Skip to main content

A practical DPDPA 2023 checklist for clinics

Published · WeMoDa Solutions, Chennai

India’s Digital Personal Data Protection Act, 2023 applies to the personal data your clinic collects every day. This checklist turns it into front-desk and back-office habits. It is general information, not legal advice.

The checklist

  • Tell patients what you collect and why, at the point you collect it, and record their consent
  • Collect only what you need for care and billing
  • Give each staff member access only to what their role needs
  • Be able to show a patient their data, and correct or erase it on request
  • Keep a record of who accessed and changed patient records
  • Have a plan for reporting and handling a data breach
  • Choose vendors who can show how they protect the data they process for you

Where software helps

ClinicDrs is designed in line with India’s Digital Personal Data Protection Act, 2023 — consent, access controls, and tooling to export or erase a patient’s data on request. Your clinic remains the data fiduciary for how it collects and uses patient data.

Frequently asked questions

Who is responsible for patient data — the clinic or the software vendor?
The clinic is the data fiduciary: it decides why and how patient data is used. A software vendor processes data on the clinic’s behalf and must protect it.
Is there a free trial?
Yes. Every plan includes a 30-day free trial with no card required, so you can run real clinic workflows before paying.

Clinic software, by need

Clinic software in your city

Guides for clinic owners