Cardiology Associates Private Limited
PERSONAL DATA PROTECTION ACT
THE PERSONAL DATA PROTECTION ACT
The Personal Data Protection Act (Act No. 12 of 2012) (“PDPA”) regulates the collection, use and disclosure of an individual’s personal data. The general rule laid out by the legislation is that personal data can only be collected, used and/or disclosed with the consent of the individual concerned.
CAPL is liable for all the acts committed by its employees, unless reasonable steps have been taken by CAPL to prevent them from violating the act.
This policy therefore aims to inform the general public about how CAPL complies with the PDPA. It also provides a set of practical steps that people may take to gain access to, or make corrections to their personal data provided to CAPL. These steps also allow them to withdraw their consent to the collection, use or disclosure of their personal data.
1. PERSONAL DATA
In this Data Protection Policy (“Policy”) and under the PDPA, “personal data” refers to any data (whether true or not) about an individual who can be identified  from that data; or  from that data and other information to which we have or are likely to have access.
Examples of such personal data may include a person’s:
- name, NRIC, passport or other identification number; date of birth;
- contact details such as telephone number(s), mailing address(es), and email address(es);
- basic medical information (e.g. drug or food allergy);
- employment and financial details; or
- any other information relating to any individuals which may have been provided to CAPL, in any form.
In this Policy, “we”, “us”, “our” or “CAPL” refers to Cardiology Associates Private Limited, “you”, “your” or “yours” refers to the persons to whom this Policy applies.
2. COLLECTION, USE, AND DISCLOSURE OF PERSONAL DATA
CAPL is committed to adhering to its legal obligations under the PDPA. This means that CAPL will do its best to comply with the general rule laid out by the PDPA that personal data can only be collected, used and/or disclosed with the consent of an individual (subject to the exceptions and on the terms provided in the PDPA).
Note: The information in this Policy merely provides an overview of CAPL’s obligations under the PDPA. This Policy is not a representation by CAPL that is meant to create any private law obligation. CAPL’s precise legal obligations may be found in the PDPA, the Personal Data Protection Regulations 2014 and any other subsidiary regulations, notices or guidelines in force. CAPL may, from time to time, update this Policy to reflect any changes in legal or regulatory requirements.
- In general, CAPL collects personal data when:
- you submit any form (such as registration, driving license renewal application, medical documents, laboratory results, x-ray reports, consent etc);
- you provide other documentation or information in respect of your interactions and transactions with CAPL, or when you use CAPL’s services;
- you interact with CAPL staff, and other representatives (for example, via telephone calls, email, fax, letters, fax, and face-to-face meetings);
- you request that CAPL contact you, or be included in an email list kept by CAPL;
- you respond to CAPL’s request for additional personal data through other initiatives;
- you submit an employment or observer / helper application, or when you provide documents or information including your resume and/or curriculum vitae in connection with any request;
- your images are captured by us via CCTV cameras while you are within our premises, or via photograph taken by us;
- CAPL seeks information about you and receives your personal data in connection with your relationship with CAPL including for our products and services or job applications, for example, from current / former employers or the relevant authorities; and/or
- you submit your personal data to CAPL for any other reason.
Accuracy: CAPL will make reasonable efforts to ensure that the personal data CAPL collects is accurate and complete. Please help CAPL by ensuring that all personal data that you submit is complete and accurate. If you fail to do so, CAPL may be unable to provide you with the services you have requested.
If CAPL is likely to use your personal data to make a decision that affects you, or if we have to disclose your personal data to another organisation, CAPL will make reasonable efforts to ensure that personal data collected by or on behalf of us is accurate and complete.
Security: CAPL will protect the personal data by making reasonable security arrangements. However, CAPL cannot completely guarantee the security of your personal data.
3. PURPOSES OF COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA
In general, CAPL may collect, use and disclose personal data for the following purposes, amongst others:
- responding to, processing and handling appointments, queries, requests, feedback and suggestions;
- assisting and contacting parties in relation to the services they have requested;
- contacting parties in relation to events CAPL is hosting;
- research in relation to medically related issues;
- to provide information to the relevant funding agencies;
- to refer individuals to Ministry of Health healthcare facilities;
- CAPL’s internal record keeping purposes;
- contacting individuals regarding their rest results or appointments; or
- complying with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by relevant authorities.
CAPL will seek your prior consent for any disclosure of your personal information in relation to any other purpose that is not listed above.
CAPL will retain your personal data for as long as the purpose(s) for which it was collected remain(s) valid, or for as long as the personal data is necessary for CAPL’s legal or business purposes.
4. CONTACTING CAPL: FEEDBACK, COMPLAINTS, ACCESS AND CORRECTION OF YOUR PERSONAL DATA, AND WITHDRAWAL OF CONSENT
- have any questions or feedback about how CAPL handles personal data;
- have any complaints about how CAPL has handled your personal data;
- wish to obtain access or make corrections to your personal data that CAPL has; or
- wish to withdraw your consent to CAPL’s use of your personal data,
you may contact CAPL’s Data Protection Officer:
Name: Dr Lim Yean Teng
Please identify yourself and indicate the personal data that the request concerns. CAPL will strive to respond to each request as soon as reasonably possible and as accurately and completely as necessary. However, please note that CAPL may refuse your request under certain circumstances as laid out under the PDPA.
Note on Withdrawal of Consent: If you withdraw your consent to any or all use of your personal data, depending on the nature of your request, CAPL may not be able to continue providing its services or performing its contractual obligations to you. Any withdrawal of consent may also result in the termination of any agreements or arrangements you have with CAPL and you being in breach of your contractual obligations or undertakings. CAPL reserves its legal rights and remedies in such event.