Legal

Privacy Policy

Version 1.0 · Effective 26 July 2026 · Nigerian Healthcare Interoperability Platform (NHCIP)

This policy explains how NHCIP processes personal and health information, the lawful basis for doing so, how long data is kept, and the rights available to patients and users. It should be read alongside our Terms of Business.

On this page 1. Who we are 2. What we process 3. Lawful basis 4. How data is used 5. Consent & time limits 6. Sharing 7. Security 8. Retention 9. Your rights 10. De-identification 11. Contact

1.Who we are

NHCIP is operated as a national interoperability platform. Participating Organisations act as data controllers for the patient data they submit; NHCIP acts as a processor and interoperability layer, and as a controller for platform operation and de-identified public-health insight.

2.What we process

Category	Examples
Patient identity	Name, date of birth, sex, NIN, contact details, NHCIP ID
Clinical data	Encounters, prescriptions, laboratory results, vitals, insurance
User & organisation	Name, work email, role, organisation, activity
Technical	Audit logs, timestamps, consent and access records

3.Lawful basis

We process data on the basis of patient consent, the provision of healthcare, compliance with legal obligations, and public-health functions, consistent with the Nigeria Data Protection Act 2023 / NDPR.

4.How data is used

To let authorised, consented Organisations view a unified patient record.
To verify identity and organisation details against government systems.
To maintain a complete audit trail for security and oversight.
To produce de-identified, aggregate insight for public-health planning.

5.Consent & time-limited access

Patients decide how long an Organisation may view their confidential data. A default window of 24 hours applies and can be changed or revoked by the patient. When it expires, access ends automatically.

6.Sharing

Data is shared only between authorised Organisations with a valid, unexpired grant, and with government systems for verification and lawful public-health purposes. We do not sell personal data, and Anthropic-style advertising is not part of this platform.

7.Security

Access is role-restricted and consent-based. Transport is encrypted (HTTPS). Every exchange is logged. Organisations are responsible for safeguarding credentials and devices.

8.Retention

Clinical records are retained by the submitting Organisation per applicable medical-records retention rules. Audit logs are retained to support oversight. Consent and access grants are retained to evidence lawful processing.

9.Your rights

Subject to law, patients may request access to their data, correction, restriction, and withdrawal of consent. Requests are handled through the patient’s primary Organisation or the NHCIP operator.

10.De-identification

System-wide usage dashboards and analytics use de-identified, aggregate data only — no organisation or individual is named. PDF exports of clinical extracts automatically exclude direct identifiers (name, date of birth, contact and address), identifying the record only by its NHCIP ID.

11.Contact

For privacy questions or to exercise your rights, contact your Organisation’s administrator or the NHCIP operator via the in-app support desk.