Data Privacy Notice

Last updated: April 30, 2026

At New Sinai MDI Hospital (NSMDIH), we prioritize your data privacy just as much as we do your health. We are fully committed to complying with the Data Privacy Act of 2012 (Republic Act No. 10173) and dedicated to safeguarding your personal and sensitive information.

You have the right to know exactly how we manage your health information. To ensure transparency, we are outlining our procedures for collecting, using, sharing, accessing, storing, and securely disposing of your personal and medical data.

This notice applies to all your personal and health information, regardless of the format—whether written, digital, or recorded. This includes data generated by the hospital, your physicians, your care team, or any department authorized to handle your information.

WHAT DATA (PERSONAL AND SENSITIVE PERSONAL INFORMATION) ARE BEING COLLECTED BY NSMDIH FROM YOU?

To provide you with the best possible care, our doctors, nurses, and medical staff will collect and maintain accurate records of your personal and health information. Having this timely data allows us to tailor our services to your specific needs and ensures the highest quality of treatment. 

The information we collect may include:

  • Personal Information and Sensitive Personal Information such as but not limited to name, age, sex, birth date , civil status, citizenship, religion, occupation, current employment, address, email address, telephone/mobile
  • Relevant contact information of relatives, guardian, or next of kin
  • Medical conditions and medications or treatment used by patient.
  • Government issued identification
  • Previous/current medical history, including where relevant, a family medical history.
  • The name of the Health Maintenance Organization (HMO).
  • The name of any health service provider or medical specialist, where applicable.
  • The results of any laboratory tests and ancillary services which you provide: and
  • Any other information that will assist us in providing you with better health care

WHAT DO WE DO WITH THE PERSONAL AND SENSITIVE PERSONAL INFORMATION WE COLLECT FROM YOU?

We collect, use, and share your personal and medical information for the following specific purposes:

  • Medical Treatment and diagnosis of patients
  • Processing of Admission, Discharge or Transfer, as well as for your hospital bill and payment.
  • Processing of Philhealth and other Social Welfare discounts and financial privileges for patients.
  • Processing of medication, laboratory, and admission of patients.
  • Processing of medical records of patients.
  • Reportorial Requirements to government agencies and compliance to applicable laws
  • Administrative and operational functions
  • Marketing, research, statistical analysis, quality improvement, historical documentation purposes
  • Safety and security measures: For the safety of our patients, visitors, and staff, and to protect hospital property, NSMDIH utilizes CCTV surveillancethroughout the premises
  • Other legitimate processing which are necessary and as a consequence of the main functions and responsibilities of the hospital.

WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

NSMDIH may disclose or share your personal and sensitive personal information only when necessary and in accordance with applicable laws and regulations. This includes sharing with:

  • Attending physicians, nurses, and other healthcare professionals involved in your care and treatment
  • Hospital departments and authorized personnel for medical, administrative, billing, and operational purposes
  • All entities operating within the Hospital premises, including, but not limited to, third-party service providers for security, housekeeping, and other auxiliary services. The Hospital may share your personal information with these entities solely for the purposes stated in this Notice.
  • Health Maintenance Organizations (HMOs) and insurance companies for billing, coverage verification, eligibility, claims processing, and reimbursement, where applicable
  • PhilHealth and other government agencies for benefits processing, reporting, and compliance with legal requirements
  • Legal authorities or regulatory bodies when required by law, court order, or lawful request
  • With your consent, other third parties engaged by the Hospital to support its quality improvement initiatives, such as process enhancement and data standardization, but only to the extent necessary to carry out such initiatives.

All disclosures are made only to the extent necessary and are subject to strict confidentiality and data protection safeguards.

WHAT ARE YOUR RIGHTS AS THE DATA SUBJECT?

  • Right to be Informed:To know whether your data is being processed and why.
  • Right to Object:To withhold consent to the processing of your data in certain circumstances.
  • Right to Access:To reasonably request a copy of the personal information we hold about you.
  • Right to Rectification:To dispute and correct any inaccuracies in your records.
  • Right to Erasure or Blocking:To request the removal or restriction of your data from our systems.
  • Right to Damages:To be indemnified for any damages sustained due to inaccurate, incomplete, or unauthorized use of your data.
  • Right to File a Complaint. NSMDIH’s Data Protection Office is continually open to resolve concerns.

HOW LONG DO WE KEEP YOUR INFORMATION?

NSMDIH retains personal and sensitive personal information only for as long as necessary to fulfill the purposes for which it was collected, including medical treatment, legal and regulatory compliance, billing, and legitimate hospital operations.

Medical records and other clinical documents are retained in accordance with applicable laws, including guidelines issued by the National Archives of the Philippines (NAP) on records management and retention, as implemented through approved Records Disposition Schedules (RDS) for healthcare institutions. Retention periods may vary depending on the type of record and applicable legal, regulatory, and operational requirements.

Records shall be securely stored throughout their retention period and shall be disposed of or permanently destroyed in a safe and secure manner in accordance with NAP-approved disposal procedures and hospital policies once they are no longer required.

INQUIRIES AND CONCERNS

For inquiries, concerns, or requests regarding your personal data and privacy rights, you may contact the NSMDIH Data Protection Office through:

Data Protection Officer

5th Floor Medical Arts Building, New Sinai MDI Hospital, National Highway Barangay Tagapo, City of Santa Rosa, Laguna

09999219177 / 7759 0634 local 520
[email protected]