Please READ this statement before you provide any personal information to Hong Kong Baptist Hospital and/or its affiliated Medical Centres (including, but not limited to, HKBH Ambulatory Medical Centre and HKBH East Kowloon Medical Centre) (“The Organisation”)
Purposes of Collection
Our staff members and healthcare providers may ask you to provide personal data (including, but not limited to, your name, gender, date of birth, identification document type and number, home address, email address, emergency contact person’s name and contact details, credit or debit account and billing information, insurance information and health status information), and/or obtain from any appropriate third party your medical history/relevant information. Such information is for purposes relating to your healthcare/treatment related purposes or purposes directly related to any of them including verification of your identity, appointment booking and registration and/or communication with you in relation to arrangement / provision of services, handling matters related to payment and/or insurance claims, investigation and processing of enquiries or complaints, clinical statistics and audit.
The Organisation may also use automated tools, algorithms, artificial intelligence (AI) technologies, and related digital systems to process your personal data and health information for operational management, clinical decision support, service optimization, enhancement of patient experience, and other purposes directly related to the provision of healthcare services.
Our Organisation has implemented reasonable and appropriate technical, administrative and security measures to safeguard the security of your personal data and medical information, and will use such information in accordance with applicable laws, regulations and internal policies. In the event of a data breach that may have a significant impact on you, our Organisation will, where reasonably practicable, notify the affected individuals and, where applicable, the relevant regulatory authorities as soon as possible, and take appropriate remedial measures.
The Organisation shall not be responsible or liable for any unauthorized disclosure, loss, corruption, or damage of personal data resulting from: (a) any unauthorized access, interference, or cyberattack by a third party beyond the reasonable control of the Organisation; (b) the provision by you of inaccurate, incomplete or outdated information; or (c) your failure to take reasonable steps to protect your account credentials, passwords or electronic devices. Notwithstanding the foregoing, nothing in the above provisions shall affect, restrict, or limit any responsibility or liability that the Organisation is required to assume under applicable law.
The provision of your personal data is voluntary. However, the provision of certain information, including the name, identity document number and emergency contact information, is necessary for the delivery of medical services. The personal data collected is interoperable with the clinical and operational systems in the Organisation to render a seamless information system for timely and efficient healthcare services. You have to make sure that such data is accurate and complete, otherwise, it may affect our ability to provide services to you.
The Organisation will retain your personal data and medical records in accordance with applicable laws and industry practices, after which such data and records will be securely destroyed.
Transfer and Disclosure of Personal Data
You should note that your personal data including your medical records, diagnostic reports, radiological images, laboratory results, and other relevant medical information collected in the above circumstances may be made available to the following parties via secure electronic platforms, email, encrypted download links, mobile applications, or other electronic means:
(1) your attending doctors and healthcare providers;
(2) authorized person of the Organisation to access and view your medical records for healthcare purpose;
(3) affiliated doctors/healthcare providers and/or third party service providers for purposes related to the provision of healthcare services;
(4) your insurer / agent or payment service provider(s) of the Organisation;
(5) appropriate government departments, public authorities or regulatory bodies etc. where such disclosure is exempted, permitted, or required under applicable laws, necessary in the public interest or required for the purpose of your identity verification and may be made without your prior consent.
We will obtain your consent before using / disclosing your personal data for other purposes.
If the Organisation intends to use your personal data for direct marketing purposes, the Organisation will obtain your consent before such use. You may also, at any time, request to cease receiving direct marketing materials from the Organisation.
Data Access/Correction Requests
Under the Personal Data (Privacy) Ordinance, you may make a request to access and/or correct the personal data we hold. Application form for Data Access Request and related scale of fees are available at the Organisation webpage or you may contact our Data Protection Office for details.
Should you have any enquiries regarding to this Statement or the Organisation’s handling of your personal data, please contact the Data Protection Office by email to dpo@hkbh.org.hk.
You may also wish to refer to the Statement of Data Protection Policy and Practices for further details.
