Healthcare and healthtech
Hospitals, clinics, diagnostics, telemedicine and health apps.
In short
Every transfer of patient data, to a lab, an insurer or a software vendor, needs an agreement that limits its use.
Hospitals, clinics, laboratories and health apps collect some of the most private information people share. Under the DPDP Act, patients need to be told clearly what is collected and why.
Health data rarely stays in one place. It moves between doctors, laboratories, pharmacies, insurers and software vendors, and each of these transfers needs an agreement that limits how the data is used and requires it to be kept secure.
Telemedicine services must also follow the Telemedicine Practice Guidelines, which cover identifying patients, recording consultations and prescribing remotely. Health apps that offer advice or track symptoms need terms that are clear about what the app does and does not do.
What usually comes up
- Patient records and consent
- Sharing data with labs, insurers and technology vendors
- The Telemedicine Practice Guidelines
Under the DPDP Act
Consent given for one purpose, such as treatment, does not cover another, such as research or marketing.
What our work involves
- Consent and notice for patient data
- Data sharing agreements with labs, insurers and technology vendors
- Reviewing telemedicine services against the Telemedicine Practice Guidelines
- Agreements with hospital and practice-management software providers