Eminance goes a long way towards helping you comply with the Protection of Personal Information (POPI) Act. However, there are a number of obligations that you as a medical practice have, amongst them;
- You may only collect information for specific purposes
- You are required to implement reasonable measures to protect the information
- You are required to ensure that the information is current and relevant.
- You may only store as much data that is needed and only for the period that it is required
- Any patient may view the data on request.
Much of the requirements and burden of proof lies with the practice where consent under the Act has to be specific, relevant, voluntary and informed. That’s why Eminance allows you to generate a patient consent form. This document protects you, especially in the case where a patients record, or part of that record is referred to another practitioner. It ensures that the patient is made aware of the reason why the information was collected, one of the requirements of the Act.
Eminance offers a high level of security and audit trail logging. Our programs allow different levels of security for different members of staff. In this way we satisfy the legal requirement of unlawful access to the data.
The database that stores your data allows for a “roll-back”. One of the benefits is that in the event of something going wrong, the last transactions and records integrity are maintained. In addition, we have automated backup routines that are password protected. In so doing, we fulfill the POPI requirement to implement reasonable technical precautions to ensure that the data is protected from damage, loss and unauthorised destruction.
The Act requires that the data be preserved and to take all necessary steps to ensure that this process is reviewed from time to time. Eminance ensures that we remain at the forefront of technology by assessing any risks and updating the program at no cost to the practice to ensure compliance.
At Health Focus, we take the POPI requirements seriously. After all, if found guilty under the Act, your practice can be fined up to R10m, a prison sentence of up to 10 years; or both.