1. The practising physician organizes medical records keeping system in accordance with the procedures for keeping medical records in medical institutions specified by the Minister of Welfare on grounds of article 59 of the Medical Treatment Act.
2. Information on the health of the sexual life of a person is considered to be sensitive data.
   The processing of such data is prohibited, except in cases where:
   1) the data subject has given his or her written consent for the processing of his or her sensitive personal data;
   2) special processing of personal data, without requesting the consent of the data subject, is provided for by regulatory enactments which regulate legal relations regarding employment, and such regulatory enactments guarantee the protection of personal data;
   3) personal data processing is necessary to protect the life and health of the data subject or another person, and the data subject is not legally or physically able to express their consent;
   4) personal data processing is necessary for the purposes of medical treatment, rendering health care services or administration thereof and distribution of medical remedies
3. The patient as a data subject, has the right to obtain all information that has been collected concerning himself or herself in any system for personal data processing, unless the discclosure of such information is prohibited by law in the sphere of national security, defence and criminal law.
4. The patient, as a data subject, has the right to request that his or her personal data be supplemented or rectified, as well as that their processing be suspended or that the data be destroyed if the personal data are incomplete, outdated, false, unlawfully obtained or are no longer necessary for the purposes for which they were collected. If the data subject is able to substantiate that the personal data included in the personal data processing system are incomplete, outdated, false, unlawfully obtained or no longer necessary for the purposes for which they were collected, the system controller has an obligation to rectify this inaccuracy or violation without delay and notify third parties who have previously received the processed data of such.
   If information has been retracted, a system controller shall ensure the accessibility of both the new and the retracted information, and that the information mentioned is received simultaneously by recipients thereof.
5. The patient as the right, within a period of one month from the date of submission of the relevant request, to receive the information as specified above in writing free of charge.

Top