DPDPA 2023 Compliant

Why this matters for hospitals

DPDPA 2023 places strict obligations on data fiduciaries (your hospital) handling patient personal data. Vendors that don't comply expose you to penalties and consent-violation risk.

How SPDTrack protects patient data

• Patient MRN hashed — never stored as plain text in our database.
• No PII at rest — only the minimum identifiers needed for traceability.
• Audit logs — every create/read/update/delete is logged with user, IP, timestamp.
• Retention rules — data deleted on schedule per regulatory minimum.
• Data residency — hosted in Indian data centres (Mumbai/Hyderabad regions).
• Breach notification — automated alerts to designated DPO within 72h.