer covers the EMR and EHR definitions.

Does ABDM make EMR compulsory?

No. The Ayushman Bharat Digital Mission links records across providers, but the official ABDM FAQ says "Participation in ABDM is voluntary including for citizens" and that a facility's participation "is also voluntary and shall be taken by the respective management". Enrolment in the Health Facility Registry is voluntary, and the FAQ adds that council registration is "a mandatory legal requirement" while registration on ABDM "is voluntary". The Ministry told the Rajya Sabha in July 2022 that "Creation of ABHA number is voluntary."

A government scheme or empanelment can set its own conditions, so if your clinic is on one, ask that office in writing. How HFR and HPR registration works is in our ABDM registration guide.

The Clinical Establishments rules: the one place EMR is written in

The Clinical Establishments (Registration and Regulation) Act, 2010 covers clinics, including a clinic run by a single doctor. It applies in the first instance to Arunachal Pradesh, Himachal Pradesh, Mizoram, Sikkim and the Union territories, and to any other state that adopts it by resolution. Section 12(1)(iii) makes "provisions for maintenance of records and reporting as may be prescribed" a condition of registration.

Rule 9(iv) of the Clinical Establishments (Central Government) Rules, 2012 (G.S.R. 387(E), 23 May 2012) then says: "the clinical establishments shall maintain and provide Electronic Medical Records or Electronic Health Records of every patient as may be determined and issued by the Central Government or the State Government as the case may be, from time to time". The words "as may be determined and issued" matter. The duty takes its shape from what the Centre or your state issues under it, so the practical question is what your state's health department has issued for clinics of your category.

State rules can be more specific, and they do not always mention software. The Assam Clinical Establishments Rules, 2016, for example, ask clinics to maintain medical records in the formats developed by the National Council and to keep copies of all records and statistics "for at least 3 years" (rule 16). Nothing in rule 16 says the records must be electronic. Several states run their own clinical establishments laws instead of the central Act; our clinic registration guide shows which law applies where. Read your own state's rules or ask the district registering authority.

Once records are digital, the DPDP Act applies

Going electronic does not add a records duty, but it adds a data protection one. Section 3 of the Digital Personal Data Protection Act, 2023 applies to personal data collected in digital form, or collected on paper and digitised later. A clinic that types the parchi into software is in scope. Section 8(5) asks for reasonable security safeguards against a breach, section 8(6) requires a breach to be reported to the Data Protection Board and each affected patient, and section 8(7) requires erasure once the purpose is served, "unless retention is necessary for compliance with any law". Your records duty under the conduct regulations is such a law.

These sections come into force eighteen months after G.S.R. 843(E) was published on 13 November 2025. The dates and a clinic checklist are in our DPDP guide for clinics.

Each rule at a glance

What a clinic must keep, paper or electronic

• A visit record with the Appendix 3 fields: patient details, date of first visit, clinical note, provisional diagnosis, investigations, advice, follow-up, and the treating doctor's name and signature.
• A copy of every prescription and every medical certificate, with the Register of Medical Certificates (regulation 1.3.3).
• A way to produce any patient's records within 72 hours of a valid request, and a note of what was given, to whom and when.
• Whatever records and reports your state's clinical establishments rules prescribe, for at least the period they set.

When going electronic makes sense anyway

The law sets the floor; the OPD desk decides the rest. At most clinics the pressure to digitise comes from the counter rather than the council: a returning patient whose old parchi is lost, a copy request that means an hour in the storeroom, a follow-up where the doctor wants last month's prescription on screen. Electronic records make sense when:

• you see enough repeat patients that finding the last visit slows the queue;
• copy requests, insurance queries or legal notices arrive often enough that the 72-hour window is tight on paper;
• your state has issued electronic record requirements under rule 9(iv) or its own law;
• you are ready to handle the DPDP duties: who can open a record, backups you control, and a plan for a breach.

If you go electronic, check three things in any product: that it keeps edits with a history instead of overwriting, that you can export all your data yourself, and that it keeps working when the internet drops. Our guide on how to digitise a paper clinic walks through the move.