Republic Act No. 10173
Data Privacy Act
This page is for a clinic in the Philippines. It explains how KonsulTech fits the Data Privacy Act of 2012 when the clinic keeps patient records in the app.
Last updated 27 September 2026.
Who decides
Health information in a chart is sensitive personal information under the Act. The clinic decides what goes in. KonsulTech stores and shows those records for the signed-in clinic.
The clinic
You decide why a chart exists, which details you type, and which staff receive an account. Under the Act, the clinic is usually the personal information controller.
This software
KonsulTech processes the records so the clinic can run the day. That work follows the clinic’s use of the app. Patient data is not sold.
What the app does
- Notes, prescriptions, and files are sent over TLS.
- A doctor opens the clinics on their account. A secretary can sign in and open the dashboard. Patient charts, consultations, appointments, and settings stay on a doctor account.
- Sign-in is a password.
- Opening a chart is not written to an audit log.
- Patient data is not sold.
What the clinic still does
- Decide why the chart may be kept, including consent when the Act requires it. KonsulTech does not collect that consent for you.
- Give an account only to someone who should see that clinic.
- Correct the patient record when the patient asks.
- Tell the National Privacy Commission and the people affected when a breach is likely to cause real harm and the Act puts that duty on the clinic.
Ask a privacy question
A question about your own account can go to privacy@emrdocs.ph. A patient’s request about their chart goes to the clinic that holds it.
Ask a privacy question