Security & Compliance

Data Rights & Privacy Requests (DPDPA)

Admins, Front desk, Patients dpdpa data-rights privacy gdpr-style subject-access-request

Data Rights (?page=data-rights) manages patient data-rights requests under India's Digital Personal Data Protection Act (DPDPA) — things like requests to access, correct, or erase personal data. Staff see and act on all requests here; patients submit their own requests from within the Patient Portal.

Step-by-step: handling a request (staff)

  1. Go to Data Rights.
  2. Review incoming requests — each shows the type of request and requesting patient.
  3. Investigate and take the appropriate action (e.g., compile the requested data, correct a record, process an erasure per policy).
  4. Update the request's status once resolved.

How patients submit a request

From the Patient Portal → Settings → Privacy & Rights section, a patient can submit a data rights request without needing to contact the clinic directly first.

Common issues & fixes

clinical records often have legal/medical retention obligations that may limit full erasure; document the applicable policy when responding.
since these are compliance-sensitive, ensure a designated staff member regularly monitors this queue rather than relying on ad-hoc checks.

Was this article helpful?

Thanks for the feedback!

Related articles

Security & Compliance
Security Incidents & Audit Logs
Patient Portal
Patient Portal Settings & Privacy
ESC
↑↓ navigate ↵ open esc close