Data Privacy & Patient Confidentiality
Your privacy is important to us. We are committed to protecting your personal and health information with transparency, integrity and confidentiality while delivering quality healthcare services.
Data Privacy & Patient Confidentiality Policy
Sri Lakshmi Multi Speciality Hospital is committed to protecting the privacy, confidentiality and security of every patient's personal and medical information. We recognise that healthcare information is highly sensitive and must be collected, used, stored and shared responsibly in accordance with applicable Indian laws, recognised medical ethics and accepted healthcare standards.
This Policy has been developed with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (to the extent applicable), the National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023, the Consumer Protection Act, 2019, the Clinical Establishments (Registration and Regulation) Act, 2010 (where applicable), the Tamil Nadu Clinical Establishments (Regulation) Act, 1997 (where applicable), and the information management principles promoted by the National Accreditation Board for Hospitals & Healthcare Providers (NABH).
We are committed to ensuring that patient information is handled lawfully, fairly, transparently and securely while maintaining patient trust and supporting safe, quality healthcare services.
Purpose of this Policy
The purpose of this Policy is to explain how Sri Lakshmi Multi Speciality Hospital collects, uses, stores, protects, shares and retains patient personal information during the course of providing healthcare services. This Policy also outlines the rights of patients regarding their personal information and the Hospital's commitment to protecting that information.
The Hospital is committed to maintaining the confidentiality, integrity and availability of patient information through appropriate administrative, organisational, physical and technical safeguards.
Privacy
Respecting every patient's personal information.
Security
Protecting information from unauthorised access.
Compliance
Following applicable Indian laws and medical regulations.
Trust
Building confidence through responsible information management.
Scope of this Policy
This Policy applies to all patients receiving healthcare services from Sri Lakshmi Multi Speciality Hospital, as well as all doctors, consultants, nurses, administrative staff, laboratory personnel, pharmacists, technicians, contractors and authorised individuals who collect, access, process or manage patient information on behalf of the Hospital.
The Policy applies to all forms of patient information, including paper records, electronic medical records, laboratory reports, imaging records, prescriptions, billing records, insurance information and other personal data maintained by the Hospital.
"Protecting patient privacy is a shared responsibility and an essential part of providing safe, ethical and high-quality healthcare."
Our Commitment to Patient Privacy
Sri Lakshmi Multi Speciality Hospital is committed to safeguarding patient information throughout its lifecycle. We collect only the information reasonably necessary for healthcare services, legal obligations and Hospital operations, and we limit access to authorised personnel with a legitimate clinical, administrative or legal need.
Our Privacy Commitment
We respect the trust our patients place in us and are committed to protecting their personal and medical information through responsible data management, legal compliance and continuous improvement of our privacy and confidentiality practices.
What Personal Data We Collect
Sri Lakshmi Multi Speciality Hospital collects only the personal information that is reasonably necessary for providing healthcare services, complying with applicable legal requirements and supporting Hospital operations. The information collected may vary depending on the nature of the healthcare services provided.
Personal information is collected directly from patients, their authorised representatives or other lawful sources, wherever appropriate and permitted by applicable laws.
Types of Personal Data We May Collect
- Name, age, gender and date of birth.
- Residential address and contact details.
- Emergency contact information.
- Government-issued identification, where required by law or voluntarily provided.
- Medical history and previous treatment records.
- Clinical notes, prescriptions and diagnosis.
- Laboratory reports and diagnostic imaging.
- Billing, payment and insurance information.
- Appointment and admission records.
- Any additional information necessary for providing healthcare services.
Why We Collect Your Information
We collect and process patient information only for legitimate healthcare, administrative and legal purposes. Personal information is used to ensure safe, effective and continuous medical care while fulfilling our professional and regulatory obligations.
Healthcare Purposes
- Patient registration and identification.
- Diagnosis and treatment.
- Medical consultations and follow-up care.
- Laboratory and diagnostic services.
- Emergency medical treatment.
- Clinical documentation and continuity of care.
Administrative & Legal Purposes
- Billing and payment processing.
- Insurance and Third-Party Administrator (TPA) claims.
- Appointment management.
- Medical record maintenance.
- Compliance with applicable legal and regulatory requirements.
- Public health reporting where required by law.
Patient Knowledge & Consent
Sri Lakshmi Multi Speciality Hospital respects every patient's right to be informed about the collection and use of their personal information. Personal data shall be collected and processed with the patient's knowledge, except where collection or processing is otherwise permitted or required under applicable law.
Where required by applicable law or Hospital procedures, appropriate consent shall be obtained before collecting, using or sharing personal information for purposes beyond direct patient care, legal obligations or routine Hospital operations.
"Your personal information will not be used for unrelated purposes without your knowledge or where required, your consent, unless otherwise permitted or required by applicable law."
Protection of Patient Information
Sri Lakshmi Multi Speciality Hospital is committed to protecting patient information against unauthorised access, disclosure, alteration, loss or misuse through appropriate administrative, organisational, physical and technical safeguards.
Access to patient information shall be restricted to authorised doctors, nurses and Hospital personnel whose duties require such access. All staff members are required to maintain strict confidentiality in accordance with applicable laws, professional ethics and Hospital policies.
How We Share Your Information
Sri Lakshmi Multi Speciality Hospital respects the confidentiality of patient information. Personal and medical information shall be shared only where necessary for healthcare delivery, with the patient's knowledge where appropriate, or where disclosure is required or permitted by applicable law.
The Hospital does not sell, rent or disclose patient personal information for unrelated commercial purposes. Any disclosure of patient information shall be limited to the minimum information reasonably necessary for the intended lawful purpose.
Information May Be Shared With
- Treating doctors and authorised healthcare professionals.
- Hospital nurses and authorised clinical staff.
- Diagnostic laboratories and imaging centres involved in patient care.
- Pharmacies involved in providing prescribed medicines.
- Insurance companies or Third-Party Administrators (TPAs), where applicable.
- Government authorities, courts or law enforcement agencies where disclosure is required by law.
- Any other person or organisation where the patient has provided appropriate authorisation or where disclosure is otherwise permitted under applicable law.
Your Rights Regarding Personal Information
Sri Lakshmi Multi Speciality Hospital respects the rights of patients regarding their personal information, subject to applicable legal requirements and recognised medical record management practices. Requests relating to personal information shall be handled in accordance with applicable laws and Hospital procedures.
"Patients have the right to understand how their personal information is collected, used and protected."
Patient Rights
- Request access to personal and medical information, subject to applicable law.
- Request correction of inaccurate or incomplete personal information.
- Update contact details and other relevant information.
- Seek clarification regarding the use of personal information.
- Raise privacy-related questions or concerns.
- Exercise rights available under the Digital Personal Data Protection Act, 2023, subject to applicable legal exceptions.
Retention of Medical Records & Personal Information
Sri Lakshmi Multi Speciality Hospital retains patient records and personal information only for as long as necessary to fulfil healthcare, legal, regulatory, administrative and operational requirements. Record retention periods shall comply with applicable Indian laws, recognised professional standards and Hospital policies.
Where records are no longer required to be retained, they shall be securely archived or disposed of using appropriate methods designed to protect patient confidentiality and prevent unauthorised access.
Record Retention Commitment
Medical records are retained in accordance with applicable legal and professional requirements to support continuity of care, patient safety, regulatory compliance and legitimate healthcare needs.
How We Protect Your Information
Sri Lakshmi Multi Speciality Hospital implements appropriate administrative, organisational, physical and technical safeguards to protect patient information from unauthorised access, disclosure, alteration, loss or misuse. Information security measures are periodically reviewed to address evolving risks and support continuous improvement.
Security Commitment
Protecting patient information is an essential part of our commitment to quality healthcare, legal compliance and maintaining the trust placed in us by every patient and family.
Patient Responsibilities Regarding Personal Information
Patients play an important role in ensuring that their personal and medical information remains accurate and up-to-date. Accurate information enables the Hospital to provide safe, effective and timely healthcare services.
Hospital Responsibilities
Sri Lakshmi Multi Speciality Hospital is committed to protecting patient privacy through appropriate administrative, physical, organisational and technical safeguards. The Hospital shall ensure that patient information is handled responsibly, securely and in accordance with applicable Indian laws and recognised healthcare standards.
Hospital Commitments
- Protect patient confidentiality at all times.
- Restrict access to authorised personnel only.
- Maintain secure physical and electronic records.
- Implement appropriate cybersecurity safeguards.
- Provide staff training on privacy and confidentiality.
- Investigate reported privacy concerns appropriately.
Privacy Governance
We continuously strengthen our privacy practices through responsible governance, staff education, information security measures and compliance with applicable healthcare laws and recognised quality standards.
Continuous Improvement
Sri Lakshmi Multi Speciality Hospital shall periodically review its privacy practices, information security controls, patient feedback and regulatory developments to improve the protection of personal information and strengthen organisational compliance.
Lessons learned from privacy incidents, internal reviews, audits and technological developments shall be incorporated into policies, procedures and staff training programmes to enhance patient confidentiality and information security.
Continuous Privacy Improvement
Continuous improvement helps strengthen patient trust, protect personal information and support Sri Lakshmi Multi Speciality Hospital's commitment towards future NABH accreditation.
Policy Review
This Data Privacy & Patient Confidentiality Policy shall be reviewed periodically by Hospital Management to ensure continued compliance with the Digital Personal Data Protection Act, 2023, applicable healthcare regulations, evolving privacy requirements and recognised healthcare information management standards.
"Protecting patient privacy is fundamental to ethical, safe and trustworthy healthcare."
Contact Information
Questions regarding this Data Privacy & Patient Confidentiality Policy or concerns relating to the collection, use or protection of personal information may be directed to the Hospital Administration or the designated Privacy or Information Security Officer, where appointed.
Sri Lakshmi Multi Speciality Hospital
Address:
No. 5/91, Near Apollo Hospital OMR,
Church Road, Perungudi,
Chennai – 600096, Tamil Nadu, India.
Phone: +91 98407 92932
Email: contactus@slmsh.com
Regulatory & Standards Reference
This Data Privacy & Patient Confidentiality Policy has been developed with reference to applicable Indian laws, professional regulations and recognised healthcare information management standards governing the collection, use, protection, disclosure and retention of patient personal information.
Applicable Indian Laws
- Digital Personal Data Protection Act, 2023 (DPDP Act).
- Information Technology Act, 2000.
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (to the extent applicable).
- National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023.
- Consumer Protection Act, 2019.
- Clinical Establishments (Registration and Regulation) Act, 2010 (where applicable).
- Tamil Nadu Clinical Establishments (Regulation) Act, 1997 and applicable Rules.
- Applicable Central and State Government healthcare regulations.
Quality & Professional Standards
- NABH Standards – Information Management System (IMS).
- NABH Standards – Patient Rights & Education (PRE).
- NABH Standards – Governance & Leadership (GL).
- NABH Standards – Continuous Quality Improvement (CQI).
- Healthcare Information Security & Confidentiality Principles.
- Professional Medical Ethics and Patient Confidentiality Standards.
"Sri Lakshmi Multi Speciality Hospital is committed to protecting the privacy, dignity and confidentiality of every patient by handling personal information responsibly, securely and transparently in accordance with the Digital Personal Data Protection Act, 2023, applicable Indian healthcare laws and recognised quality standards, while supporting our ongoing journey towards future NABH accreditation."