Guide
“DPDPA compliant” is a phrase most clinic software uses without saying what it actually means for a clinic day to day. This guide names the rights a patient can exercise under India's Digital Personal Data Protection Rules, 2025, and what Yuktii's data-rights tracker does when one comes in. It is a plain-language summary, not legal advice.
Buyer checklist
The Government of India's notice on the DPDP Rules, 2025 (14 November 2025) lists: the right to give or refuse consent and withdraw it at any time; the right to know what data is held and why; the right to access a copy of personal data; the right to correct or update it; the right to request erasure; and the right to nominate another person to exercise these rights on the individual's behalf, for example during illness.
The same notice states it plainly: “Data Fiduciaries are required to address all requests related to access, correction, updating or erasure within a maximum of ninety days.” A clinic that runs on Yuktii is a Data Fiduciary for its patients' data, so a request should be logged with a due date, not left to memory.
Yuktii logs a data-rights request by type (access, correction, erasure, consent withdrawal, nomination or grievance), who asked and how to reach them, which patient it concerns, and when it was received. A due date is set from receipt, and the request is tracked until it is closed, so nothing sits unanswered past the 90-day ceiling.
A full deletion of a patient's clinical history is rarely right: past prescriptions and treatment history matter to continuity of care and to a clinic's own records. When a patient's erasure request is granted, Yuktii replaces personal identifiers (name, phone, email, address) on that record with anonymised values, while keeping the de-identified clinical and financial history. The record ID stays, so anything built on it (an old invoice, a report) still resolves; the person cannot be identified from it any more.
A patient can name someone to act for them, and Yuktii keeps a nominee's name, relation and phone against the patient record. Consent withdrawal is a request type in the same tracker, separate from an actual consent record such as a signed procedure consent.
The DPDP Rules give a Data Fiduciary 72 hours to give the Data Protection Board a detailed report of a personal data breach, and require affected people to be told what happened and what they can do. Yuktii runs its own incident tracker against that 72-hour clock and records when affected clinics and patients are notified.
This guide summarises one government notice and one part of Yuktii. It does not cover the DPDP Act's other obligations (consent notices, cross-border transfer, Consent Managers, the Data Protection Board's procedure), and it is not a substitute for your own legal advice.
Access to their data, correction or updating of it, erasure, withdrawal of consent, and nominating someone else to act for them, per the Government of India's notice on the DPDP Rules, 2025.
The same notice states a maximum of ninety days for requests related to access, correction, updating or erasure.
It replaces personal identifiers with anonymised values and keeps the de-identified clinical and financial history, rather than deleting the record outright.
Yes. Yuktii records a nominee's name, relation and phone against the patient.
Yuktii tracks the incident against the 72-hour window the DPDP Rules give for reporting to the Data Protection Board, and records when affected clinics and patients are notified.
No. It summarises one official notice and one part of the product. Confirm your obligations with your own legal counsel.
Your data
Clinic and patient data is the clinic’s own. A clinic admin can download all of it whenever needed as one Excel workbook, with a sheet each for patients, appointments, treatments, prescriptions, billing, payments, inventory and staff.
Send us your existing records as an Excel or CSV file. Our team maps the columns, checks every row for problems and imports your patients, appointments, treatments, prescriptions, invoices and payments after review. An import can be rolled back if something is wrong. Talk to us about switching.
Download the overview, today’s snapshot, revenue, expenses, patients, doctors, treatments, medicines, lab cases, stock and doctor commission as PDF reports. The analytics cover clinical, revenue, patient, doctor, inventory and operations views for any period you choose, with AI insights on top.
How it works
Create your clinic and pick your specialty in the setup wizard. No card needed.
Edit the presets, procedure templates, consent forms and prescription templates, and add your letterhead and hours.
Most clinics are live in under 10 minutes, with appointments, records and billing already connected.
Know the response deadline a clinic is expected to meet
Or start for free.
