FOR DOCTORS, CLINICS, DAY-CARE CENTRES AND SMALL HOSPITALS
Patient data, set up the right way.
From 13 May 2027, the Digital Personal Data Protection Act applies to every practice that keeps patient details on a computer, phone or cloud system, whatever its size. Neri sets up what your practice needs, hands it over and stays on call.
THE DATE TO KNOW
13
MAY 2027
DPDP duties begin for every practice
Already today: health records count as sensitive personal data under the IT Act, and a practice that is negligent in protecting them can be made to compensate those harmed.
What the law asks of every practice
A plain summary of the main duties under the DPDP Act and Rules.
01
Notice
Patients told what you collect and why
02
Consent you can prove
Specific, informed, provable and easy to withdraw
03
Security safeguards
Reasonable protection, vendors included
04
Vendor contracts
Anyone handling your data on your behalf
05
A published contact
Someone to answer patients' data questions
06
Patient rights
Access, correction, erasure and a nominee
07
Grievances
Answered within a published period
08
Breach reporting
Patients and the Board told
What is at stake
Up to
₹250 cr
Failing to take security safeguards
Up to
₹200 cr
Failing to report a breach
Up to
₹50 cr
Breaching any other provision
Up to
₹5 lakh
Repeatedly running an unregistered clinic (central Act, where adopted)
Maximums only. The Board must weigh the breach, the data involved, the steps taken and proportionality.
One team for patient-data compliance support, clinic tech and operations
Choose any service on its own. Each is quoted at a fixed fee after the free check.
Compliance support
- Patient data set-up DPDPNotices and consent forms in English and your local language, consent records, and a route for patient requests.
- Patient Privacy Contact DPDPWe act as the published contact for patient-data questions, or back up the person you choose.
- Inspection readiness CEARegistration papers, displays and registers checked against a list, with renewal dates tracked.
- Outside services register DPDPEvery vendor that handles your patient data listed, with what to ask each one for.
- Records register DPDPA log of the records you keep and the periods you set, with reminders.
- Staff trainingShort sessions for front desk and clinical staff, with a sign-off record.
- Breach drillA plan for the first 72 hours if data is lost or exposed, and a practice run.
Patient tech
- 24×7 online receptionAutomated answers to clinic questions such as timings, directions and booking. No medical advice.
- Online booking and requestsPatients book or send a request online, and your staff confirm.
- Live queue displayToken numbers and waiting times on screen, never patient names.
- QR check-inPatients check in by scanning a code at the desk.
- Clinic websiteA fast site with your details, privacy notice and request form, and no tracking.
- Reminders and follow-upsMessages patients have agreed to receive, with an easy way to stop them.
- Leaflets and review repliesPatient leaflets, and replies to online reviews that keep patient details private.
Operations
- Moving to digital recordsChoosing and setting up records software. Your vendor moves the old records.
- Teleconsultation set-up IMCVideo consultations set up the way the national guidelines describe.
- Digital health onboardingHelp registering your practice and doctors on the national digital health registry.
- Privacy tech hygiene DPDPA checklist for logins, backups and devices. Your IT person makes the changes.
- Staff and stock toolsRotas, task checklists, and stock and expiry tracking.
- Complaints and feedbackOne log for complaints and feedback, with reply dates.
- Practice dashboardA monthly view of visits and trends, built from counts, not patient records.
Additional services
Ongoing care: we stay on call after set-up, with a yearly review. Legal matter coordination: we organise your documents and attend meetings with your advocate as your coordinator. Privacy updates: plain-language notes when the rules change.
Something else in mind?
Tell us what you need. We'll tell you whether we can build it and what it costs.
How it works
- Free readiness checkAnswer a few questions below and see where your practice stands.
- A fixed quoteA fixed fee for the services you choose. No hourly billing.
- Set up and hand overWe build in accounts your practice owns, train your staff and hand over.
- Stay on callWe remain your first call for questions, changes and incidents.
Your practice owns every account, and we never hold your patient records.
Free readiness check
Twelve questions, about three minutes. Your answers stay on this device: nothing is sent unless you choose to email us the result.
Team
Dr Murali Ariga
MS, DNB, FAICO, PGDMLE
Senior Consultant Ophthalmologist
Clinical Advisor · Medico-legal Expert
Dr N. Sathian
MBBS, MS (Ophthalmology)
Clinical Advisor
Tarun Murali
BA, LLB, LLM
Data privacy and technology consultant
Join the waitlist
We are taking on a small number of practices. Send us a short email and we will get in touch.
What to include
- Your name and your practice's name
- City, and the type of practice
- A phone number, if you'd like a call
- Which services interest you, if you know
Please don't send patient records or ID documents by email.
Contact
hello@nerihealth.inWe reply within 7 working days.