• Privacy protocols of health facilities shall be available both in written and electronic forms and shall be distributed to all employees.

  • Health facilities shall ensure that appropriate signages indicating the availability of privacy protocols are posted.
  • Privacy protocols of health facilities shall be updated and deposited with the HealthPrivacy Board and, in so far as practicable, be made available online in its own website.

For facilities maintaining public-facing websites:

• Any information that may compromise the privacy of the patient shall not be posted in the website.
  
• Any data collected by the website shall be treated with utmost confidentiality.
  
• Where applicable, the health facility operating the website shall declare that it uses cookies to manage authentication, navigation, and other functions. It shall also actively request a site user to agree that these types of cookies can be placed on one's device.

• Privacy Set of Rules (SOR)