PATIENT PRIVACY NOTICE
Al Shifaa Al Mutamayiz Medical Center is committed to protecting the confidentiality, integrity, and security of all Personal Identifiable Information (PII) and Protected Health Information (PHI) entrusted to us. This Data Privacy Notice outlines how patient information is collected, used, disclosed, and safeguarded in accordance with applicable laws and regulations issued by the Department of Health – United Arab Emirates and the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard.
AIM & PURPOSE
This Privacy Notice explains how we collect, use, protect, and share your personal and health information in accordance with the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard and applicable UAE regulations. Our aim is to ensure that every patient clearly understands how their information is handled and the measures we take to safeguard confidentiality. The purpose of this notice is to promote transparency, support your rights as a patient, and demonstrate our commitment to secure, ethical, and lawful data practices while delivering safe, high‑quality healthcare services.
OUR COMMITMENT TO YOUR PRIVACY
We are committed to protecting the confidentiality, integrity, and security of your personal and health information. This notice explains how we collect, use, store, and safeguard your data in accordance with the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard and applicable UAE laws.
DEFINITION OF PII
Personally Identifiable Information (PII)
Personally identifiable information (PII) is any data that could potentially identify a specific individual. Examples are full name, address, identification number, date of birth, gender, memberships to societies, etc.
Protected Health Information (PHI)
Protected health information (PHI), also referred to as personal health information, is demographic information, medical histories, laboratory results, mental health conditions, insurance information, and other data collected to identify an individual and determine appropriate care.
WHY WE COLLECT AND USE YOUR PII AND/OR PHI
We collect and use your Personally Identifiable Information (PII) and/or Protected Health Information (PHI) only for purposes related to providing healthcare services, regulatory compliance, operational requirements, and improving patient care. Your information will not be used for purposes other than those communicated at the time of collection unless permitted by law.
HOW WE COLLECT YOUR PERSONAL INFORMATION
We collect your information during registration, consultations, treatment, through electronic medical records, appointment systems, and from authorized third parties when required for your care or to meet legal obligations.
WHAT INFORMATION WE COLLECT
We collect only the information necessary to provide safe and effective healthcare, including identification details, contact information, medical history, clinical records, diagnostic results, insurance and billing information, and other information required for your treatment.
HOW WE USE YOUR INFORMATION
Your information is used for diagnosis, treatment, care coordination, appointment scheduling, billing, insurance processing, quality improvement, patient safety, legal compliance, and approved clinical audits or research where applicable.
DISCLOSURE AND SHARING OF INFORMATION
Information may be shared only with authorized healthcare professionals, insurance providers, government authorities, Health Information Exchange platforms, and approved service providers where legally permitted or required. We never sell your personal information for marketing purposes.
HOW WE PROTECT YOUR INFORMATION
We protect your information using secure systems, controlled access, cybersecurity measures, staff training, and continuous monitoring in accordance with ADHICS requirements.
YOUR RIGHTS
You may request access to your information, correction of inaccurate records, restriction of processing where applicable, or erasure where permitted by law. Requests are reviewed in accordance with legal and clinical requirements.
DATA RETENTION
Al Shifaa Al Mutamayiz Medical Center retains personal information only for the period necessary to fulfil the purposes for which it was collected or as required under applicable laws and regulatory obligations. Once an individual is no longer a patient of the Center, their personal information will continue to be retained in accordance with our retention policy and UAE legal requirements. When the retention period expires, or the information is no longer required, Al Shifaa Al Mutamayiz Medical Center will ensure that the information is securely and permanently destroyed using approved disposal methods.
CONTACT US
If you have any questions regarding how Al Shifaa Al Mutamayiz Medical Center collects, uses, or protects your Personally Identifiable Information (PII) or Protected Health Information (PHI), please contact us:
Email: info@asmmc.ae
Phone: 037350070
We are committed to protecting your privacy and ensuring your information is handled with the highest standards of confidentiality and security.