A hospital may collect a patient’s name and mobile number at registration — but the data journey does not end there.
Patient data can include:
• Name and identification details
• Mobile number and address
• Aadhaar-related information, where applicable
• Medical records and clinical history
• Diagnostic and laboratory reports
• Insurance and TPA details
• Billing and payment information
• Medical images, scans and other records
The real DPDP compliance challenge is understanding how this data moves across the hospital ecosystem.
From registration and admission to diagnosis, treatment, billing, insurance, third-party sharing, storage and eventual disposal — every data flow should be identified, mapped and assessed.
A hospital's data-protection responsibility extends beyond the registration desk.
The first step towards compliance is knowing what data you have, where it goes, who accesses it and why.
#DPDPAct #DataPrivacy #Healthcare #DataProtection #Compliance #PatientData #HospitalCompliance
No comments:
Post a Comment