We recognise the importance of the personal data you have entrusted to us and this Data Protection Statement is to assist you in understanding the purpose of collection, use and disclosure of your personal data by the National University Health System.
We are committed in protecting your personal data and will manage and process your personal data in accordance with the requirements of the Singapore's Personal Data Protection Act 2012 (the "PDPA"), the Ministry of Health's guidelines and directives and other relevant legislation such as the Private Hospitals and Medical Clinics Act.
As part of our efforts to ensure that we properly manage, protect and process your personal data, we will be reviewing our policies, procedures and processes from time to time and reserve the right to amend this Data Protection Statement at our discretion.
1) Personal Data
"Personal Data" refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.
Your personal data, which includes data you provide for registration purposes (e.g, name, NRIC No., date of birth etc.), medical information, diagnostic imaging, photographic films, financial information and any other personal information provided by you or your next of kin which will be collected when you present yourself for medical examination or treatment.
2) Collection, Use and Disclosure
By voluntarily providing your personal data in order to obtain medical care, it will be deemed that you have consented to the collection, use, disclosure and processing of your personal data by the National University Health System for the purposes directly related to the provision of medical care to you, which includes referrals to other healthcare professionals and institutions and other associated purposes (e.g, billing, medisave applications and improvement of services).
When you seek care at other healthcare providers, we will share relevant data with them through trusted information systems like the National Electronic Health Record (NEHR) system.
We may use your personal data to invite you to participate in suitable care programmes, or shortlist you for participation in relevant research studies.
As a public healthcare institution, we may also share relevant data and participate in national and multi-agency efforts to review healthcare policies and programmes that ensure patient safety and improve the quality of healthcare services and conduct disease surveillance.
We take patient confidentiality very seriously. To safeguard your Personal Data from unauthorised access, collection, use, disclosure, copying, modification or any similar risks, we have endeavoured to put in place appropriate administrative, physical and technical processes such as up-to-date antivirus protection, encryption of documents and system and limiting access to any Personal Data.
4) Retention of your Personal Data
Your Personal Data will be retained in accordance with Ministry of Health's guidelines for retention of patient data. For any other Personal Data collected by us, we will periodically review to determine if that data is still needed and will only retain it as long as the purpose for which it was collected remains and until it is no longer necessary for any other legal or business purposes.
5) Your obligation
It is your obligation to ensure that all personal data submitted to us is complete, accurate, true and correct.
6) Your rights
You may access your personal data currently in our possession. We will process your request in accordance with the access requirements of the PDPA and will provide you with the relevant personal data within a reasonable time after the request has been made. A fee may be charged for processing an access request.
You may request to correct your personal data. We will correct your personal data as soon as practicable after the request has been made unless we have reasonable grounds not to do so.
You may withdraw your consent for the collection, use and disclosure of your personal data in our possession by giving reasonable notice to us. Kindly note that we are obliged to evaluate and process your request. If you choose to proceed with your withdrawal, do note that it will affect the medical care and services you would receive from us or other healthcare institutions.
7) How to Contact Us
If you require further information on our Data Protection Policy or clarifications related to data protection, please contact us at
Data Protection Office