PDPA Privacy Policy

This is a placeholder page for our Privacy Policy. The full document is being prepared and will be published before the public launch.

Thawra CMS is built to comply with Malaysia's Personal Data Protection Act 2010 (Amendment 2024). Patient and staff personal data is encrypted at rest, every clinical write is audit-logged, and access is strictly role-based.

Key commitments:

• Encryption at rest for IC, contact, and medical history fields
• Audit log on every clinical and HR write
• 21-day response window for Subject Access Requests (SAR)
• 72-hour breach notification procedure
• Medical records retention: 7 years minimum

For data requests or questions, contact [email protected].