Weighing in on a health data retention plan
The HinduIn a welcome development, the National Health Authority — the body responsible for administering the Ayushman Bharat Digital Mission — has initiated a consultation process on the retention of health data by health-care providers in India. For instance, the consultation paper asks whether the health data retention policy should be made applicable only to health-care providers who are participating in the ABDM ecosystem, or to all health-care providers in general. A second safeguard would be to anonymise data that is being retained for research purposes — again, unless a specific case is made for keeping personally identifiable information. The current Bill already requires purpose limitation for collecting, processing, sharing, or retaining data; a use-based classification process would thus bring the ABDM ecosystem actors in compliance with this law as well.