Republic Act (RA) 11223 (An Act Instituting Universal Health Care (UHC) for All Filipinos, Prescribing Reforms in the Health Care System, and Appropriating Funds Therefor), also known as the Universal Health Care Act, provides the legal basis for health reforms in the country. Health reforms are guided by the principles of whole-of-government, whole-of-society, and whole-of-system approach to ensure that health funds are spent judiciously, address the increasing demand for better health services, and increased accountability for results or outcomes.
Section 31 of the Universal Health Care Act mandates that all public and private, national and local health-related entities shall be required to submit health and health-related data to PhilHealth including, among others, administrative, public health, medical, pharmaceutical and health financing data. The health and health-related data shall be submitted to PhilHealth by all health-related entities through a National Health Data Repository, in compliance with Implementing Rules and Regulations (IRR) Section 31.1 of RA 11223 as well as the guidelines that shall be jointly developed by Department of Health (DOH) and PhilHealth, in consultation with the Department of Information and Communications Technology (DICT) and the National Privacy Commission (NPC).
There are four (4) approved policies that support the establishment of the National Health Data Repository (NHDR), namely:
- DOH and PhilHealth Joint Administrative Order No. 2021-0002 - Mandatory Adoption and Use of National Health Data Standards for Interoperability
- DOH and PhilHealth Joint Administrative Order No. 2021-0001 - Implementation and Maintenance of an Integrated Health Information System
- DOH, PhilHealth, and DICT Joint Administrative Order No. 2021-0001 - Implementation of the Standards Conformance and Interoperability Validation
- DOH and PhilHealth Joint Memorandum Circular No. 2021-0001 - Implementation Guidelines on the Processing and Submission of Health Data
PhilHealth shall establish and maintain the NHDR for all health and health-related data submitted by health care providers, insurers, and health-related entities; considered as the overall Data Controller insofar as it controls the processing of health and health-related data; and assume full responsibility in complying with existing and applicable laws, rules, and other relevant issuances relating to the submission and processing of health and health-related data, including data protection.