Digital Health Act

31. Consent

Edition: 2023-11-24 · In force

My notebook Discuss your situation

31. Consent

(1)A healthcare provider shall ensure that he or she has obtained consent to process sensitive personal data.

(2)Subsection (1) shall not apply where a health service is being provided—

(a)for public health in accordance with the Public Health Act (Cap. 242); and

(b)in compliance with any other statutory requirements.

(3)When processing personal data, a healthcare provider shall—

(a)ensure confidentiality of the information of the client;

(b)provide prompt and accurate data necessary for treatment of the patient;

(c)comply with the duty to notify the data subject in accordance with the Data Protection Act (Cap. 411C);

(4)A data subject who has issued a consent to the use or disclosure of personal data may withdraw their consent at any time by notifying the health care provider.

← Previous provision Next provision →

Source: Kenya Law