The protection of Personal Data is a fundamental right included in article 18.4 of the Spanish Constitution, and regulated by the European Data Protection Regulation (RGPD) and the LOPDGDD.
In this particular case, the data protection regulations are complemented by the Patient Autonomy Law 41/2002 of November 14 and which is in charge of regulating the rights and obligations regarding information and clinical documentation in which it is regulated. your history.
The person responsible for the file must meet certain requirements:
- Define in a written contract the Regulation of Data Processing on behalf of a Third Party.
- Establish that this third party will only process the data according to its instructions.
- Check that the data will not be used for purposes other than those specified in the contract, nor will it be communicated to other people.
- The third party must comply with the same security measures as those observed by the person responsible for the file.