Overview
At Supreme National Hospital (Supreme HMS), we are committed to maintaining the highest standards of data privacy and security. As a modern healthcare provider leveraging integrated smart systems, we recognize the importance of protecting the medical, financial, and personal information entrusted to us by our patients and staff.
This protocol governs all data processed within the Supreme HMS ecosystem, ensuring compliance with both local regulations and international clinical data standards.
Information Collection
We collect only the information necessary to provide superior clinical care and maintain efficient hospital workflows. This includes:
Personal Identity
Full name, date of birth, gender, and government-issued identification numbers for registry accuracy.
Clinical Records
Medical history, diagnostic scans (3D imaging, X-rays), prescriptions, and laboratory results.
Biometric Data
Secure biometric signatures used solely for the purpose of high-security access to sensitive records.
Usage & Smart Systems
Our integrated technology project utilizes data to improve patient outcomes and simplify coordination between lead specialists.
Smart Workflow Automation
Our AI-driven scheduling engine analyzes patient inflow patterns to reduce wait times. No automated system has the authority to make critical medical decisions; all treatments are verified by board-certified clinicians.
Encryption & Protection
Supreme HMS employs military-grade security infrastructure to prevent unauthorized access or data breaches.
AES-256 Encryption
All data at rest and in transit is protected using end-to-end AES-256 encryption standards.
Access Control
Strict "Least Privilege" protocols ensure staff only see data relevant to their current clinical role.
Patient Rights
As a patient of Supreme HMS, you retain absolute authority over your medical history.
- Right to Access: View and export your full medical history via the Patient Portal.
- Right to Correction: Request immediate updates to any inaccurate personal information.
- Right to Portability: Securely transmit your records to other certified medical facilities.
External Disclosure
We do not sell or trade your data. External disclosure only occurs in the following instances:
- To insurance providers (NHIF/SHIF or private) for the processing of authorized claims.
- To the Ministry of Health for mandatory public health reporting and pathology tracking.
- When legally compelled by a court order within the jurisdiction of Kenya.