1. Commitment to Health Data Privacy & DISHA Compliance

At Swarn, protecting your Electronic Health Records (EHR) and Sensitive Personal Data or Information (SPDI) is our highest institutional priority. This policy outlines how we collect, safeguard, process, and retain clinical and personal data in strict compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act (DPDPA), 2023, and the Digital Information Security in Healthcare Act (DISHA) standards.

2. Categories of Clinical & Personal Data Collected

• Demographic Data: Full legal name, date of birth, biological sex, contact address, verified mobile number, and emergency contact details.
• Electronic Health Records (EHR): Presenting medical symptoms, past surgical history, current prescription regimens, drug allergies, diagnostic lab reports, and radiological scans uploaded for clinician review.
• Tele-Consultation Metadata: Encrypted session timestamps, specialist notes, digital prescriptions, and clinical follow-up schedules. Video streams are transmitted peer-to-peer and are never recorded without express, dual-party clinical consent.
• Transaction & Identity Verification: Government photo ID numbers (where required for medical verification) and payment transaction tokens. We do not store raw credit/debit card numbers.

3. Clinical Data Encryption & Security Architecture

All clinical data at rest is encrypted using AES-256 GCM encryption. All network communication utilizes TLS 1.3 cryptographic transport protocols. Telemedicine audiovisual streams operate with end-to-end encrypted WebRTC DTLS-SRTP pipelines. Access to patient records within Swarn is governed by strict Role-Based Access Control (RBAC) ensuring only treating medical professionals assigned to your care have visibility.

4. Medical Record Retention Schedules

Pursuant to medical council regulations and statutory guidelines, patient clinical consultation records, digital prescriptions, and diagnostic summaries are securely preserved for a statutory minimum period of 7 years from the date of the clinical encounter. After the statutory retention period, data is anonymized for longitudinal epidemiology or purged in accordance with DoD 5220.22-M sanitization standards.

5. Your Rights as a Data Principal

Under applicable healthcare data regulations, you hold the right to:

• Access and export your complete medical history and consultation transcripts in standardized digital format.
• Rectify inaccurate personal or demographic details.
• Revoke voluntary marketing and notification consent at any time.
• Request clinical audit logs detailing which clinicians accessed your medical profile.

6. Data Protection Officer (DPO) & Grievance Redressal

For data access requests, privacy concerns, or security disclosures, contact our designated Data Protection Officer at privacy@swarn.in or call our dedicated Privacy Helpdesk at +91 (011) 4987-0099.

Back to Home