The programme aims to:

• Develop an understanding of the DPDP framework and its relevance to hospitals and healthcare organisations.
• Explain key roles, responsibilities and rights under the DPDP framework.
• Strengthen understanding of responsible collection, use, sharing, retention and disposal of personal data.
• Provide practical guidance on privacy notices, consent and appropriate handling of personal data.
• Build awareness of privacy risks, personal data breaches and grievance management.
• Strengthen organisational governance, accountability and documentation practices.
• Support healthcare organisations in developing a structured approach towards DPDP readiness.

Module 1: Understanding DPDP in Healthcare

Overview of the DPDP framework; personal data in healthcare; Data Principal, Data Fiduciary and Data Processor; key obligations and individual rights; and applicability across patients, employees, healthcare professionals, vendors and visitors.

Module 2: Managing Personal Data Across the Patient Journey

Responsible management of personal data from patient registration to discharge and follow-up, including privacy notice, consent, purpose limitation, data minimisation, accuracy, authorised sharing, retention and secure disposal.

Module 3: Privacy in Practice – Department-Wise Responsibilities

Practical data-protection responsibilities across Front Office, Doctors, Nursing, Pharmacy, Laboratory, Operation Theatre, Human Resources, Billing, Medical Records and IT; common privacy risks; appropriate data-handling practices; and healthcare-specific scenarios.

Module 4: Data Security, Breach Management and Third-Party Risk

Security safeguards, access control, secure data sharing, identification and reporting of privacy incidents, personal data breach management, grievance handling, and responsibilities associated with vendors and outsourced service providers.

Module 5: Building a DPDP-Ready Healthcare Organisation

Privacy governance and accountability; roles and responsibilities; policies and procedures; essential forms and registers; staff awareness and training; documentation and evidence; self-assessment; and development of an implementation roadmap.

The programme is suitable for:

• Hospital Leadership and Senior Management
• Medical Superintendents and Hospital Administrators
• Doctors and Nursing Professionals
• Quality and Accreditation Teams
• IT, Digital Health and HIS/EMR Teams
• Medical Records and Health Information Professionals
• Legal, Compliance, Information Security and Data Protection Professionals

Healthcare IT Solution Providers and Consultants

Upon completion of the programme, participants will be able to:

• Understand the application of the DPDP framework within hospital and healthcare settings.
• Identify privacy and data-protection risks across hospital workflows.
• Apply appropriate personal data-handling practices within their respective functions.
• Understand organisational responsibilities for managing privacy incidents, data breaches and grievances.
• Strengthen governance, accountability and documentation related to personal data protection.
• Identify key actions required to improve organisational DPDP readiness.