Life Sciences & Health Care 23.04.2026

5-minute read

75 million electronic patient records (EPRs) have been created. Yet fewer than four percent of insured individuals actively use them. Just one in four hospitals has launched pilot operations. From 2026, digitalization penalties of up to two percent per billing case loom. Germany’s largest healthcare digitalization initiative—the EPR—has hit a wall.

75 Million Records, 4% Users: EPR by the Numbers

Since its nationwide launch in April 2025, every statutory health insurance member in Germany automatically receives an electronic patient record—unless they explicitly opt out. The opt-out model works: Only about 5% of insured individuals have objected—4.3% at AOK, 7% at Techniker Krankenkasse, and even 10% at KKH.

The issue isn’t record creation—it’s engagement. Recent surveys show only around 4.2 to 4.6 million insured individuals have registered for a health ID—roughly 6% of SHI (statutory health insurance) members. Active usage is even lower: An estimated 3.6% open their EPR regularly.

For hospitals and outpatient physicians, this means: The infrastructure exists on paper—but rarely makes it into daily care. Today, most patients still face the familiar mix of paper forms, faxed reports, and phone follow-ups during hospital admissions.

The federal government allocated €4.3 billion through the Hospital Future Act (KHZG) to change this. McKinsey estimates the EPR’s annual savings potential at €7 billion—fewer duplicate exams, faster data exchange, and more efficient communication among GPs, hospitals, and specialists. Of the total €42 billion annual digitalization potential in healthcare, only a fraction—€1.4 billion—has been realized so far (McKinsey eHealth Monitor, 2025).

Why Hospitals Are Struggling: KIS Updates, Staffing, and Processes

The DKI rapid survey from March 2026—completed by 489 hospitals—reveals a mixed picture. Ninety percent of respondents have started technical implementation. Forty percent are already piloting ePA integration within clinical workflows—a significant jump from just 7% in September 2025.

Yet: 18% of hospitals are still waiting over five months past the mandatory deadline for their hospital information system (KIS) update. And 43% don’t expect full hospital-wide ePA deployment until Q3 2026. The bottleneck isn’t just technology—it’s the underlying processes.

“Introducing the ePA in hospitals is a genuine transformation project that demands extensive procedural and organizational changes. Hospitals can’t just flip a switch and make it work.” – Prof. Dr. Henriette Neumeyer, Deputy Chair of the Board, German Hospital Association (DKG) (DKG press release, March 2026)

Organizational hurdles weigh heavier than technical ones. The ePA must be woven into existing admission workflows, access rights defined, data protection concepts updated, and medical staff trained. That eats up time and personnel—both in short supply across German hospitals.

Technical setbacks haven’t helped. In February 2026, a smoke detector alarm at a Frankfurt data center knocked out the entire Telematics Infrastructure for eight hours—leaving ePA, e-prescriptions, secure email (KIM), and electronic medication plans (VSDM) inaccessible. The same month, a software glitch at AOK Bavaria mistakenly locked and wiped 6,400 ePAs. No data was lost in either case—but the incidents only fueled skeptics’ concerns.

One underestimated challenge remains the TI connector replacement: Around 7,900 outdated TI connectors using obsolete RSA encryption must be swapped out by the end of 2026, as certificate renewal is technically impossible. The eHBA smart card replacement runs in parallel until 30 June 2026. For hospitals still waiting on their KIS update, these challenges are stacking up.

The Digitalization Penalty: What Hospitals Will Pay From 2026

From 1 January 2026, penalties will apply to five mandatory digital services. Any hospital unable to demonstrate implementation by 31 December 2025 will face a deduction on every billing case:

For a medium-sized hospital handling 15,000 inpatient cases annually with an average revenue of €5,000 per case, the maximum 2% penalty means an annual loss of €1.5 million. These aren’t hypothetical numbers—they’re real financial hits for hospitals that fail to implement all five mandatory services on schedule.

The pressure doesn’t let up: By the end of 2027, at least 60% of inpatient cases must be digitally documented, rising to 70% by the end of 2028. Hospitals that meet the initial implementation requirements but fall short of usage targets will face renewed penalties.

Estonia, Denmark, Germany: A Sobering Comparison

In the Bertelsmann Foundation’s Digital Health Index – which compares 17 OECD countries – Germany ranks 16th. Only Poland scores lower. Estonia and Denmark lead the field, having demonstrated functional digital healthcare for over a decade.

In Estonia, 99% of the population holds a digital patient record; 100% of physicians, hospitals, and pharmacies connect to the national ENHIS system. Its foundation is the X-Road infrastructure, which since 2002 has interoperably linked all public and private IT systems nationwide.

Denmark achieves near-100% e-prescription adoption and sees over one-third of its population use the national health portal sundhed.dk – generating 1.7 million monthly visits. General practitioners and pharmacies operate at 100% connectivity; specialists at 98%.

What unites both nations: centralized political leadership with binding targets, clear interoperability standards from day one, and tangible citizen benefits. The Bertelsmann Foundation identifies five success factors: strong governance, centralized steering instead of fragmented federalism, unambiguous interoperability standards, a constructive culture around errors, and visible added value for citizens.

Germany, by contrast, hosts 130 statutory health insurers – each with different apps – a Gematik caught between ministerial oversight and industry coordination, and 16 federal states pursuing divergent digitalization strategies. The result: Even the ambitious KHZG funding program failed to overcome structural fragmentation. PwC estimates hospitals bear roughly 16% of digitalization costs themselves – and cover 50-100% of ongoing operational expenses (PwC, November 2023).

What IT Leaders Should Do Now

The situation is unsatisfactory – but not hopeless. Those who set the right priorities now can avoid penalties while laying foundations for genuine hospital digitalization.

1. Clarify and escalate KIS update status. Eighteen percent of hospitals still await their KIS update. If the KIS vendor fails to deliver, document this in writing – not only as evidence for payers, but to prove delays aren’t self-inflicted.

2. Define and launch a pilot ward. The jump from 7% to 40% pilot participation shows: Starting yields progress. One ward suffices initially. Crucially, it’s not enough for technology to function – the ePA must integrate into physicians’ and nurses’ daily workflows.

3. Secure proof of commissioning for all five mandatory services. Penalties trigger upon missing commissioning – not delayed implementation. A signed contract or project order can prevent penalties, even if implementation remains underway.

4. Launch a training program. The DKI survey makes it clear: The bottleneck lies not in technology, but in organization. Training for physicians, nursing staff, and administrative personnel must run in parallel with technical implementation – not afterward.

5. Look ahead. The ePA isn’t an isolated IT project. It’s the foundation for the European Health Data Space (EHDS), scheduled to enable cross-border patient data exchange from 2029 onward. Building that foundation today positions your hospital for the next stage of networking. Waiting means catching up later – under even greater time pressure.

Frequently Asked Questions

What is the opt-out rate for the electronic patient record (ePA)?

On average, around 5% of statutory health insurance members have opted out of the ePA. Rates vary by provider: 4.3% at AOK, 7% at Techniker Krankenkasse, and 10% at KKH. Opt-out numbers have plateaued since the April 2025 rollout.

What are the consequences if a hospital fails to avoid the digitalization penalty?

The penalty applies to every inpatient and partial-inpatient billing case and can reach up to 2% of the case revenue. For a hospital handling 15,000 cases annually with an average revenue of €5,000 per case, this could mean up to €1.5 million in annual losses. From late 2027, minimum usage quotas of at least 60% will also be enforced.

How does Germany stack up internationally on digital patient records?

In the Bertelsmann Foundation’s Digital Health Index, Germany ranks 16th out of 17 OECD countries surveyed. Estonia (ranked #1) has maintained 99% coverage and 100% physician connectivity for over a decade. Meanwhile, Denmark has achieved near-universal e-prescription adoption and sees 1.7 million monthly users on its national health portal.

What is the ePA’s potential for cost savings?

According to the McKinsey eHealth Monitor 2025, the ePA alone could save approximately €7 billion annually—by cutting duplicate examinations, streamlining provider communication, and speeding up access to patient data. McKinsey estimates the total annual digitalization potential across German healthcare at €42 billion.

Is the ePA secure?

At the end of 2024, the Chaos Computer Club identified theoretical vulnerabilities that could have allowed unauthorized access to patient records; Gematik addressed the issue before the nationwide rollout. In February 2026, two incidents occurred: an eight-hour outage in the telematics infrastructure (TI) due to a data center fault, and a data mishap at AOK Bavaria where 6,400 records were accidentally locked. No data was lost in either case—but the events highlight that the infrastructure is still evolving.

Header Image Source: Pexels / MART PRODUCTION (px:7089625)