Medical Confidentiality
Your privacy is important to us. We are committed to protecting your personal and health information with transparency, integrity and confidentiality while delivering quality healthcare services.
Medical Confidentiality Policy
Sri Lakshmi Multi Speciality Hospital recognises that maintaining the confidentiality of patient information is a fundamental ethical, professional and legal obligation. Confidentiality forms the foundation of the trust between patients and healthcare professionals and is essential for delivering safe, respectful and high-quality healthcare.
This Policy has been developed with reference to the National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023, the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Consumer Protection Act, 2019, the Clinical Establishments (Registration and Regulation) Act, 2010 (where applicable), the Tamil Nadu Clinical Establishments (Regulation) Act, 1997 (where applicable), applicable judicial directions and statutory reporting obligations under Indian law, together with the standards of the National Accreditation Board for Hospitals & Healthcare Providers (NABH).
While the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 historically established the professional obligation of medical confidentiality, those Regulations have been superseded by the National Medical Commission Regulations, 2023. Sri Lakshmi Multi Speciality Hospital follows the current regulatory framework while continuing to uphold the long-standing ethical principle of patient confidentiality.
Purpose of this Policy
The purpose of this Policy is to establish clear principles for maintaining the confidentiality of patient information and to define the responsibilities of doctors, nurses, healthcare professionals and Hospital staff in protecting confidential medical information.
This Policy seeks to ensure that confidential information is collected, accessed, used, disclosed and safeguarded in accordance with applicable Indian laws, recognised professional ethics and accepted healthcare standards.
Confidentiality
Protecting patient information at every stage of care.
Trust
Building confidence through ethical medical practice.
Legal Compliance
Following Indian healthcare laws and professional regulations.
Professional Ethics
Upholding the ethical duties of healthcare professionals.
Scope of this Policy
This Policy applies to all registered medical practitioners, consultants, visiting specialists, nurses, pharmacists, laboratory personnel, technicians, administrative staff, trainees, interns, contractual employees and any other authorised individual who has access to patient information while performing duties on behalf of Sri Lakshmi Multi Speciality Hospital.
The Policy applies to all forms of confidential information, including verbal communications, paper records, electronic medical records (EMR), diagnostic reports, laboratory results, prescriptions, photographs, imaging records, billing information and any other information capable of identifying a patient.
"Every member of the Hospital workforce has a duty to protect the confidentiality and dignity of every patient."
Our Commitment to Medical Confidentiality
Sri Lakshmi Multi Speciality Hospital is committed to preserving the confidentiality of all patient information entrusted to us. Confidential information shall be accessed, used and disclosed only for legitimate clinical, administrative or legal purposes and only by authorised personnel with a genuine need to know.
Our Confidentiality Commitment
We are committed to protecting every patient's confidential medical information through ethical professional conduct, responsible information management and compliance with applicable Indian laws and recognised healthcare standards.
Professional Duty to Maintain Medical Confidentiality
Every registered medical practitioner, nurse and healthcare professional associated with Sri Lakshmi Multi Speciality Hospital has a professional, ethical and legal obligation to maintain the confidentiality of patient information. Information obtained during examination, diagnosis, treatment or follow-up shall be treated as confidential and protected against unauthorised access, use or disclosure.
Medical confidentiality continues even after completion of treatment and, where applicable, after the death of the patient, unless disclosure is authorised or required by law.
Professional Obligations
- Maintain strict confidentiality of patient information.
- Respect patient dignity and privacy.
- Access information only when required for patient care.
- Discuss patient information only with authorised persons.
- Comply with professional ethics and applicable laws.
- Protect confidential information throughout the care process.
Ethical Responsibility
Confidentiality is one of the fundamental duties of every healthcare professional and forms the basis of patient trust and safe medical practice.
Patient Consent for Disclosure
Patient information shall not ordinarily be disclosed to any third party without the patient's valid consent, except where disclosure is required or permitted under applicable law or is necessary for providing healthcare services.
Where appropriate, patient consent shall be obtained before sharing medical records, investigation reports, photographs or other confidential information for purposes unrelated to direct treatment or statutory obligations.
"Respect for patient autonomy includes respecting the patient's decisions regarding disclosure of personal medical information."
Circumstances Where Disclosure May Be Permitted
While confidentiality is the general rule, certain disclosures may be required or permitted under applicable Indian laws. In such situations, only the minimum necessary information shall be disclosed and appropriate documentation shall be maintained.
Examples of Lawful Disclosure
- With the patient's informed consent.
- To authorised healthcare professionals involved in treatment.
- Where required by a Court or competent legal authority.
- Where reporting is required under applicable Central or State laws.
- For notifiable diseases or public health reporting, where legally required.
- To insurance companies or Third-Party Administrators (TPAs), where authorised and applicable.
Any disclosure shall be limited to what is reasonably necessary for the lawful purpose and handled with due regard for patient privacy.
Confidential Handling of Medical Information
All patient information shall be handled discreetly and securely. Discussions regarding patient care should take place only in appropriate professional settings and only with authorised personnel involved in the patient's care or Hospital operations.
Staff shall avoid discussing patient information in public areas, elevators, cafeterias, waiting rooms, social gatherings or through unauthorised electronic communication channels. Photographs, videos or audio recordings of patients shall not be taken, stored or shared without appropriate authorisation, except where clinically necessary or otherwise permitted by law.
Confidentiality Throughout Patient Care
Confidentiality shall be maintained at every stage of the patient's healthcare journey, including registration, consultation, diagnosis, investigations, treatment, admission, discharge and follow-up care. All healthcare professionals shall ensure that patient information is disclosed only to authorised individuals directly involved in providing healthcare or where otherwise permitted or required by law.
Patient discussions shall be conducted in a manner that protects privacy and dignity. Reasonable measures shall be taken to prevent unauthorised persons from overhearing or accessing confidential medical information.
Confidential Clinical Practice
- Discuss patient information only in appropriate clinical settings.
- Maintain patient privacy during consultations and examinations.
- Protect confidentiality during ward rounds and multidisciplinary discussions.
- Share information only on a legitimate "need-to-know" basis.
- Respect patient dignity throughout treatment.
- Maintain confidentiality even after discharge or death, except where disclosure is authorised or required by law.
Patient Trust
Respecting confidentiality strengthens patient confidence, encourages honest communication and supports safe, compassionate healthcare.
Electronic Medical Records (EMR) & Confidentiality
Electronic Medical Records (EMRs) and other digital health information systems shall be protected through appropriate administrative, technical and physical safeguards. Access shall be restricted to authorised personnel using secure authentication mechanisms appropriate to their responsibilities.
Hospital personnel shall not access patient records unless required for legitimate clinical, administrative or legal purposes. Unauthorised viewing, copying, downloading, alteration or sharing of electronic records is strictly prohibited.
"Access to electronic medical records shall be limited to authorised personnel with a legitimate need to know."
Responsibilities of Hospital Personnel
Every employee, consultant, registered medical practitioner, nurse, pharmacist, technician, administrative staff member, trainee and contractor is responsible for protecting patient confidentiality. Compliance with this Policy forms part of each individual's professional and organisational responsibilities.
Reporting & Managing Confidentiality Breaches
Any actual, suspected or accidental breach of patient confidentiality shall be reported immediately to the appropriate supervisor, Hospital Administration or the designated Privacy or Information Security Officer, where appointed. Prompt reporting enables timely investigation, mitigation and corrective action.
Reported incidents shall be reviewed in accordance with Hospital policies, applicable laws and recognised governance practices. Where appropriate, corrective and preventive actions (CAPA) shall be implemented to reduce the risk of recurrence.
Breach Response Principles
- Prompt reporting of suspected breaches.
- Confidential investigation of incidents.
- Protection of affected patient information.
- Implementation of corrective and preventive actions (CAPA).
- Documentation of findings and actions taken.
- Continuous improvement of confidentiality practices.
Confidentiality Assurance
Prompt reporting and responsible management of confidentiality incidents help protect patients, strengthen organisational trust and support compliance with applicable Indian laws and professional standards.
Patient Rights Regarding Medical Confidentiality
Sri Lakshmi Multi Speciality Hospital recognises every patient's right to privacy, dignity and confidentiality throughout the course of healthcare. Patients are entitled to expect that their medical information will be protected and disclosed only in accordance with applicable laws, recognised professional ethics and this Policy.
Hospital Responsibilities
Sri Lakshmi Multi Speciality Hospital shall establish and maintain appropriate policies, procedures, safeguards and governance mechanisms to ensure that confidential medical information is protected throughout its lifecycle. The Hospital shall promote a culture of professionalism, accountability and ethical conduct consistent with recognised healthcare standards.
Hospital Commitments
- Protect patient confidentiality throughout the continuum of care.
- Restrict access to confidential information to authorised personnel.
- Maintain secure physical and electronic medical records.
- Provide regular confidentiality and ethics training.
- Investigate confidentiality breaches promptly and fairly.
- Implement corrective and preventive actions (CAPA) where appropriate.
Ethical Healthcare Governance
Hospital Management shall foster a culture of integrity, respect and accountability that protects patient privacy while supporting safe, ethical and lawful healthcare delivery.
Continuous Improvement
Sri Lakshmi Multi Speciality Hospital shall periodically review confidentiality practices, staff awareness, information security measures, audit findings and regulatory developments to strengthen patient privacy and professional standards.
Lessons learned from internal audits, confidentiality incidents, patient feedback and legal developments shall be incorporated into Hospital policies, staff education programmes and operational procedures to promote continuous improvement.
Confidentiality Excellence
Continuous improvement strengthens patient trust, professional accountability and the Hospital's commitment to ethical medical practice and future NABH accreditation.
Policy Review
This Medical Confidentiality Policy shall be reviewed periodically by Hospital Management to ensure continued alignment with applicable Indian laws, National Medical Commission Regulations, recognised professional ethics, evolving healthcare practices and NABH standards.
"Confidentiality is the foundation of trust between patients and healthcare professionals."
Contact Information
Questions regarding this Medical Confidentiality Policy, patient privacy, disclosure of medical information or confidentiality concerns may be directed to the Hospital Administration or the designated Privacy or Compliance Officer, where appointed.
Sri Lakshmi Multi Speciality Hospital
Address:
No. 5/91, Near Apollo Hospital OMR,
Church Road, Perungudi,
Chennai – 600096, Tamil Nadu, India.
Phone: +91 98407 92932
Email: contactus@slmsh.com
Regulatory & Standards Reference
This Medical Confidentiality Policy has been developed with reference to applicable Indian laws, professional medical ethics and recognised healthcare standards governing the confidentiality, protection and lawful disclosure of patient information.
Applicable Indian Laws & Regulations
- National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023.
- Digital Personal Data Protection Act, 2023.
- Information Technology Act, 2000.
- Consumer Protection Act, 2019.
- Clinical Establishments (Registration and Regulation) Act, 2010 (where applicable).
- Tamil Nadu Clinical Establishments (Regulation) Act, 1997 and applicable Rules.
- Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 (historical reference, superseded by the National Medical Commission Regulations, 2023).
- Applicable Central and State Government healthcare laws and statutory reporting requirements.
Quality & Professional Standards
- NABH Standards – Patient Rights & Education (PRE).
- NABH Standards – Information Management System (IMS).
- NABH Standards – Governance & Leadership (GL).
- NABH Standards – Continuous Quality Improvement (CQI).
- Professional Medical Ethics and Confidentiality Principles.
- Clinical Governance and Responsible Information Management Practices.
"Sri Lakshmi Multi Speciality Hospital is committed to maintaining the highest standards of medical confidentiality by protecting patient information with integrity, professionalism and respect, in accordance with the National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023, the Digital Personal Data Protection Act, 2023, applicable Indian laws and recognised NABH standards."