+254 700 000 000 info@clinixcore.co.ke Nairobi, Kenya
Government & Compliance

ODPC Data Protection Compliance

ClinixCore is a registered Data Processor with the Office of the Data Protection Commissioner — privacy and security are engineered into every layer.

Overview

Patient Data, Protected by Design

Kenya's Data Protection Act, 2019 places strict obligations on healthcare facilities. ClinixCore is a certified Data Processor — we operate the platform in line with ODPC requirements so that your hospital, as the Data Controller, can demonstrate full compliance to regulators, insurers and patients.

  • Registered Data Processor with the ODPC
  • Data Protection Impact Assessment (DPIA) provided
  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Patient consent capture, withdrawal, and audit log
  • Secure data residency options inside Kenya
Data protection and ODPC compliance with ClinixCore
Key Capabilities

How ClinixCore Helps You Stay Compliant

Role-Based Access

Granular permissions ensure each user only sees the data they need to do their job — and nothing else.

Strong Authentication

Two-factor authentication, password policies and automatic session lockout for sensitive screens.

Field-Level Privacy

Sensitive fields like HIV status or mental health notes can be masked from non-authorised staff entirely.

Consent Management

Capture and revisit patient consent for data sharing, marketing and research — all logged with timestamps.

Comprehensive Audit Trail

Every record view, edit, export and login is recorded — searchable for incident response and audits.

Data Subject Rights

Easily handle access, rectification and erasure requests from patients in line with the Data Protection Act.

Use Cases

Real ODPC Scenarios We Handle

01

Patient Data Access Request

A patient asks for everything you hold on them — generate a complete export with one click.

02

Breach Investigation

Suspect unauthorised access? Search the audit log by user, patient or date in seconds.

03

Insurance Data Sharing

Capture explicit consent before transmitting data to medical insurers and keep a permanent record.

Related Integrations

Other Compliance Integrations

Make Your Hospital ODPC-Ready

Talk to our compliance team about how ClinixCore can help your facility meet every requirement of the Data Protection Act.