Dayanand Medical College & Hospital, Ludhiana.
Privacy & Data Protection Policy
Purpose
DMC & Hospital is the premier institution of Northern India catering the healthcare services to the general public at large to the Punjab State and adjoining States of Northern India. This institute is a NABH‑accredited hospital and is committed to safeguarding patient’s, student’s, and employee’s information across clinical, academic, and digital platforms. This policy outlines how data is to be collected, use, protect and share in compliance with the applicable laws and accreditation standards.
This policy shall include the following:
-
Legal Compliance
-
Adheres to the various provisions of Digital Personal Data Protection Act, 2023, Information Technology Act 2000, Sensitive Personal Data or Information Rules 2011, Intermediaries Guidelines 2021 and other applicable laws, rules and regulations framed by the government from time to time.
-
Aligns with NABH standards for confidentiality and digitally processed personal data management.
-
Data Collected
-
Patient identity, medical records, diagnostics, billing, insurance, vendors, contractors etc.
-
Academic and research data (students, faculty, anonymised studies).
- Technical information (devices, IP, cookies).
-
Purpose of Use
- Admissions, diagnostics, billing and insurance.
- Academic administration and student services.
- Research and clinical trials (with ethics approval).
- Quality audits and accreditation reviews.
- Any of the government authorities.
-
Data Sharing
-
Restricted to internal use, clinical teams, academic committees, service partners and government regulators.
- Bound by confidentiality agreements and legal obligations.
-
Security Measures
-
Hospital user login encryption, role‑based access, firewalls, antivirus and malware protection.
- Regular audits, NABH‑mandated checks.
-
Secure physical record storage through lock based compactor and biometric entrance.
- Regular trainings.
-
User Rights
- Access, correction, deletion (subject to applicable laws).
-
Consent withdrawal, portability and objection to certain processing subject to consent of the data principal.
-
Children and Disabled Persons
-
Parental/guardian consent required for children and disables persons.
-
External Links
-
Third‑party websites are independent, users must review their disclaimers and policies.
-
Data Retention
-
Data will be retained according to the applicable laws and statutory provisions of different statutes applicable to the institute being hospital and educational institution.
-
Updates
-
Policy may be revised to update legal, quality, technology and institutional rules and regulations.