DPDP
Security
Device and front-desk security for clinics: screens, shared computers, and BYOD
Lock screens, turn the reception monitor away from the waiting area, set a clean-desk rule, decide a BYOD policy. The layer your software cannot do for you.
· 5 min read
Guides
Clinic software contract checklist: the data-export and exit clauses to read first
Before signing clinic software, read these clauses: data ownership, free usable-format export, an exit window, post-termination deletion, and auto-renewal.
· 5 min read
Security
Cybersecurity basics for a small clinic: passwords, phishing, and safe staff habits
The human side of clinic security: unique logins, strong passphrases, spotting phishing and UPI scams, locking the screen, and a 30-minute staff briefing.
· 5 min read
Security
EMR security checklist: how to vet a clinic software vendor before you buy
A buyer's security checklist: make any clinic vendor demonstrate per-user logins, an audit trail, branch isolation, one-click export, and hosting live.
· 5 min read
Compliance
How to handle a patient data access, correction, or erasure request under DPDP
A clinic runbook for DPDP data-principal requests: publish a contact, log it, verify identity, locate records, then fulfil access, correction, or erasure.
· 5 min read
Security
What to do if your clinic has a data breach
A calm, step-by-step plan for a clinic data breach: contain it, find the scope, preserve your logs, notify the right people, and meet your duties in India.
· 5 min read
Security
Patient consent under the DPDP Act: a clinic's guide
How a clinic handles patient consent under the DPDP Act: give a clear notice, take free and informed consent, honour withdrawal, and protect children's data.
· 5 min read
Security
Patient data security for clinics: a practical guide
A clinic owner's practical playbook for patient data security in India: access control, audit trails, consent under DPDP, breach response, and record retention.
· 7 min read
Security
How long should a clinic keep patient records?
There is no single national rule. Indoor records are commonly kept 3 years under the IMC Regulations 2002, with longer for medico-legal cases. Confirm yours.
· 5 min read
Compliance
The DPDP Act for clinics: a plain-English primer
What India's DPDP Act means for a clinic: your role as a data fiduciary, patient consent and rights, and the security controls that actually matter.
· 2 min read