Patient data protection, built into the clinic workflow.
India's Digital Personal Data Protection Act, 2023 asks every clinic to collect only what it needs, with valid consent, keep it secure, and honour patients' rights. This page explains who is responsible for what, and how River One OPD helps your clinic meet those duties every day.
Clear roles under the DPDP Act.
The Act separates the party that decides why personal data is processed from the party that processes it on its behalf. In a clinic using River One OPD, the roles are:
The patient
The person the data is about. Patients do not get an account in River One OPD; they deal with their clinic, and may receive WhatsApp messages from it once they have consented.
Your clinic
The clinic decides which patients to register, what clinical information to record, and why. It is responsible for having a valid basis for each patient record and for answering patient requests.
River One
River One stores and displays clinic records only to provide the software to that clinic. For clinic staff accounts (name, email, phone, sign-in), River One acts as the Data Fiduciary.
Safeguards your clinic gets by default.
These controls are part of every clinic account. There is no separate compliance module to buy.
Consent on the patient record
WhatsApp consent is recorded when the patient is registered. The clinic can only send WhatsApp messages to a patient whose consent is on file.
Withdrawal in one word
A patient who replies STOP, UNSUBSCRIBE, or CANCEL is opted out. The opt-out time is stored and no further automated messages go to that number.
Purpose-limited messaging
Patient messages are operational only — appointment confirmations, reminders, prescriptions, and lab documents. No promotional, birthday, or review-request messages are shipped.
Clinic isolation
Every patient, visit, prescription, and report belongs to one clinic. The clinic is taken from the signed-in account on the server, so changing a link cannot open another clinic's records.
Role-based access
Super admin, clinic owner, and receptionist each see only what their role allows. Receptionists can view the wallet balance but cannot top it up.
Secure sign-in
Passwords are stored as hashes, never as text. Email sign-in codes expire after two minutes, work once, and lock after repeated wrong attempts. Every form carries a CSRF token.
Documents, not chat text
Prescriptions and lab requests are shared as PDF documents the clinic chooses to send, rather than clinical details typed into a chat.
Controlled uploads
Patient report uploads accept only PDF, image, and Word files up to 5 MB, and open from the clinic panel only for signed-in staff of the same clinic.
No advertising use
We do not sell personal data and do not use clinic or patient records to build advertising profiles. The public website uses no advertising cookies.
How patients and staff exercise their rights.
Patients should start with the clinic that holds their record. Clinic staff can contact River One directly.
| Right | Patient | Clinic staff member |
|---|---|---|
| Information and access | Ask the clinic for a summary of the data it holds. The clinic can view and export the patient's record from the clinic panel. | Email support@riverone.in from the account email. |
| Correction and completion | Ask the clinic. Clinic staff can edit the patient record directly. | Update the profile in the clinic panel, or ask the clinic owner or River One. |
| Erasure | Ask the clinic. The clinic can request deletion of the stored copy from River One, subject to records it must legally keep. | Use the Delete account page. Verified requests are completed within 30 days. |
| Withdraw consent | Reply STOP to the clinic's WhatsApp number, or ask the clinic to record the withdrawal. | Request account closure on the Delete account page. |
| Grievance redressal | Raise it with the clinic first. If it concerns how the software stores data, the clinic or patient can contact River One. | Email support@riverone.in or use the contact form. |
| Nominate | Tell the clinic who may act on the patient's behalf in case of death or incapacity. | Include the nominee's details in an email to River One. |
What your clinic should do
- Tell patients why you collect their details and how to contact you
- Record WhatsApp consent only after the patient agrees
- Collect only the clinical details you need for care
- Give each staff member their own login — never share passwords
- Deactivate receptionist logins when staff leave
- Act on patient correction and erasure requests promptly
- For children's records, keep the guardian's details and any consent the law requires
What River One does
- Processes clinic records only to run the software for that clinic
- Keeps each clinic's records separate from every other clinic
- Enforces role-based access on every request
- Honours STOP opt-outs automatically
- Helps the clinic with access, correction, and erasure of stored records
- Notifies affected clinics without delay if a personal data breach affects their records, so they can meet their own reporting duties
- Deletes or de-identifies data after a verified deletion request, except records we must retain
This page explains how River One OPD supports a clinic's obligations under the Digital Personal Data Protection Act, 2023 and the rules made under it. It is not legal advice. Each clinic remains responsible for its own compliance. Read our Privacy Policy for the full description of the data we process.
Common questions about DPDP and patient data.
Straight answers for clinic owners and their advisers.
Who is the Data Fiduciary for patient data — the clinic or River One?
Does River One OPD record patient consent?
Can another clinic see our patients?
How does a patient exercise their rights under the DPDP Act?
Is this page legal advice?
Questions from your legal team?
Write to us with your questions about data protection, consent, or retention and we'll walk you through how River One OPD handles them.