Protecting Patient Data in Clinics

You have protected patient confidentiality since your first day in the profession. This book

does not teach you a new duty — it applies a duty you already know to tools that appeared after it.

Why patient data is not like other data

In a commercial business, data is an asset. In a clinic it is a trust, and three differences make

handling it different:

1. The patient did not choose to share. A shopper gives their number in order to buy; a patient gives

you their medical history because they have to. They have no alternative. That alone raises the level

of the duty.

2. The harm cannot be undone. A leaked card is replaced and a password is changed. But a diagnosis that

reached someone with no right to it cannot be recalled, and its effect may extend into the patient's work,

relationships and marriage.

3. Trust is the clinic's capital. A patient who doubts your confidentiality will withhold something

from you — and it may be the very thing that changes the diagnosis. **So confidentiality is not merely an

administrative obligation; it is a condition of good care.**

Four kinds of harm

When patient data leaks, the harm is not one thing:

To the patient: a condition they would rather not disclose, or information affecting their work or

social standing.

To the therapeutic relationship: a patient who hides symptoms at the next visit.

To the clinic: a reputation built over years and undone by one incident, especially in a city where

people know each other.

To you professionally: liability that may be raised before the competent bodies.

The limits of this book — read them before continuing

I will be plain about three things:

1. This is a book of practice, not of law. I will not tell you what the regulations require of you,

because requirements differ and change, and any book that fixes them becomes a source of error.

Consult the competent bodies directly — the health ministry, your professional syndicate, and any

regulator you fall under — about what specifically applies to you in documentation, retention periods and

notification. Do not rely on a printed book, nor on a system vendor, in a legal matter.

2. I will not explain the buttons of any particular system. Interfaces change, and every clinic runs

something different. I will tell you what to look for and what it means.

3. The content is entirely defensive. How to protect and how to recognise a failure — not how one is

carried out.

Who this book is for

The owner or manager of a clinic: a dentist, a general practice, dermatology, obstetrics, physiotherapy, or

a small centre with several doctors.

It assumes no technical background. No code, no jargon, and no expensive tools to buy. Most of it is

procedure carried out at negligible cost.

The truth that surprises everyone

A question I put to everyone who asks me about protecting their clinic: **where does patient data actually

leak from?**

The expected answer: hacking, a virus, a hacker.

The real answer, in most of what I have seen: the reception screen facing the waiting room. Or the

day's schedule printed on the counter where everyone entering reads it. Or an X-ray sent to the wrong

number. Or a conversation about a patient at audible volume. Or a phone holding patient photos that copies

itself automatically into a family cloud account.

Not one of these is solved by software. All of them are procedures — which is why this book exists.

The rule the whole book rests on

The least data, to the fewest people, for the shortest necessary time, with a traceable record.

Four constraints, and every chapter that follows applies one or more of them.

What the book covers

Twelve chapters: inventorying your data, the clinic as a physical place, internal access, the clinic system

and its vendor, messaging and WhatsApp, photographs and consent, paper, backups and retention, third

parties, acting on an incident, then a full audit producing a work list and a ninety-day plan.

Carrying it out needs neither closing the clinic nor a budget. Most items take minutes, and the

heaviest takes a week.

Action steps

1. Write in three lines: what worries you most about your patients' data today?
2. Sit in the waiting room for five minutes and look at the counter: what can you see from the patient's

seat?

3. Ask yourself: do I have a single written procedure concerning data confidentiality?
4. Consult the competent body about the documentation and retention requirements that apply to you — and

write down what you find.