Hospitals to Secure Certification as Data Handlers Under New Legislation.

All health institutions must obtain certification as data handlers or processors under the Data Protection Act, 2019, according to new compliance requirements announced by the Kenya Medical Practitioners and Dentists Council (KMPDC) on Tuesday.

This move aims to enhance patient privacy and regulate the handling of personal data within healthcare facilities. Starting January 1, 2025, all newly registered health facilities will be required to present a valid Certificate of Data Handler/Processor from the Office of the Data Protection Commissioner. This certification will confirm that health institutions are meeting legal obligations to safeguard personal data and protect individual privacy.

Existing health facilities must apply for the certification by March 31, 2025, giving them a three-month window to meet the new requirements. This regulation is part of the legal framework under the Data Protection Act, 2019.

KMPDC emphasized that these measures are crucial for maintaining ethical medical practices, ensuring confidentiality, and securing patient information. The KMPDC is tasked with regulating the practice of medicine, dentistry, and community oral health under the Medical Practitioners and Dentists Act (CAP 253).

This initiative is designed to build trust with patients, prevent data breaches, and improve the overall safety of health information across the country. KMPDC Chief Executive Officer, David Kariuki, underscored the significance of adhering to these standards.

“This requirement highlights the critical importance of patient privacy, a fundamental principle of medical ethics,” Kariuki said. “By ensuring the responsible and lawful handling of personal data, health institutions not only comply with regulations but also enhance patient trust and safety.”

The Data Protection Act, 2019, regulates the processing of personal data to safeguard individual privacy and mitigate the risk of data misuse across various sectors, including healthcare. As health facilities prepare for these new regulations, the KMPDC is working to ensure that all stakeholders are well-informed and prepared to comply with the changes.