Medical History ‘One OTP Away’: Karnataka Launches Ambitious Statewide Digital Health Record System

BENGALURU — In a major push toward healthcare digitalization, the Government of Karnataka has announced a statewide initiative to unify patient medical records across all public hospitals. The system allows clinicians to access a patient’s comprehensive medical history via a single, consent-based One-Time Password (OTP) linked to their Ayushman Bharat Health Account (ABHA) ID. Following a series of phased pilots conducted between 2025 and early 2026, state health officials are finalizing infrastructure for a comprehensive rollout next year. The initiative aims to eliminate paper records, prevent redundant diagnostic testing, and establish an interoperable, longitudinal electronic health record (EHR) network across all government medical facilities.

Unifying the Care Network: How the System Works

The core architecture relies on integrating Karnataka’s existing Samasta mobile application—primarily utilized by frontline community health workers—with newly upgraded, national-standard Hospital Management Systems (HMS).

To ensure data interoperability, these systems have been configured to comply with the federal guidelines established by the Ayushman Bharat Digital Mission (ABDM).

[Patient ABHA ID Entered] 
       │
       ▼
[OTP Sent to Patient's Mobile] 
       │
       ▼
[Explicit Consent Granted] 
       │
       ▼
[Interoperable EHR Accessed Across Facilities]

When a patient seeks care at a participating government hospital, the attending clinician enters the patient’s unique ABHA identifier. This triggers an automated OTP sent directly to the patient’s registered mobile number. Only after the patient provides explicit verbal or physical entry of this password is the clinician granted temporary access to historical records, including past prescriptions, laboratory results, and immunization histories.

Following initial pilot testing in the districts of Tumakuru, Udupi, Ballari, and Dharwad, the state expanded its secondary trial phase into Vijayapura, Davanagere, and Mysuru. The lessons gathered from these regional rollouts are currently shaping the full-scale deployment framework.

Public Health Implications and Continuity of Care

For the general public, the primary clinical advantage of an interoperable EHR system is the seamless continuity of care across disparate geographic regions. In traditional settings, patients transitioning between primary health centers and tertiary district hospitals frequently face fragmented tracking, missing paper charts, and repeated diagnostic testing.

According to data compiled by national health frameworks, establishing a longitudinal medical record drastically mitigates diagnostic delays and reduces out-of-pocket expenditure associated with duplicated laboratory or radiological assessments.

Clinical Scenario: Consider an individual managing diabetes who is unexpectedly admitted to a municipal hospital far from home. Under the new framework, the attending emergency team can utilize the ABHA-linked OTP system to instantly view previous HbA1c tracking data and insulin regimens prescribed by a rural primary clinic. This immediate access permits accurate, real-time insulin adjustments while eliminating the need for redundant baseline blood draws.

From a broader public health perspective, standardized data exchange allows epidemiologists to monitor disease vectors, track immunization coverage gaps, and identify localized outbreaks with significantly higher velocity, provided the appropriate legal anonymization protocols are maintained.

Expert Perspectives: Infrastructure vs. Privacy Safeguards

The initiative has drawn balanced analysis from both digital health infrastructure architects and legal scholars, highlighting the tension between clinical efficiency and data security.

The Technical Foundation

Supporters of the plan point to the robust architectural alignment with national standards. Digital health integration specialists emphasize that leveraging ABDM-compliant protocols ensures that Karnataka’s public health data isn’t locked in an isolated state silo. Instead, it utilizes standard metadata structures that normalize terms across institutions, minimizing errors when data moves between different hospital software systems.

The Regulatory Gray Areas

Conversely, legal scholars and data protection advocates urge structural caution. Legal policy reviews focusing on Indian healthcare data governance frequently highlight that while the Digital Personal Data Protection (DPDP) Act establishes a baseline for general digital data, the nation still lacks a singular, dedicated legislative framework exclusively tailored to the nuances of processing sensitive personal health information.

Independent data privacy analysts note that operational ambiguities persist regarding long-term data retention limits, precise boundaries for secondary research access, and explicit penalties for institutional data breaches.

Potential Limitations, Risks, and Implementation Barriers

While the technological promise of “one OTP away” records streamlines care, public health experts point out several practical limitations that could hinder equitable execution:

• Coercion and Informed Consent: While an OTP reduces administrative friction, it introduces human-factor vulnerabilities. In fast-paced, overcrowded public hospital outpatient departments, patients may feel institutional pressure to share their OTP without fully understanding which portions of their longitudinal history are being disclosed or who will have long-term visibility into their files.

• Infrastructure Disparities: A statewide digital mandate assumes uniform technological readiness. However, pilot data reveals that rural clinics frequently grapple with unstable internet connectivity, hardware deficits, and varying levels of digital literacy among frontline staff. Without rigorous, continuous technical training, data entry quality may degrade, rendering the interoperable network ineffective.

• Medicolegal and Auditing Requirements: Clinicians themselves express mixed viewpoints. While many favor the immediate visibility of drug allergies and chronic histories, institutional practitioners emphasize that robust, unalterable digital audit trails must be established. Doctors require clear legal assurances regarding their liability if they make treatment decisions based on incomplete or erroneous data entered by a different facility years prior.

The Path to Responsible Deployment

To transition from a promising pilot to a secure, statewide standard of care, public health reviews suggest that Karnataka’s final deployment protocol must incorporate strict technical and administrative safeguards.

As Karnataka prepares its public healthcare infrastructure for the final rollout, the initiative will serve as a critical test case for how large-scale public health systems in developing economies balance the urgent need for clinical efficiency against the constitutional mandate for individual data privacy.

References & Data Sources

• System Announcement & Scope: “Your medical history 1 OTP away: How Karnataka is pushing for unified digital patient records,” The Economic Times / Times of India Health, June 2026. Chronicling pilot expansions, the utilization of the Samasta app, and upcoming deployment targets.

Medical Disclaimer

Medical Disclaimer: This article is for informational purposes only and should not be considered medical advice. Always consult with qualified healthcare professionals before making any health-related decisions or changes to your treatment plan. The information presented here is based on current research and expert opinions, which may evolve as new evidence emerges.