Without an enforcement mechanism and strong leadership in the site, privacy guidelines, rules, procedures, protocols are difficult to implement Respect for privacy is respect for persons and their human rights. It helps improve quality of care and make healthcare providers more mindful of patients' needs. Privacy is context-sensitive. For privacy policies to be effective, they have to be driven by a deep understanding of the context of care where privacy concerns may arise. Hence, locally formulated, privacy-enhancing procedures, protocols at the health facility level are as important as the general laws governing privacy. Privacy is a process, not a product.

Accountable: facility board or highest ranking official Responsible: privacy officer or designate Consulted: all staff Informed: patients and other third parties

mandated by law roles: ensure compliance with Data Privacy Act, privacy-related department orders and other issuances, lead local training and capacity building ensure suppliers, contractors are compliant lead in the formulation of Privacy-Enhancing Practices, Procedures, Protocols: See Privacy Team

employee onboarding employee offboarding personnel orientation and training promote total privacy awareness in the healthcare facility