Privacy Policy
Data governance and personal data protection guidelines aligned with the Indonesian PDP Law (UU No. 27/2022).
Draft — Pending Legal Review by Authorized Counsel
This document is an AI-generated draft. For a healthcare platform managing national integrated electronic medical records under Indonesian PDP Law (UU No. 27/2022), these terms must be formally reviewed and approved in writing by qualified legal counsel prior to publication as a binding agreement.
1. Data Ownership & Control
All medical records uploaded to the SEHA platform remain under the exclusive ownership and control of the clinical facility. SEHA acts solely as a data processor.
2. Encryption Protocols
Medical records are encrypted in transit and at rest using standard AES-256 encryption. We strictly restrict internal access to preserve patient data confidentiality.
3. Consent Management
The SEHA system provides structured patient consent logging modules before clinical records are shared with SATUSEHAT MoH, satisfying statutory reporting compliance.