Personal Information Collection Statement (for Healthcare Recipient and Substitute Decision Maker)

Please READ this Statement before you provide any Personal Data to us.

Purposes of Collection

We, the Electronic Health Record Office under the Food and Health Bureau of HKSARG, may collect your personal information including name, date of birth, gender, identity document number, and contact information (e.g. correspondence address, telephone number(s) and email address) if you are a healthcare recipient.

We may collect your personal information including name, identity document number, contact information (e.g. correspondence address, telephone number(s) and email address) and details of your relationship with the healthcare recipient if you are a substitute decision maker (if applicable) applying for a healthcare recipient in relation to matters of his / her registration to the Electronic Health Record Sharing System (eHRSS).

We may also receive information about you from other healthcare recipients, when they register you as their authorised person or contact person in eHRSS and your personal information including name and contact information (e.g. correspondence address, telephone number(s) and email address) will be collected.

The personal data and information we collect from you is for your application and registration to eHRSS or for a healthcare recipient to apply and register to eHRSS with you as his/her substitute decision maker, authorised person, or a contact person, and related matters under the Electronic Health Record Sharing System Ordinance (Cap 625) (eHRSSO). Such matters include but are not limited to the following: the giving of and management of joining consent and/ or sharing consent, updating of information in eHRSS, receipt of eHRSS notifications, and withdrawal from eHRSS. The health information of the registered healthcare recipient will be shared among healthcare providers who have obtained sharing consent from that registered healthcare recipient or his/her substitute decision maker. Using your personal information in eHRSS for direct marketing is an offence.

Classes of Transferees

Except with your prior consent, we will not transfer or disclose the collected personal data and information to any third party except as stated below:

  1. the Department of Health, Hospital Authority or any person or entity whom we may appoint in writing to assist the Commissioner for the Electronic Health Record in performing a function and exercising a power, pursuant to eHRSSO;
  2. any personnel, agent, adviser, auditor, contractor or service provider engaged by us to provide services or advice (e.g. technical, security or data processing service, etc.) in connection with our operations;
  3. any person to whom we are required to make disclosure to under any law or court order applicable in Hong Kong.

Access and Correction of Your Personal Data

You have the rights of access and correction of the personal data provided and the application forms for access to or correction of personal data can be obtained from the eHRSS website.You may also contact the Electronic Health Record Registration Office for more information. A non-excessive fee will be charged for complying with your data access request.

Enquiries

Enquiries concerning personal data provided, including data access requests and data correction requests should be addressed to:

Electronic Health Record Registration Office

Address: Unit 1193, 11/F, Kowloonbay International Trade & Exhibition Centre, 1 Trademart Drive, Kowloon Bay, Hong Kong
Hotline: 3467 6300
Fax: 3467 6099
Email: ehr@ehealth.gov.hk