Privacy statement patient data

In this privacy statement, Jan van Goyen Medical Center would like to explain how we handle patient medical data, how we guarantee the confidentiality of this data and what rights you have as a patient with regard to this data.

MC JvG processes data from patients who turn to us for care. As soon as you enter MC JvG, we will note your name, address and telephone number. We are also legally obliged to note your citizen service number (BSN) and to check your identity on the basis of your proof of identity.

If you are under treatment at MC JvG, we are also legally obliged to keep a medical file of you in which we record the relevant data in connection with your treatment.

1. Secrecy

All healthcare providers working at MC JvG have a duty of confidentiality. This means that, in principle, no information about you may be provided to others without your permission. There are some (legal) exceptions to this (click here).

All other employees (support services in the hospital) also have a duty of confidentiality, which is laid down in the employment contract or other agreement entered into with the hospital.

2. Security of medical data

MC JvG has an extensive security policy regarding patient data.

3. Who has access to your medical data in MC JvG?

In MC JvG, only healthcare providers who are directly involved in your treatment are allowed to view your medical data. Other employees in support functions can only view the data that is necessary in connection with their position. Some employees can therefore only view your address details and, for example, schedule appointments for you or send declarations, but are not authorized to view your medical data. Other employees, for example working in the health care administration, can view medical data if this is necessary for sending or checking invoices.

In connection with patient safety, a care provider with whom you do not yet have a treatment relationship can still view your file in an acute situation. Before he can view your file, the healthcare provider must indicate in the digital file why he wants access to your file. This is important if, for example, you are admitted acutely and cannot be contacted. In all cases, MC JvG can check afterwards who has viewed your file.

4. Providing and exchanging medical data with third parties

MC JvG can only provide data to third parties with your permission. This permission is assumed for the provision of data about your treatment to your general practitioner, so no permission is requested for this.

However, we always ask for your permission before providing medical data to another healthcare institution (or other third parties). MC JvG offers the possibility to digitally exchange medical data with a number of healthcare institutions via a secure system. After you have given permission for this, this means that if you are admitted to AMC or VUmc, for example, the care providers there can also consult your medical data from MC JvG.

You can register your permission to exchange data with these healthcare institutions once via a consent form. In the future, MC JvG will expand the number of healthcare institutions with which data can be securely exchanged digitally.

For medication data, data can be retrieved by MC JvG from the Landelijk SchakelPunt (LSP). You must first give permission to your pharmacy for this before MC JvG can consult this information. Click here For more information.

There are some exceptions to the principle that your consent is required for the provision of data. If there is a legal obligation to provide data, such as to your health insurer, your permission is not required. Find out more about these exceptions here.

5. Retention period

The retention period of medical data is at least 20 years. There are a few exceptions to this: if there is a legal obligation to keep data for longer, or if it is necessary for proper care (for example in the case of chronic diseases) or if it concerns data that is important to third parties (for example hereditary disorders).

6. Quality Improvement

MC JvG often conducts research into the quality of healthcare. The law also obliges us to conduct such investigations. If an external agency is engaged in such an investigation to process data, we always conclude an agreement with the external agency to guarantee the security and confidentiality of the patient data.

7. Your rights with regard to the medical record

A. Right of access
You have the right to inspect your medical file. You can ask your practitioner to inspect the data stored in the electronic patient file.

If you are being treated in several specialisms, you should ask the practitioner of the department whose data you want to view.

B. Right to Copy
You can ask for a copy of your medical file. You can indicate from which specialism and over which period you would like to receive a copy. You will be notified when you can pick up the copy of the file at the counter of the relevant department. You can get a copy of your file here request.

There is no charge for providing a first copy. If you ask again for a copy of data that has already been provided to you, we can charge a fee for this.

C. Right to correction and supplement
You have the right to have your medical file corrected. This right to correction only applies to factual inaccuracies (for example your name or date of birth). For the rest, you can add to the information in your file. Your statement can be added to the data stored.

You can ask your practitioner for a correction or addition to your file.

D. Right to Destruction
You can request the destruction of your medical file, or of part of your medical file. There are exceptions to the right to destroy your file: if it concerns data for which there is a legal obligation to keep it, or if it concerns data that is of interest to third parties, the hospital cannot grant this request.

MC JvG must comply with a request within one month. Is it a complicated request? Then this period can be extended by 2 months. If this is the case, you will be informed about this.

8. Representation

Who gives permission for the provision of data to/exchange of data with third parties referred to under point 4 and who exercises the rights with regard to the medical file referred to under point 7?

  • Parents are authorized for children under 12 years old
  • For children from 12 years to 16 years, parents and child are jointly authorized
  • For children of 16 years and older, the child is authorized

9. Complaints about privacy regarding your medical file

If you have complaints about the way in which your medical data is handled, you can contact your healthcare provider or the complaints officer of MC JvG (

If you believe that your medical file has been accessed unlawfully, you can also submit a (substantiated) complaint about this to the complaints officer. The complaints officer can then request the inspection of the medical file of MC JvG to investigate this.

If you believe that the data processing within MC JvG is not in accordance with legislation and regulations, you can also report this to the complaints officer of MC JvG (

The Dutch Data Protection Authority is the independent supervisor with regard to compliance with privacy legislation. You will find a lot of information on the website of the Dutch Data Protection Authority, including about privacy regulations and data processing in healthcare. See www.Authority

10. Other information

For further information about the General Data Protection Regulation, we also refer you to:

Search & Find