Data Privacy Compliance

DenTrackPro is designed to help dental clinics comply with the Philippine Data Privacy Act (Republic Act 10173).

How DenTrackPro Supports Compliance

• Data Isolation: Each clinic's patient data is stored in a separate database schema, preventing cross-tenant data exposure
• Audit Logs: A complete record of all data access and modifications is maintained, including who made changes and when
• Role-Based Access: Staff can only access the data their role permits — no over-permissioning by default
• Patient Consents: Medical consents can be collected and stored digitally with signature timestamps
• Data Retention: Patient records use soft deletion — data is deactivated rather than permanently erased, preserving clinical history

Patient Rights

Under RA 10173, patients have the right to access and correct their personal data. DenTrackPro's Patient Portal allows patients to view their own records at any time, and clinic staff can update patient information upon request.

Recommendations for Clinics

• Assign only the minimum necessary permissions to each staff role
• Review audit logs regularly for unusual activity
• Ensure patients are informed about how their data is used (Privacy Notice)
• Deactivate staff accounts promptly when employees leave the clinic