Personal Data Protection Statement
We recognise the importance of the personal data you have entrusted to us and this Data Protection Statement is to assist you in understanding the purpose of collection, use and disclosure of your personal data by the National University Health System (NUHS).
We are committed to protecting your personal data, and will manage and process your personal data in accordance with the requirements of Singapore’s Personal Data Protection Act 2012 (the “PDPA”), the Ministry of Health’s guidelines and directives, and other relevant legislation such as the Private Hospitals and Medical Clinics Act.
As part of our efforts to ensure that we properly manage, protect and process your personal data, we will be reviewing our policies, procedures and processes from time to time and reserve the right to amend this Data Protection Statement at our discretion.
1. Personal Data
“Personal Data” refers to any data, whether true or not, about an individual who can be identified
(a) from that data; or
(b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.
Your personal data, which includes data you provide for registration purposes, e.g. name, NRIC number, date of birth etc., medical information, diagnostic imaging, photographic films, financial information and any other personal information provided by you or your next-of-kin which will be collected when you present yourself for medical examination or treatment.
2. Collection, Use & Disclosure
By voluntarily providing your personal data in order to obtain medical care, it shall be deemed that you have consented to the collection, use, disclosure and processing of your personal data by the NUHS for the purposes directly related to the provision of medical care to you, which includes referrals to other healthcare professionals, institutions and other associated purposes, e.g. billing, Medisave applications, improvement of services, etc.
When you seek care from other healthcare providers, we will share the relevant data with them through trusted information systems such as the National Electronic Health Record (NEHR) system.
We may use your personal data to invite you to participate in suitable care programmes, or shortlist you for participation in relevant research studies.
As a public healthcare institution, we may also share relevant data and participate in national and multi-agency efforts to review healthcare policies and programmes that ensure patient safety and improve the quality of healthcare services and conduct disease surveillance.
We take patient confidentiality very seriously. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification or any similar risks, we have endeavoured to put in place appropriate administrative, physical and technical processes such as up-to-date anti-virus protection, encryption of documents and system, and limiting access to any personal data.
4. Retention of Your Personal Data
Your personal data will be retained in accordance with the Ministry of Health’s guidelines on the retention of patient data. For any other personal data collected by the NUHS, we will periodically review to determine if that data is still required and will only retain it as long as the purpose for which it was collected remains and until it is no longer necessary for any other legal or business purposes.
5. Your Obligation
It is your obligation to ensure that all personal data submitted to us is complete, accurate, true and correct.
6. Your Rights
You may access your personal data currently in our possession. We will process your request in accordance with the access requirements of the PDPA and will provide you with the relevant personal data within a reasonable time after the request has been made. A fee may be charged for processing an access request.
You may request to correct your personal data. We will correct your personal data as soon as practicable after the request has been made unless we have reasonable grounds not to do so.
You may withdraw your consent for the collection, use and disclosure of your personal data in our possession by giving reasonable notice to us. Kindly note that we are obliged to evaluate and process your request. If you choose to proceed with your withdrawal, do note that it will affect the medical care and services you would receive from us or other healthcare institutions.
7. How to Contact Us
If you require further information on our Data Protection Policy or clarification related to data protection, please contact us at:
NUH Data Protection (DP) Office
Institutional Service Quality/Call Centre Hotline: 1800-7789243
DP office Email: NUH_DPOffice@nuhs.edu.sg
Ministry of Health’s Notification to Patients
We Respect and Keep Your Data Safe
The Personal Data Protection Act (PDPA) protects your Personal Data while enabling organisations to use your data reasonably to serve you. We, as a public healthcare institution, respect and keep your data safe by:
- Limiting access to only doctors and healthcare personnel who are involved in your care, and the supporting internal processes;
- Conducting regular checks to ensure only authorised persons have accessed your data, and
- Removing details that identify you when using your data for internal purposes as far as possible.
Serving You as a Public Healthcare Institution
When you seek care from other healthcare providers, we will share relevant data with them through trusted information systems such as the National Electronic Health Record (NEHR) system. We may use your personal data to invite you to participate in suitable care programmes, or shortlist you for participation in relevant research studies.
As a public healthcare institution, we share relevant data and participate in national and multi-agency efforts to:
- Review healthcare policies and requirements;
- Review programmes that ensure patient safety and improve the quality of healthcare services;
- Conduct disease surveillance to address public health concerns, and
- Train future generations of healthcare professionals.
Please be assured that if your personal data is collected, used or disclosed for these purposes, we will protect it as required under the PDPA and other relevant legislation such as the Private Hospitals and Medical Clinics Act.