We recognise the importance
of the personal data you have entrusted to us and this Data Protection
Statement is to assist you in understanding the purpose of collection, use and
disclosure of your personal data by the National University Health System
We are committed to
protecting your personal data, and will manage and process your personal data
in accordance with the requirements of Singapore’s Personal Data Protection Act
2012 (the “PDPA”), the Ministry of Health’s guidelines and directives, and
other relevant legislation such as the Private Hospitals and Medical Clinics
As part of our efforts to
ensure that we properly manage, protect and process your personal data, we will
be reviewing our policies, procedures and processes from time to time and
reserve the right to amend this Data Protection Statement at our discretion.
“Personal Data” refers to any data, whether true or not, about an
individual who can be identified
(a) from that data; or
(b) from that data and other information to which we have or are likely to have
access, including data in our records as may be updated from time to time.
Your personal data, which includes data you provide for registration
purposes, e.g. name, NRIC number, date of birth etc., medical information,
diagnostic imaging, photographic films, financial information and any other
personal information provided by you or your next-of-kin which will be
collected when you present yourself for medical examination or treatment.
Collection, Use and Disclosure
By voluntarily providing your personal data in order to obtain medical
care, it shall be deemed that you have consented to the collection, use,
disclosure and processing of your personal data by the NUHS for the purposes
directly related to the provision of medical care to you, which includes
referrals to other healthcare professionals, institutions and other associated
purposes, e.g. billing, Medisave applications, improvement of services, etc.
When you seek care from other healthcare providers, we will share the relevant
data with them through trusted information systems such as the National
Electronic Health Record (NEHR) system.
We may use your personal data to invite you to participate in suitable care
programmes, or shortlist you for participation in relevant research studies.
As a public healthcare institution, we may also share relevant data and
participate in national and multi-agency efforts to review healthcare policies
and programmes that ensure patient safety and improve the quality of healthcare
services and conduct disease surveillance.
patient confidentiality very seriously.
To safeguard your personal data from unauthorised access, collection,
use, disclosure, copying, modification or any similar risks, we have
endeavoured to put in place appropriate administrative, physical and technical processes
such as up-to-date anti-virus protection, encryption of documents and system,
and limiting access to any personal data.
Retention of your Personal Data
data will be retained in accordance with the Ministry of Health’s guidelines on
the retention of patient data. For any other personal data collected by the
NUHS, we will periodically review to determine if that data is still required and
will only retain it as long as the purpose for which it was collected remains
and until it is no longer necessary for any other legal or business purposes.
is your obligation to ensure that all personal data submitted to us is
complete, accurate, true and correct.
You may access your personal data currently in our possession. We
will process your request in accordance with the access requirements of the
PDPA and will provide you with the relevant personal data within a reasonable
time after the request has been made. A fee may be charged for processing an
You may request to correct your personal data. We will correct your
personal data as soon as practicable after the request has been made unless we
have reasonable grounds not to do so.
You may withdraw your consent for the collection, use and disclosure
of your personal data in our possession by giving reasonable notice to us. Kindly
note that we are obliged to evaluate and process your request. If you choose to
proceed with your withdrawal, do note that it will affect the medical care and
services you would receive from us or other healthcare institutions.
How to Contact Us
require further information on our Data Protection Policy or clarification
related to data protection, please contact us at:
NUH Data Protection Office
We Respect and Keep Your Data Safe
The Personal Data Protection Act (PDPA) protects your Personal Data while enabling organisations to use your data reasonably to serve you. We, as a public healthcare institution, respect and keep your data safe by:
You as a Public Healthcare Institution
When you seek care from other healthcare providers,
we will share relevant data with them through trusted information systems such
as the National Electronic Health Record (NEHR) system. We may use your personal
data to invite you to participate in suitable care programmes, or shortlist you
for participation in relevant research studies.
As a public healthcare institution, we share
relevant data and participate in national and multi-agency efforts to:
Please be assured that if your personal data is
collected, used or disclosed for these purposes, we will protect it as required
under the PDPA and other relevant legislation such as the Private Hospitals and
Medical Clinics Act.