# MySejahtera and Malaysia's Digital Health Push

> After the pandemic, MySejahtera evolved from a COVID-19 screening app into a gateway to public healthcare services, and is now part of Malaysia's push towards integrated electronic medical records.

- Category: healthcare
- Language: en
- Status: published
- Updated: 2026-08-01
- Canonical: https://negaraku.md/en/healthcare/mysejahtera-and-digital-health-records

---

Many people deleted MySejahtera from their phones when the pandemic subsided — but the app did not disappear. It simply changed jobs.

## What does MySejahtera do now?

MySejahtera is no longer a COVID-19 scan-and-check-in app. It has been repurposed into a gateway to public healthcare services. Through the **Appointments** function, users can book 12 types of services at health clinics, among them:

| Service | Examples |
| --- | --- |
| Treatment & screening | General Treatment, National Health Screening Initiative (NHSI), PeKa B40 Health Screening |
| Pre-status examinations | Pre-Marital Examination, Pre-Employment/Pre-Education, prospective Hajj pilgrims |
| Clinical services | Family Planning, Smoking Cessation, Sexual Health, Dental Examination, Pneumococcal Immunisation |

Basic health records such as screening results can also be displayed in the app, making MySejahtera a portable "record book" for many users.

## Who owns MySejahtera and its data?

The government. MySejahtera was originally developed as a corporate social responsibility (CSR) initiative by KPISoft Malaysia — later known as Entomo Malaysia — from 27 March 2020 to 31 March 2021.

The question of ownership sparked debate because its developer was a private company. The Cabinet resolved it through a memorandum approved on **26 November 2021**, transferring administration from the National Security Council to the Ministry of Health Malaysia as sole custodian and owner. In March 2022, the then Health Minister, Khairy Jamaluddin, affirmed that the government fully owns the data, trademark, application modules and source code, with the developer acting only as a "platform operator".

## How did the 2022 data controversy shape public trust?

Trust in MySejahtera was shaken when the Auditor General's Report tabled in Parliament in February 2023 revealed a serious incident. The personal information of **3 million vaccine recipients** had been downloaded through a "Super Admin" account in the MyVAS system between 28 and 31 October 2021, using five different IP addresses.

The account was deactivated on 2 November 2021 and the incident was reported to the authorities on 5 November 2021. As of the report's tabling, investigations were still ongoing and the destination of the exported data had not been identified. This episode served as an important reminder about data governance as Malaysia moves towards digital health records.

## How does MySejahtera connect to the country's digital health records?

MySejahtera is just one piece of a bigger picture. The MOH wants to build a shareable **electronic medical records (EMR)** system so that every citizen has a single health record accessible across public and private facilities — the "one patient, one record" concept.

But progress has been slow. According to the Deputy Director of the MOH's Digital Health Division, Dr Vivek Jason Jayaraj, by 2026 only about **10%** of the public health ecosystem had been digitalised, with full transformation expected to take **5 to 10 years**. He noted that nearly 500 clinics had been upgraded over the previous two years and 20 more hospitals were expected to follow. In March 2024, Dr Dzulkefly Ahmad introduced a national EMR plan with Selayang Hospital as the pilot and a target of completion within 4–5 years.

## What's next

- Follow the phased EMR rollout at hospitals and health clinics near you.
- Check the **Appointments** and **Health Records** functions in MySejahtera before your next visit to a clinic.
- Watch for data protection reforms — under Section 3 of the Personal Data Protection Act 2010, the Act does not apply to the Federal Government and State Governments, a gap that raises governance questions when health data is held by government entities.

## Sources

- What are the services that can be booked in the Appointments function? — https://helpdesk.mysejahtera.malaysia.gov.my/en/support/solutions/articles/51000318775-what-are-the-services-that-can-be-booked-in-the-appointments-function- (MySejahtera (KKM))
- Audit: MySejahtera Data Breach Affected Three Million Users — https://codeblue.galencentre.org/2023/02/audit-mysejahtera-data-breach-affected-three-million-users/ (CodeBlue (Galen Centre))
- Khairy: Government Owns MySejahtera App's IP, Personal Data, Source Code — https://codeblue.galencentre.org/2022/03/khairy-government-owns-mysejahtera-apps-ip-personal-data-source-code/ (CodeBlue (Galen Centre))
- Dr Dzul's Ambitious National EMR Plan Covers Private Facilities, Public Health Data — https://codeblue.galencentre.org/2024/03/dr-dzuls-ambitious-national-emr-plan-covers-private-facilities-public-health-data/ (CodeBlue (Galen Centre))
- Healthcare system to go fully digital in 10 years, says MOH — https://mediaselangor.com/en/2026/07/385818 (Media Selangor)
- Application and Non-Application of the Act — https://www.pdp.gov.my/ppdpv1/en/akta/application-and-non-application-of-the-act/ (Jabatan Perlindungan Data Peribadi (PDP))

---
Source of truth: https://github.com/negaraku-md/NegaraKu.md
License: CC BY-SA 4.0