PRIVACY POLICY
Introduction
This policy outlines the organization’s approach to the recording, release and retention of information in relation to its clients in the way health information is collected, stored and shared. We recognize and respect each person’s right to privacy, dignity and confidentiality in all aspects of his or her life. Recognition is given to the fact that client records are legal documents and are an integral component of service delivery.
Purpose
It is our duty to provide quality services to clients. The acquisition and retention of relevant client information is essential for fulfilling this commitment. It is the right of the organization’s clients to have their confidentiality and privacy respected.
The purpose of this Confidentiality and Privacy of Client Information Policy is to provide consistent standards to ensure that employees of MCS Medical Tourism (A Unit of Modern Concepts and Solutions LLP) are aware of and acknowledge these obligations to protect the personal information and other confidential information under the custody and control of Medical Tourism (A Unit of Modern Concepts and Solutions LLP). Client confidentiality and privacy are respected and that written and spoken information is protected from access and use by any unauthorized persons.
The purpose of this policy is to ensure that a high standard of information acquisition and recording is achieved. All staff are to have an appropriate level of understanding about how to meet the organization’s legal and ethical obligations to ensure privacy and confidentiality. We are committed to ensure that information is used in an ethical and responsible manner.
Definitions
“Personal Information” means any information about an identifiable individual, but it does not include business contact information (business contact information is information such as a person’s title, business telephone number, business address, email or facsimile number).
Examples of Personal Information include but are not limited to:
The individual’s name, address, telephone number, personal healthcare number.
An individual’s race, national or ethnic origin, color or religious beliefs or associations.
An individual’s age, sex, sexual orientation, marital status or family status.
The individual’s fingerprints, blood type or inheritable characteristics.
Information about the individual’s health care history, including a physical or mental disability
Information about an individual’s educational, financial, criminal or employment history
Anyone else’s opinions about the individual
The individual’s personal views or opinions, except if they are about someone else.
Personal information can be recorded in any format, including books, documents, maps, drawings, photographs, letters, vouchers, papers, and any other thing on which information is recorded or stored by graphic, electronic, mechanical or otherPolicy
Information about an individual that is required for service delivery will be sought with the individual’s consent. MCS Medical Tourism(A Unit of Modern Concepts and Solutions LLP) is responsible for any personal information under its custody or control. Personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information will be retained only as long as necessary for the fulfilment of those purposes
For each client, the organization will create individual records, and accurately record all relevant personal, medical and service provision information.
- At or before the time Personal Information is collected.
Staff must provide notification and information material to clients and residents at all registration, advising them of:
The purpose for which the information is being collected and the authorization for doing so.
How it will be used by MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP)
Who to contact if the client has any questions about the collection and use of informationThe purpose of client records
Ensure the existence of an adequate information base to facilitate the identification, implementation and delivery of quality services.
Maintain documentation of a legally acceptable standard.
Maintain records about each client and service provision.
Provide information for reporting purposes.
Staff must take all reasonable steps to ensure the accuracy and completeness of any Personal Information they collect.
- Access to client records
As all client information is confidential, all client records will be always stored in a secure environment. Only authorized staff like the CEO, Office Administrator and MV Coordinator) will have controlled access to client information/records. Client records are the property of the organization, but clients may have supervised access to their own records following a written request, either by mail or post.
- Accessing or Sharing Personal Information with Third Parties
No personal information will be shared with third parties or contractors without the consent of the client. Health information will be shared with empaneled hospitals only for the purpose of treatment advice or medical opinion.Failure to comply
Failure to comply with this Policy may result in disciplinary action including, but not limited to, the termination of employment, prosecution and restitution for damages etc.
- Security of Information
MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP) is committed to maintaining the security of Personal Information and other sensitive information, including appropriate physical security of records and security safeguards for computer and network systems
- Retention and Destruction of Personal Information
Records will be retained in accordance with all legal, regulatory and accreditation requirements, as well as with MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP) record retention policies. Records containing Personal Information are expected to identify retention times and then follow the MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP) guidelines and procedures for the secure destruction of Personal Information that is no longer required to ensure the information is destroyed.
The MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP) may be allowed to retain Personal Data for a longer period. Furthermore, the MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP) may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
7.Challenging Compliance
MCS Medical Tourism (A Unit Of Modern Concepts And Solutions LLP) will maintain procedures for addressing and responding to all inquiries or complaints from individuals about its handling of Personal Information and will inform its clients and residents about the existence of these procedures.
Procedures
- General Enquiries or Requests to Amend Personal Information Questions or concerns about collection, access, use or disclosure of Personal Information, reports of privacy breaches or loss of information should be directed to the MCS Medical Tourism Office.
Staff should direct any clients or residents requesting correction or amendment of Personal Information in their medical records to the MCS Medical Tourism Office.
- Complaints
Clients, residents or other members of the public who complain about a breach of their personal privacy or who express concern about the collection or use of their Personal Information should be directed to the MCS Client Relations Department.Requests for Information
Client’s Request for Access to their Own Information Record will facilitate and process by MCS. Request should be mailed to hello@mcsmvt.com. Once the retention period of 2 years expires, Personal Data shall be deleted.