12 NABIDH Consent and Access Control Policy

12.1. Purpose:
14.1.1 The purpose of this policy is to ensure accessing and sharing of PHI shall comply with all applicable UAE laws and DHA regulations.
14.1.2 This policy ensures that the Subject of Care or his / her agent understands and agrees to the sharing of PHI as well as the risks, benefits and alternatives.
14.1.3 This policy also defines the circumstances in which a Subject of Care can permit or withhold the use and disclosure of NABIDH accessible PHI.
14.1.4 Subject of care can be a UAE national, resident of UAE, or a Tourist.

12.2. Scope/Applicability:
This policy applies to everyone involved in the protection of PHI including:
14.2.1 DHA and their Business Associates or any subcontractors, who are responsible for oversight of NABIDH platform.
14.2.2 NABIDH and their Business Associates or any subcontractors who are responsible for exchange of Subject of Care PHI.
14.2.3 Healthcare Facilities and their Business Associates or any subcontractors who are responsible for submission, collection and use of Subject of Care PHI.
14.2.4 Subject of Care or the Subject of Care Agent who is responsible for providing appropriate consent to their PHI.