Data Protection Policy
Commitment to Privacy
This refers to Personal health information and other data that MWS collects to identify an individual and determine appropriate care. The personal data collected will generally include:
- Patient’s name, NRIC number, contact information
- Nationality, gender, marital status, date of birth
- Current medication or treatments used by the patient;
- Test and laboratory results
- Previous/current medical history, including, where relevant, a family medical history; and
- Name of any health service provider or medical specialist to whom the patient is referred
- Name of insurance provider and any information pertaining to patients’ medical insurance coverage
- Next-Of-Kin information
Collection, Use and Disclosure of Personal Data
The information collected will help us serve you in your medical requirements. We may collect and use your personal data for any or all of the following purposes:
- providing medical services to you and meeting your healthcare needs within MWS;
- to avail the services which MWS provides, including, where necessary, the transferring to or sharing of your personal data with third party medical service providers such as specialists, general practitioners, imaging providers, pathology providers, or other allied health professionals
- where there is a serious and imminent threat to an individual’s life, health, or safety;
- where there is a serious threat to public health or public safety;
- responding to queries, enquiries and feedback made by you;
- maintenance and updating of the data;
- administrative or operational purposes;
- collection of fees, charges and expenses for services provided;
- verification and identification purposes;
- filing of medical claims on your behalf with the relevant company, employer or insurance provider;
- processing payment or credit transactions;
- Billing, accounting, auditing and the maintenance of proper book-keeping for the Practice’s operations and business;
- the disclosure of the relevant books, documents, records and information (in hard or soft copy) to the auditors for the preparation of financial reports;
- compliance with the applicable laws and regulations
- Any other incidental business purposes related to or in connection with the above.
Your consent is important to us. We will not collect, use or disclose your personal data unless:
- consent to the collection, use or disclosure has been obtained from you; or
- the collection, use or disclosure of your personal data without your consent is required or authorized under the PDPA or other written law. If you have provided the Practice with any personal data relating to any other individuals, you warrant that you have obtained the necessary consents of these individuals.
Withdrawal of Consent
The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may at any time withdraw consent and request us to stop using and /or disclosing your personal data for any or all of the purposed listed above by submitting your request in writing to our Data Protection Officer at the contact details provided below. Please be aware that once we receive confirmation that you wish to withdraw your consent to receiving marketing communications, it may take up to thirty (30) working days for your withdrawal to be reflected in our systems. During this period of time you may still receive emails, messages or calls from us. Upon receipt of such notice, MWS will inform you of the likely consequences of withdrawing your consent. Depending on the nature of the withdrawal of consent, we may no longer be in a position to continue to provide our services to you. Such a withdrawal may therefore result in the termination of any doctor-patient relationship that you may have with us.
We will take reasonable steps to make sure that the personal data we collect, use or disclose is accurate, complete and up to date.
We endeavour to ensure that all decisions involving your personal data are based upon accurate and timely information. While we will do our best to base our decisions on accurate information, we rely on you to disclose all relevant information and to inform us of any significant changes. While all reasonable efforts will be made to keep your personal data accurate, you are kindly requested to disclose all relevant information, inform us of any change and to ensure that all your personal data that is submitted to us is current, complete, accurate, true and correct.
Safeguards: Protecting Your Information
The Practice maintains personal data in the format of written and electronic files. We will protect your personal data with appropriate safeguards and security measures to prevent misuse, loss and unauthorized access, modification and disclosure. These measures are subject to ongoing review and monitoring. Access to personal data will be authorised only for the doctors and employees associated with MWS, other agents who require access in the performance of their duties, and to those otherwise authorised by law. We provide personal data to health care providers acting on your behalf, on the understanding that they are also bound by law and ethics to safeguard your privacy. We will not keep personal data for longer than is necessary and will take reasonable steps to destroy or permanently de-identify personal information if it is no longer required.
Access and Correction
You are entitled to have access to the personal data about you that is in the possession or under the control of the Practice and information about the ways in which the personal data has been or may have been used or disclosed within a year before the date of the request. This can be done by you making a written application to the Data Protection Officer requesting for any such information. We may charge you a fee (representing our costs in administering your request) for supplying such information and reserve the right to refuse requests which, in our opinion, occur with unreasonable frequency. We will also, where you have requested that we correct an error or omission in the personal data about you that is kept with us, correct such data as soon as practicable and send the corrected personal data to every organisation to which the personal data was sent before it had been corrected, if applicable, unless that organisation does not need the corrected personal data for any legal or business purpose. We may however choose not to provide you with access to or correct such information, in accordance with the exceptions under the PDPA. This would include cases where:
- We are satisfied on reasonable grounds that the correction should not be made;
- The request for access is frivolous or vexatious or the information requested is trivial;
- The personal data is related to a prosecution and all the proceedings related to the prosecution have not been completed;
- The personal data, if disclosed, would reveal confidential commercial information that could, in the opinion of a reasonable person, harm our competitive position; and
- The personal data was collected, used or disclosed for the purposes of an investigation and associated proceedings and appeals have not been completed.
Please also note that we are not required to correct information relating to clinical observations or opinions made in good faith.
Enquiries & Requests
We have designated the Data Protection Officer who will be responsible for ensuring the Practice’s compliance with applicable data protection laws. If you have any queries or requests or wish to make any applications concerning your personal information or data, please contact the Designated Person using the details provided below: