We Care About Your Privacy

As we care for your health, we learn about you. To protect your privacy, we follow certain rules about handling your health information. Our notices provide more detail about these rules.

OVERVIEW

In Jamaica, healthcare privacy is protected by the Data Protection Act 2020. This law outlines the rights of individuals regarding their personal data, including the right to access, rectify, and erase their information. Healthcare providers have a legal obligation to protect personal data and must obtain informed consent before collecting and processing it.

Data Protection Act 2020:

This act sets the framework for data protection and privacy, including specific provisions for healthcare.

Patient Rights:

Patients have the right to access, correct, and erase their personal data held by healthcare providers.

Informed Consent:

Healthcare providers must obtain explicit and informed consent from individuals before collecting and processing their data, except in certain emergency or legally mandated situations.

Confidentiality:

Healthcare providers are legally bound to protect the confidentiality of patient data.

Security Measures:

Healthcare providers are required to implement appropriate technical and organizational measures to safeguard personal data from unauthorized access, loss, or disclosure.

To comply with the Data Protection Act 2020, Kare KONEC Medical is in adherence to the following:

  • Our Electronic Medical Records (EMR) software and hardware
  • Our Provider Access System for insurance billing through Advance Integrated Systems (AIS)
  • Adequacy of our practice protocols
  • Physical setting and environment
  • Staff education and training
  • EMR access controls
  • Contracts with our business associates
  • Patient relations and communications

Our Commitments:

  • Ensure the confidentiality, integrity, and availability of all electronic protected health information
  • Detect and safeguard against anticipated threats to the security of our patients information
  • Protect against anticipated impermissible uses or disclosures
  • Certify compliance with our workforce
  • Rely on our professional ethics and best judgment when considering requests for permissive uses and disclosures of information to vendors, third party, business associates and stakeholders.

To uphold our patients’ trust, our medical centres and affiliate providers will adopt Electronic Medical Records (EMR) protocols, comply with data protection and meaningful use requirements. Additionally, our providers will periodically conduct a security risk analysis. The risk analysis process will lead us to systematically examine many aspects of our medical centres and affiliate provider operations are compliant to the data protection and security rules.