NOTICE UNDER THE PERSONAL DATA PROTECTION ACT 2010
(Personal Data Protection Notice)
KLINIK AS-SALAM (KAS) value your personal data privacy. We subscribe to the personal data protection principles under the Personal Data Protection Act 2010 (hereafter referred to as PDPA) with effect from 13 February 2018, which regulates the processing of personal data in commercial transactions. The terms “personal data”, “processing” and “commercial transactions “shall have the meaning provided in the PDPA.
It is obligatory that you supply us with your personal data. If you fail to supply us with such personal data, we may not be able to process and/or disclose your data for the purposes provided in item C) below.
This Personal Data Notice applies to any person whose personal data is being processed by KAS.
We wish to inform you how your personal data is being processed by and on behalf of KAS.
A) Source of the Personal Data
Your personal data is collected from various sources, including information you have provided us, information from third parties, and information in the public domain.
B) Description of the Personal Data
Your personal data processed by us may include, where relevant:-name, date of birth, identity card or passport, name of employer/company, home and office address, telephone/handphone number, facsimile number, email address, occupation, age, gender, marital status, weight, height, photos, race, nationality, religion, family and/or next of kin information, remuneration information, EPF Number, SOCSO Number, Income Tax number, bank details, education background, training attended, working experiences, medical checkup result, medical record, Medical Report No. (MRN), medical report, diagnosis, personal health information, criminal history, investigation result, insurance details and any other personal data required for the purposes set out in item C) below.
C) Purposes of the Personal Data
Your personal data may be processed for the following purposes, where relevant:-
- For medical and healthcare services
- To facilitate the patients’ personal needs (i.e., an extension of stay for health tourists)
- To establish and manage medical records and medical reports
- To facilitate the payment process relating to the patients
- To institute debt recovery proceedings against defaulters
- To report the personal data to the relevant authorities and/or third parties under the governing laws relevant to the healthcare industry
- To share the personal data with SALAM ALLIANCE SDN. BHD. and its related companies as defined in the Companies Act 1965
- To conduct research, analysis, and improvement
- To market and advertise products and services
- To administer and respond to requests, queries, complaints, and legal issues
- To facilitate human resource management activities relating to employees
- For submission and registration of relevant forms, licenses to the relevant authorities and/or third parties under the governing laws relevant to the healthcare industries
- To share personal data for the purpose of banking facilities, signing of legal and accounting documents
- For purpose of purchase of items, outsourcing of services, new development, and others
- For education and training
- For any other purpose that is incidental or in furtherance of the above purposes.
D) Disclosure of the Personal Data
Your personal data may be disclosed upon approval or consent from patient to the following parties, where relevant:-
- Healthcare professional (as defined in PDPA)
- SALAM ALLIANCE SDN. BHD. (172990-A) and its related companies (as defined under the Companies Act 1965)
- Government agencies, local authorities, non-government agencies
- Paying and insurance agents
- Debt collection authorities and agencies
- Financial institutions
- Legal firms
- Auditors
- Vendor/Contractor
- Other private and public hospitals
- Other Healthcare providers
- Training providers
- Family and next of kin
- To such parties as may be required by law, court, regulator or legal process to disclose
- To such parties as may be permitted under the laws of Malaysia
- Any other person which KAS may deem necessary
Also, your personal data may be disclosed directly in the following cases:
- Violation of law
- Police order
- Harm to the patient
- Harm for others
- Infectious disease
E) Access and Update the Personal Data
We shall do our best to ensure that the personal data we hold about you is accurate, complete, not misleading and up-to-date. If there are any changes to your personal data or if you believe that the personal data we have about you is inaccurate, incomplete, misleading or not up-to-date, please contact us so that we may take steps to update your personal data.
You have the right to access your personal data. If you would like to request access to your personal data, please contact us. We recommend that your request for access to your personal data held by KAS be made in writing. We may also take steps to verify your identity before fulfilling your request for access to your personal data.
In accordance with the PDPA :-
Depending on the information requested, we may charge a fee as stipulated in the First Schedule (Regulation 2) of Personal Data Protection [Fees] Regulations 2013for processing your request for access; and
We may refuse to comply with your request to access or make a correction in accordance with PDPA and if we refuse to comply with such request, we will inform you of our refusal and reason.
If you give us personal data or information about another person, you must first confirm that he/she has appointed you to act for him/her, to consent to the processing of his/her personal data and received on him/her behalf any data protection notice.
Price discrepancies policy
1.If the projected price for medication or services communicated to the patient is significantly lower than it should be, the patient has the right to pay the initially quoted price.
2. This policy ensures fairness and transparency in the communication of medication and service costs to patients.
Data privacy for Infectious Disease Notifications policy
The occurrence of infectious diseases needs to be reported to prevent their spread and control them from escalating into epidemics that could threaten human lives. Notification or mandatory reporting of infectious disease incidents to the authorities is provided for under the Infectious Diseases Prevention and Control Act 1988. The Control of Infectious Diseases Regulations, which were gazetted in 1993, also require the notification of 26 types of infectious diseases under that public health law, using a specific Notification Form.
What are the penalties for not reporting infectious diseases?
Under Section 25 of the Infectious Diseases Prevention and Control Act 1998, a compound of RM 1000 can be imposed by the Director General or Health Officer for the offense of not reporting an infectious disease incident. Section 24 under this act also imposes a General Penalty, and if convicted, the offender can be sentenced to imprisonment for not more than 2 years or a fine or both.
