Terms of Business

These Terms of Business govern access to and use of the NHCIP platform by participating organisations, their users, and government bodies. By creating an account, accepting these terms at first sign-in, or using the platform, you agree to be bound by them.

1.Definitions

“Platform” means the NHCIP web application and services. “Organisation” (or “tenant”) means a hospital, clinic, laboratory, pharmacy, insurer or government body with an account. “User” means an individual acting under an Organisation. “Patient data” means personal and health information relating to an identifiable patient. “Consent” means a patient’s lawful authorisation for a defined purpose and period.

2.The service

NHCIP provides a secure interoperability layer that lets verified, consented patient data move between authorised Organisations, and produces de-identified aggregate insight for public-health oversight. NHCIP does not replace your clinical systems; it connects alongside them over standard interfaces or secure upload.

3.Eligibility & accounts

Accounts are issued to verified Organisations and their authorised users. You are responsible for the accuracy of registration details, for keeping credentials secure, and for all activity under your account. Roles (Super Admin, System Admin, Tenant Admin, Tenant User) determine what each user may access.

4.Lawful & consented use

You will access patient data only where you have a lawful basis and valid consent, and only for the stated clinical or administrative purpose. Access to another Organisation’s records is not automatic — it must be requested and approved, and is limited to the purpose and period granted.

5.Patient consent & time-limited access

When a grant expires or is revoked, access to the confidential record ends automatically. Emergency-critical information (such as blood group and allergies) may remain visible to authorised clinicians where clinically necessary.

6.Confidentiality & security

You will keep credentials confidential, act only within your assigned role, apply appropriate technical and organisational safeguards, and not attempt to re-identify de-identified data or circumvent access controls.

7.Data protection

Processing is aligned with the Nigeria Data Protection Act 2023 / NDPR and applicable health-information regulation. Our Privacy Policy explains what data is processed, on what basis, and the rights available to patients and users.

8.Acceptable use

• Do not misuse, resell, or extract bulk data beyond your authorisation.
• Do not upload malware or attempt to disrupt the platform.
• Do not share accounts or use another user’s credentials.
• Do not use the platform for any unlawful purpose.

Breaches may result in suspension or termination of access.

9.Audit

All material activity — sign-ins, searches, record views, access requests, approvals, consent, exports and administrative changes — is recorded in an audit trail. Authorised reviewers may generate audit reports for oversight and investigation.

10.Availability

We aim for high availability but do not guarantee uninterrupted service. Planned maintenance will be notified where practicable.

11.Liability

To the extent permitted by law, the platform is provided on an “as is” basis. Nothing in these terms limits liability that cannot lawfully be limited. Clinical decisions remain the responsibility of the treating professional and Organisation.

12.Changes

We may update these terms. Where changes are material, you may be asked to re-accept at next sign-in. Continued use after an update constitutes acceptance.

13.Contact

Questions about these terms should be directed to your NHCIP administrator or the NHCIP operator via the in-app support desk.