These rules, known as SPDI Rules, are issued under the IT Act and define sensitive personal information to include passwords, financial information, physical/mental health conditions, sexual orientation, medical records, and biometric information. They establish requirements for collection, storage, and transfer of sensitive personal data by body corporates.
Health Data Management Policy (under Ayushman Bharat Digital Mission)
ABDM participants must comply with the Health Data Management Policy. Healthcare laws include the Clinical Establishments Act, National Medical Commission Act provisions requiring physician confidentiality,