Privacy Notice

Yas Clinic Khalifa City (YCKC)

Yas Clinic Khalifa City (YCKC) is committed to protecting the privacy and confidentiality of your personal and health information in accordance with UAE Federal Law No. 45 of 2021, the Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS V2), and other applicable regulations.

This Privacy Notice explains how we collect, use, store, and protect your personal and health data.

1. Information We Collect

We may collect and process the following information:

• Personal identification details (name, Emirates ID, passport number, date of birth, contact details)
• Medical and health information (medical history, test results, prescriptions, radiology reports)
• Insurance and billing information
• Information provided through online forms, patient portals, or mobile applications
• Information received from healthcare providers, insurers, or regulatory authorities

We collect only information that is necessary and proportionate to provide healthcare services and meet regulatory obligations.

2. How We Use Your Information

Your personal and health data may be used for:

• Providing medical treatment and healthcare services
• Maintaining and updating medical records
• Appointment scheduling, billing, and insurance claims processing
• Regulatory reporting to the Department of Health (DoH)
• Public health and research purposes (using anonymized data where applicable)

3. Legal Basis for Processing

We process personal and health data on the following lawful grounds:

• Your consent (where required)
• Contractual necessity to provide healthcare services
• Compliance with legal and regulatory obligations
• Public interest in healthcare and protection of public health

4. Sharing of Information

We may share your information with:

• Treating physicians and healthcare professionals
• Insurance providers
• Regulatory authorities such as the Department of Health (DoH)
• Approved healthcare partners

All data sharing is conducted under strict confidentiality agreements and appropriate security safeguards.

5. Data Retention

In accordance with ADHICS requirements, medical records are retained for a minimum of 25 years following the last patient interaction, unless otherwise required by law.

6. International Data Transfers

Health information is not stored or processed outside the UAE unless explicitly permitted under ADHICS V2 and approved by the Department of Health, where required.

7. Your Rights

You have the right to:

• Access your personal and health information
• Request correction of inaccurate data
• Request deletion where legally permitted
• Restrict processing in certain circumstances
• Withdraw consent where applicable
• Request transfer of your data to another provider

YCKC may verify your identity before processing any request to prevent unauthorized disclosure.

Please note that certain rights may be limited where personal or health data must be retained or processed to comply with legal, regulatory, public health, medical, or judicial obligations. In such cases, YCKC will inform you of the reason for any restriction, where permitted by law.

8. Data Security

YCKC implements appropriate technical and organizational measures to protect your information, including:

• Role-based access controls
• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Audit logging and monitoring
• Regular security assessments

9. Data Breach Notification

In the event of a data breach, YCKC will notify the relevant UAE authorities in accordance with ADHICS V2 requirements and inform affected individuals where required.

10. Children’s Privacy

For individuals under the age of 18, consent will be obtained from a parent or legal guardian unless emergency medical care is required.

11. Contact Us

For any questions regarding this Privacy Notice or to exercise your data protection rights, please contact:

Data Protection Officer (DPO)
📧 dpo@adscc.ae
☎ 050 674 1951