Kenya's Data Protection Act, 2019 places strict obligations on healthcare facilities. ClinixCore is a certified Data Processor — we operate the platform in line with ODPC requirements so that your hospital, as the Data Controller, can demonstrate full compliance to regulators, insurers and patients.
Granular permissions ensure each user only sees the data they need to do their job — and nothing else.
Two-factor authentication, password policies and automatic session lockout for sensitive screens.
Sensitive fields like HIV status or mental health notes can be masked from non-authorised staff entirely.
Capture and revisit patient consent for data sharing, marketing and research — all logged with timestamps.
Every record view, edit, export and login is recorded — searchable for incident response and audits.
Easily handle access, rectification and erasure requests from patients in line with the Data Protection Act.
A patient asks for everything you hold on them — generate a complete export with one click.
Suspect unauthorised access? Search the audit log by user, patient or date in seconds.
Capture explicit consent before transmitting data to medical insurers and keep a permanent record.
Talk to our compliance team about how ClinixCore can help your facility meet every requirement of the Data Protection Act.