Data Privacy

Data Privacy

Kanad Hospital — Patient Data Privacy Notice

Kanad Hospital (“Kanad”, “we”) is committed to protecting the privacy and confidentiality of the personal and health information of our patients, their families, and our visitors. This notice explains what information we collect, why we use it, who we may share it with, and the rights you have over your information.

The information we hold

We collect and process two broad categories of information: Personally Identifiable Information (PII) such as your name, contact details, Emirates ID or passport, and insurance details; and Protected Health Information (PHI) such as your medical history, diagnoses, test and imaging results, medications, and treatment records.

Why we use your information

We use your information to provide and coordinate your medical care; to process billing, payments, and insurance claims; to run hospital operations such as quality assurance, internal audit, and service improvement; and to meet our legal and regulatory obligations.

The rules we follow

We handle your information in line with the data-protection requirements that apply to healthcare providers in Abu Dhabi, including the Department of Health – Abu Dhabi (DoH) ADHICS v2.0 standard and its Data Privacy and Confidentiality Standard, UAE Federal Law No. 2 of 2019 on the use of Information and Communications Technology in health fields, and DoH’s Health Information Exchange (Malaffi) requirements.

When we share your information

Some sharing is required by law or regulation and does not depend on your consent — for example, exchanging your health information through the Abu Dhabi Health Information Exchange (Malaffi / ADHIE) so your treating clinicians can access it, reporting required by DoH or other UAE authorities, and disclosures required by a court or by mandatory-reporting laws.

Other sharing happens only with your consent — for example, using your information for research or for communications not related to your care.

We also share your information with insurers and third-party payers to process your claims, and with other healthcare providers involved in your care.

Where your information is kept

Your information and its backups are stored and processed inside the UAE and are not transferred outside the UAE except where a valid DoH exemption is in place.

How long we keep it

We keep your information only for as long as necessary to provide your care and to meet the retention periods required by UAE and DoH regulations. Medical records are retained for the minimum period required by law. After that, information is securely deleted or anonymized unless you have consented to a longer retention period.

Your rights

Subject to applicable law, you have the right to:

· access and obtain a copy of your information;

· request correction of inaccurate information;

· request restriction of certain uses or disclosures;

· object to certain processing;

· withdraw consent you previously gave for optional uses (this does not affect your care, or the lawfulness of processing carried out before withdrawal);

· raise a complaint.

Requests are subject to verification of your identity and may be limited where the law requires us to retain or disclose information.

How your information is protected

We apply administrative, technical, and physical safeguards — including access-controlled electronic record systems, confidential handling of paper records, and staff training — to protect your information against unauthorized access, disclosure, or misuse.

If something goes wrong

If a data breach affects your information, we follow our breach-management process, notify the Department of Health – Abu Dhabi within the required timeline, and inform affected individuals about the level of impact and the steps taken.

Contact and complaints

To exercise your rights or to ask how we handle your information, contact our Data Protection Officer (see the Contact the DPO section on our Contact Us page). If you are not satisfied with our response, you may raise the matter with the Department of Health – Abu Dhabi.

Changes to this notice

We may update this notice from time to time. The current version is always available on this page.