Hi Aravali Hospital Logo
Super-Speciality Hospital Tauru, Mewat Region
STATUTORY COMPLIANCE • DPDP ACT 2023

Patient Privacy Policy &
Clinical Data Protection Charter

Hi Aravali Hospital adheres to the sacred physician-patient confidentiality covenant. This official charter details our digital and clinical governance framework protecting Electronic Health Records (EHR), Karl Storz laparoscopic surgical video data, 500mA digital X-ray PACS, Ayushman ABHA identities, and billing records across our 35-bed Tauru campus.

🛡️ DPDP Act 2023
Sec. 4 & 8 Certified
🔒 256-Bit AES
PACS & LIMS Encryption
🚫 Zero Data Sale
NMC Code Aligned
⚖️ DPO Desk SLA
< 48h Resolution Time
Ref: HAH-DPDP-2026-V3 Effective: October 2026 • Jurisdiction: Tauru / Haryana
DPO Desk →
01

Scope & Institutional Governance Framework

Statutory Foundations • DPDP Act 2023 • NMC Regulations

This Clinical Privacy Charter governs all personal health data and electronic health records (EHR) generated, processed, and archived at Hi Aravali Hospital, Tauru, District Nuh (Haryana) — comprising our 35-bed inpatient wards, 24/7 emergency casualty, modular Karl Storz laparoscopic operating theatres, computerized diagnostics, and digital patient token services.

Governing Statutory Authorities & Regulations
  • Digital Personal Data Protection Act 2023 (DPDP): Governs digital consent, data minimization, and patient data rights.
  • National Medical Commission (NMC) Code of Ethics 2002: Protects physician-patient privilege and confidentiality.
  • DISHA (Digital Information Security in Healthcare Act): Benchmarks clinical EHR security standards.
  • Haryana Clinical Establishments Act: Mandates statutory registry, licensing, and medical records retention.
02

Categories of Protected Health Information (PHI) We Process

Explicit Demarcation of Collected Clinical Data

To deliver medical diagnostics, emergency resuscitation, and laparoscopic surgeries safely, the hospital collects and maintains four primary categories of protected health records:

🩺

Clinical & Surgical Records

Doctor OPD case sheets, surgical operative notes, anesthesia evaluation charts, daily nursing care sheets, and discharge summaries.

🔬

Diagnostics, Radiology & PACS

500mA digital X-ray DICOM images, ultrasound sonograms, Karl Storz laparoscopic video recordings, and computerized pathology blood profiles.

🪪

Demographic & Identity Verification

Patient full name, age, gender, village/tehsil address, emergency contact numbers, and government identity tokens (Aadhaar, PPP, or Voter ID).

💳

Ayushman & Cashless TPA Claims

Ayushman Bharat PM-JAY Golden Card ID, Chirayu Haryana details, private Mediclaim policy documents, pre-authorization forms, and billing receipts.

03

Lawful Purpose & Medical Treatment Workflow

Why and How Your Data is Lawfully Processed

Under the DPDP Act 2023 (Section 4), personal health data is processed solely for explicit, legitimate medical treatment purposes:

1
Diagnostic Accuracy & Safe Surgical Interventions: Enabling Dr. Md Ilyas and consulting specialists to examine past drug allergies, medical comorbidities, and blood parameters before prescribing surgery or anesthesia.
2
Automated OPD Tokens & Digital Queue Management: Issuing zero-wait OPD token receipts, appointment reminders, and digital reports directly to the patient's verified WhatsApp mobile.
3
Statutory & Communicable Disease Reporting: Fulfilling mandatory public health reporting for communicable diseases (e.g., Dengue, Malaria, Tuberculosis) to the District Civil Hospital and Haryana Health Directorate.
04 100% Zero Data Sale

Strict Zero Commercial Data Sale Guarantee

Sacred Physician-Patient Privilege • NMC Section 7.14

We do not sell, rent, lease, barter, or monetize patient records with pharmaceutical companies, cosmetic marketers, telemedicine aggregators, or third-party telemarketers under any circumstances.

Your medical records are protected by physician-patient privilege under the Indian Evidence Act 1872 and the NMC Code of Medical Ethics Regulations 2002. Clinical files are shared externally strictly under the following three conditions:

• Signed Patient Authorization
• Official Court Subpoena
• Licensed TPA Cashless Claim
05

ABHA, Ayushman PM-JAY & Cashless TPA Data Security

National Health Authority (NHA) & Insurance Compliance

Hi Aravali Hospital supports government healthcare access through Ayushman Bharat PM-JAY and Chirayu Haryana. All health insurance claims are transmitted with high encryption protocols:

National Health Authority (NHA) BIS Portal

Golden Card identity verification is performed via direct API link to the official NHA BIS portal with OTP authorization, ensuring zero local caching of Aadhaar biometric tokens.

Empanelled Cashless TPAs

Pre-authorization request sheets and final discharge summaries are sent only to licensed IRDAI Third Party Administrators (TPAs) strictly for settling the admitted patient's bill.

06

Diagnostic Storage & Radiology PACS Infrastructure

256-Bit AES Encryption on In-Campus Medical Servers

Modern surgical and diagnostic machinery at Hi Aravali Hospital generates high-resolution digital files. We secure these with institutional infrastructure:

🖥️
Digital X-Ray & Sonography PACS (DICOM Standard): High-frequency 500mA X-ray scans and ultrasound sonograms are archived on our Picture Archiving and Communication System (PACS) behind enterprise hardware firewalls.
🎥
Karl Storz HD Laparoscopic Surgical Footage: Intra-operative telescopic recordings (gallbladder, hernia, appendix) are stored on encrypted, role-restricted drives accessible only by the primary surgeon.
🧪
Automated Pathology Barcode Tracking: Blood and urine biochemistry specimens are barcoded with unique patient ID tokens, completely eliminating manual handling errors or unintended data leaks.
07

Your Legal Patient Rights under the DPDP Act 2023

Statutory Entitlements for Patients & Legal Guardians

Under Chapter III of the Digital Personal Data Protection Act 2023, every patient treated at Hi Aravali Hospital holds guaranteed statutory rights:

1. Right to Access & Summary

You have the statutory right to receive a copy of your discharge summary, operative notes, and diagnostic reports within 72 hours of written request at the Medical Records Desk.

2. Right to Correction & Updation

If demographic information, residential address, or mobile number is inaccurately recorded, you can request immediate rectification upon presenting valid photo ID.

3. Right to Nominate

You have the right to nominate an adult family member or legal representative who will be authorized to access your clinical files in case of unforeseen medical incapacitation.

4. Right to Grievance Redressal

Guaranteed right to register a formal data protection complaint with our institutional Grievance Officer with an obligatory written response within 48 business hours.

08

Medical Records Retention & Archival Timelines

Haryana Health Directorate & NMC Archival Standards

Medical record retention at Hi Aravali Hospital is governed by the Haryana Clinical Establishments Act and NMC Medical Council of India protocols:

Record Classification Statutory Retention Period Storage Architecture
Adult Inpatient (IPD) Admissions Minimum 3 Years from Discharge Encrypted Cloud + Physical MRD
Pediatric & Neonatal Records Until Patient Attains 21 Years Encrypted Cloud + Biometric MRD
Medico-Legal Cases (MLC) & Trauma Permanent / Judicial Conclusion Dual-Encrypted Dedicated Safe
OPD Consultation Slips & Tokens 1 Year from Consultation Digital Hospital Server
09 Statutory Grievance Desk

Designated Grievance Officer & 3-Tier Escalation Matrix

Time-Bound Redressal SLA under DPDP Act 2023

If you have inquiries, request clinical record corrections, or wish to register a formal data protection complaint, our dedicated 3-Tier Hospital Escalation Matrix guarantees speedy resolution:

Tier 1 < 4 Hours
Front Desk & MRD In-Charge

Immediate review of routine record copies, OPD receipt queries, and billing corrections.

Tier 2 < 24 Hours
Medical Superintendent

Administrative investigation of data access disputes or formal consent withdrawal requests.

Tier 3 < 48 Hours
Chief Medical Director & Legal

Final institutional arbitration under the DPDP Act 2023 with written compliance receipt.

Official Grievance Officer
Hi Aravali Hospital Administration • Tauru Campus
Helpline: +91 96717 36171 | Email: info@hiaravalihospital.in
Chat with DPO →
10

Frequently Asked Questions • Patient Privacy & Medical Ethics

Transparent Answers to Common Patient Concerns
Bilkul nahi. Hi Aravali Hospital National Medical Commission (NMC) ke Code of Medical Ethics aur DPDP Act 2023 ka 100% palan karta hai. Humara hospital kisi bhi dawa company, telemarketer ya commercial broker ko marij ka data na to bechta hai aur na hi share karta hai. Aapka data kewal aapke ilaj ke liye hospital campus ke surakshit server par rehta hai.