The article examines the process of transition to digital healthcare in the Russian Federation and, in particular, emerging risks and potential problems in the field of information security and privacy protection, which includes personal data and privileged information, especially patient privilege. To level out the risks and protect the interests of both patients and physicians, as well as to integrate advanced technologies into the health care system, the authors suggest creating integrated databases for physicians to help develop decision support systems, artificial intelligence and customised patient care. Another suggestion is to expand the range of actors and to revise the list of circumstances allowing for access to medical data. The authors also point out that the risk of identification can be downplayed by establishing a ban on attempts to re-identify along with formulating proper rules on liability for violation.