{UAH} DOES AN INSTITUTION OR ORGANISATION HAVE AN OBLIGATION TO PROTECT MY DATA?
|
2:48 PM |
No comments |
DOES AN INSTITUTION OR ORGANISATION HAVE AN OBLIGATION TO PROTECT MY DATA?
Kigenyi enjoys Mama Tule's samosas aka 'sumbusa' and has been a regular at her 'sumbusa' stall for the last three years. Usually, Mama Tule packs these 'sumbusas' in a paper that has been recycled into little package bags. Kigenyi usually enjoys reading the small snippets of information on it as he is eating is 'sumbusa'.
This morning, however, while reading, Kigenyi noticed that the package had his name and personal information in the medical form that he filled in at Kikomeko General Hospital five years ago. He is very upset that his medical records are now circulating amongst the people of the area that he lives in. What if Prossy who he has been 'eyeing' lands on them?
Kigenyi is confused and does not know what to do. He believes that the hospital owes him an explanation since they should have protected his privacy and kept his information secret.
WHAT AMOUNTS TO PERSONAL DATA UNDER THE LAW?
"Personal data" according to the data laws means information about a person from which the person can be identified such as;
- the nationality, age or marital status of the person,
- employment details, educational level,
- National ID Number or details or any symbol that is given to a person.
- It can even be information about an opinion a person holds.
HOW SHOULD MY DATA BE HANDLED WHEN IN THE POSSESSION OF AN INSTITUTION OR ORGANISATION?
By law, an institution or any person who collects, processes, holds or uses personal data must be accountable to the person whose personal information they hold or use. They should also use it only for the lawful purpose they stated. They should also keep it for the time allowed by the law or is needed for that purpose it was collected for. So in this case, Kigenyi's personal information should only be kept for as long as Kigenyi needs that treatment or it is relevant for his medical condition.
Most importantly, that institution or person like (Kikomeko General Hospital) should have safeguards in place to make sure that the Kigenyi's data is secure and it is not exposed to the public without Kigenyi's consent.
WHAT REMEDY DOES KIGENYI HAVE?
Kigenyi or any person whose data has been compromised or exposed to the public can make a complaint to National Information Technology Authority – Uganda (NITA-U) seeking a remedy from the institution or organization that has exposed his/her data. This remedy can be having the data removed, privacy restored or even compensation.
--
-- Kigenyi enjoys Mama Tule's samosas aka 'sumbusa' and has been a regular at her 'sumbusa' stall for the last three years. Usually, Mama Tule packs these 'sumbusas' in a paper that has been recycled into little package bags. Kigenyi usually enjoys reading the small snippets of information on it as he is eating is 'sumbusa'.
This morning, however, while reading, Kigenyi noticed that the package had his name and personal information in the medical form that he filled in at Kikomeko General Hospital five years ago. He is very upset that his medical records are now circulating amongst the people of the area that he lives in. What if Prossy who he has been 'eyeing' lands on them?
Kigenyi is confused and does not know what to do. He believes that the hospital owes him an explanation since they should have protected his privacy and kept his information secret.
WHAT AMOUNTS TO PERSONAL DATA UNDER THE LAW?
"Personal data" according to the data laws means information about a person from which the person can be identified such as;
- the nationality, age or marital status of the person,
- employment details, educational level,
- National ID Number or details or any symbol that is given to a person.
- It can even be information about an opinion a person holds.
HOW SHOULD MY DATA BE HANDLED WHEN IN THE POSSESSION OF AN INSTITUTION OR ORGANISATION?
By law, an institution or any person who collects, processes, holds or uses personal data must be accountable to the person whose personal information they hold or use. They should also use it only for the lawful purpose they stated. They should also keep it for the time allowed by the law or is needed for that purpose it was collected for. So in this case, Kigenyi's personal information should only be kept for as long as Kigenyi needs that treatment or it is relevant for his medical condition.
Most importantly, that institution or person like (Kikomeko General Hospital) should have safeguards in place to make sure that the Kigenyi's data is secure and it is not exposed to the public without Kigenyi's consent.
WHAT REMEDY DOES KIGENYI HAVE?
Kigenyi or any person whose data has been compromised or exposed to the public can make a complaint to National Information Technology Authority – Uganda (NITA-U) seeking a remedy from the institution or organization that has exposed his/her data. This remedy can be having the data removed, privacy restored or even compensation.
"When a man is stung by a bee, he doesn't set off to destroy all beehives"
Disclaimer:Everyone posting to this Forum bears the sole responsibility for any legal consequences of his or her postings, and hence statements and facts must be presented responsibly. Your continued membership signifies that you agree to this disclaimer and pledge to abide by our Rules and Guidelines.To unsubscribe from this group, send email to: ugandans-at-heart+unsubscribe@googlegroups.com
---
You received this message because you are subscribed to the Google Groups "Ugandans at Heart (UAH) Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ugandans-at-heart+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ugandans-at-heart/CAFxDTfrQfBvXyNtnYqSofw-7Mv3sLNhLrQ-nizsNuegTHJ6AEQ%40mail.gmail.com.
0 comments:
Post a Comment