NMC Clarifies Rules for Remote Digital Signatures on Medical Records

It seeks to support consistent adoption of digital healthcare technologies while maintaining patient safety and professional accountability.

The National Medical Commission (NMC) has issued an advisory clarifying the rules for doctors remotely authenticating medical records through digital and electronic signatures.

The guidance outlines requirements for clinical review, professional accountability, data security, and the use of digital signatures across healthcare facilities.

The advisory, issued on October 13, 2026, by the Ethics and Medical Registration Board (EMRB) of the NMC, aims to standardise practices across healthcare establishments as digital technologies become increasingly integrated into clinical workflows.

Digital systems such as Hospital Information Systems (HIS), Electronic Medical Records (EMR), Electronic Health Records (EHR), Laboratory Information Systems (LIS), Radiology Information Systems (RIS), and telemedicine platforms allow registered medical practitioners (RMPs) to review and authenticate clinical documents remotely.

However, differences in institutional practices have raised questions about the legal validity of remote authentication and the responsibilities of doctors signing these records.

Remote Authentication of Medical Records

The NMC has clarified that existing regulations do not prohibit registered medical practitioners from remotely authenticating laboratory and pathology reports, radiology findings, diagnostic interpretations, discharge summaries, and other electronic clinical documents using recognised digital or electronic signatures.

The clarification draws on the Information Technology Act, 2000, which provides legal recognition to electronic records and electronic signatures subject to applicable requirements.

It also refers to the Telemedicine Practice Guidelines, 2020, which recognise the use of information and communication technologies in healthcare delivery.

Clinical Review & Professional Accountability

Under the advisory, doctors must review the relevant clinical information, investigations and supporting records before digitally authenticating a document.

If the available information is insufficient to form a professional opinion, they must obtain further information or undertake additional review before proceeding.

The NMC has also emphasised that digital signatures do not reduce a doctor's professional, ethical or legal responsibilities.

Authentication cannot replace independent clinical judgment or bypass examinations, verification procedures and professional reviews required under applicable laws and standards.

Data Security & Digital Signature Requirements

Healthcare establishments have been advised to maintain appropriate security safeguards, including audit trails, authentication logs, and date and time stamps, to preserve the integrity, confidentiality, and traceability of medical records.

They must also comply with applicable requirements governing health data protection, privacy and cybersecurity.

The advisory limits remote authentication to records generated by healthcare facilities with which the doctor is duly appointed, empanelled, contracted or otherwise professionally associated, subject to applicable laws and lawful access to clinical records.

It further states that digital signatures, authentication credentials, access tokens and related mechanisms must remain under the control of the concerned doctor and must not be shared, delegated or transferred to others.

Suspected compromise or unauthorised use must be reported promptly through the appropriate channels.

Foreign Medical Experts

The NMC has separately clarified that foreign medical experts may provide remote consultations or second opinions to Indian healthcare establishments, subject to applicable law.

Their credentials and opinions should be documented in the patient's medical record, but such consultations do not authorise foreign experts to independently practise medicine in India or certify Indian medical records.

The commission has stated that the advisory clarifies the existing legal framework rather than creating new statutory rights or removing any current regulatory requirements.

It seeks to support consistent adoption of digital healthcare technologies while maintaining patient safety and professional accountability.

Stay tuned for more such updates on Digital Health News