Privacy Policy

1. Institutional Overview & Scope

This Healthcare Provider Privacy Policy applies to registered hospitals, nursing homes, polyclinics, and multi-specialty healthcare institutions utilizing DR. Khokha for hospital information management, OPD scheduling, teleconsultations, and physician roster coordination.

2. Institutional & Clinical Data Handling

DR. Khokha processes institutional data strictly on behalf of the healthcare provider, acting as a secure data processor:

• Affiliated Clinician Data: Medical registration certificates, qualifications, specialty licenses, duty rosters, and consultation tariff structures.
• Inpatient & Outpatient Records: OPD registration numbers, triage classifications, attending doctor assignments, medical notes, and billing ledgers.
• Administrative Accounts: Access control credentials for hospital administrators, billing clerks, reception staff, and nursing stations.

3. Compliance with Healthcare Regulations

Healthcare Providers utilizing DR. Khokha operate in full compliance with applicable Indian and international healthcare legislation, including:

• The Digital Personal Data Protection (DPDP) Act, 2023.
• The Information Technology Act, 2000 and Reasonable Security Practices Rules.
• National Medical Commission (NMC) Telemedicine Practice Guidelines, 2020.
• Clinical Establishments (Registration and Regulation) Act.

4. Role-Based Access Controls (RBAC)

Hospital administrative accounts are governed by strict role-based access. Receptionists and booking staff cannot view clinical treatment notes or sensitive diagnoses; conversely, medical history is strictly restricted to authorized treating physicians and clinical nursing staff.

5. Institutional Audit Trails & Data Retention

All access to electronic health records, prescription modifications, and diagnostic uploads within the provider portal are logged with tamper-proof timestamps, IP addresses, and user identifiers to facilitate regulatory and clinical audits.

6. Data Breach Notification & Inquiries

Institutional privacy officers may direct compliance queries to: provider-privacy@drkhokha.healthboat.org.