Employees of the Committee for Information Security of the Ministry of Digital Development, Innovations and Aerospace Industry of Kazakhstan conducted unscheduled inspections of some private medical organizations in the Turkestan region due to patient complaints. This was reported by the press service of the agency.
Violations of legislative requirements were identified in a number of organizations.
Facts of the absence of an approved policy for the collection and processing of personal data, as well as pre-defined purposes for using this information, have been established.
No officials responsible for organizing work with personal data were appointed in the institutions.
The ministry emphasized that medical organizations are obliged to ensure transparency in data collection. Patients must know the purpose of processing personal information.
The violators received a prescription to eliminate the inconsistencies. Administrative measures were applied against them. The total amount of fines exceeded 4,541,250 tenge.
Personal data protection in the medical field remains one of the priority areas of the committee's activities.
Supervisory authorities will monitor the implementation of the issued prescriptions, the agency concluded.