Privacy statement on patient data
In this privacy statement, the Jan van Goyen Medical Centre explains how we handle patients’ medical data, how we safeguard the confidentiality of this information, and what rights you as the patient have concerning this information.
The jvg MC processes the data of patients who come to us for care. As soon as you come in to the jvg MC, we record your name, address and phone number. We are also legally obliged to record your CSN and to check your identity based on your ID.
If you are being treated at the jvg MC, we are also legally obliged to maintain medical records about you in which we record information relevant to your treatment.
All care providers employed at the jvg MC have a confidentiality obligation. In other words, in principle, no information about you should be provided to others without your consent. There are some legal exceptions to this (click here).
All other employees (supporting services in the hospital) also have a confidentiality obligation, which is defined in their employment contract, or another agreement entered into with the hospital.
2. Protection of medical data
The jvg MC has a comprehensive security policy on patient data.
3. Who at the jvg mc has access to your medical data?
At the jvg MC, only care providers who are directly involved with your treatment have access to your medical details. Other employees in supporting jobs can only see the information that is necessary in connection with their job. Some employees can thus access your address details and for example plan appointments for you, or send out declarations, but they are not authorised to access your medical details. Other employees, for example those in care administration, can indeed access your medical details, if this is necessary for the sending or checking of invoices.
In connection with patient safety, a care provider with whom you do not yet have a treatment relationship may nonetheless access your records in an acute situation. Before he/she can access your records, the care provider must indicate in your digital file why this access is needed. This is important if for example you are admitted acutely, and are unresponsive. The jvg MC can in all cases verify afterwards who has accessed to your records.
4. Provision and exchange of medical data with third parties
The jvg MC is only allowed to provide your data to a third party with your permission. This permission is indeed presumed for the provision of information about your treatment to your GP; no consent is therefore requested for this.
We do however always request your consent for providing medical information to another care institution (or other third party). The jvg MC offers the possibility of exchanging medical information digitally with a number of care institutions via a secure system. After you have given consent for this, this means that if you are admitted to for example the AMC or vumc, the care providers there can also view your jvg MC medical details.
You can record your consent for the exchange of your information with these care institutions in one go via a consent form. The jvg MC may in the future increase the number of care institutions with which information is securely digitally exchanged.
For medication details, information can be obtained by the jvg MC from the National Exchange Point (LSP). Your consent for this must first be given to your pharmacist before the jvg MC can access this information. Click here for more information.
There are some exceptions to the principle that your consent is necessary for the provision of information. If there is a legal obligation to provide information, for example to your health insurer, your consent is not necessary. You can find out more about these exceptions here.
5. Retention period
The retention period for medical information is at least 20 years. There are some exceptions to this: if there is a legal obligation to retain information for longer, or if it is necessary for proper care provision (for example for chronic conditions), or if it concerns information that could be important to third parties (for example hereditary conditions).
6. Quality improvement
The jvg MC frequently assesses the quality of its care provision. We are also legally obliged to conduct such assessments. If an external office is called in during such an assessment to process data, we will always enter into agreement with the external office to guarantee the security and confidentiality of patient data.
7. Your rights concerning your medical record
- Right of access
You have the right to access your medical records. You may ask your practitioner for access to the information that is stored in the electronic patient records.
If you are receiving treatment from multiple specialisms, you need to ask the practitioner of the department whose information you wish to access.
- Right to copy
You may ask for a copy of your medical records. In this, you may indicate the specialism and the period for which you wish to receive a copy. You will receive notification of when you can collect a copy of the records from the information desk of the relevant department. You may request a copy of your records here.There will be no charge for provision of the first copy. If you ask again for a copy of information that has already been provided to you, we may charge you for this.
- Right to correction and supplementation
You have the right to correct your medical records. This right to correction only concerns factual errors (for example your name or date of birth). You may also supplement the information in your records. Your statement can be added to the information that is stored.You may ask your practitioner for a correction or supplement to your records.
- Right to deletion
You may ask for your medical records, or part of them, to be deleted. There are exceptions to the right to have your records deleted: if this concerns information for which a legal obligation exists to retain it, or if it concerns information that could be of importance to a third party, the hospital cannot comply with this request. The jvg MC must comply with a request to delete information within one month. Is the request complicated? Then this period may be extended by two months. If this is the case, you will be informed about it.
Who gives permission for the provision or exchange of information with third parties as stated under point 4, and who exercises the rights concerning the medical records as listed under point 7?
For children under 12 years old, the parents are authorised
For children between 12 and 16 years old, the parents and child are jointly authorised
For children aged 16 years and over, the child is authorised
9. Complaints about the privacy of your medical records
If you have a complaint about the way your medical information is handled, please approach your care provider or the jvg MC complaints officer (firstname.lastname@example.org).
If you consider there has been illegitimate access to your medical records, you may equally submit a complaint with justification to the complaints officer. The complaints officer can then ask the jvg MC Medical Records Access Committee to conduct an investigation into the matter.
If you consider the data processing within the jvg MC does not comply with legislation, you may also report this to the jvg MC complaints officer (email@example.com).
The Data Protection Authority is the independent supervisor as regards compliance with privacy legislation. You can find comprehensive information on the Data Protection Authority’s website, about privacy legislation, data processing in healthcare etc. See www.Autoriteitpersoonsgegevens.nl.
10. Other information
For further information about the General Data Protection Regulation, we refer you to: