KILINIKI HMIS

Purpose

KILINIKI HMIS supports healthcare institutions with patient care, clinical workflows, billing, pharmacy, laboratory, reporting, administration, and health intelligence. This policy explains how personal data, health data, operational data, security logs, and AI-assisted features are governed.

Scope

This policy applies to patients, healthcare workers, administrators, auditors, support teams, platform administrators, approved third-party users, and authorized integration partners across SaaS, private SaaS, on-premise, hybrid, mobile, tablet, and web deployments.

Data Types Processed

KILINIKI HMIS may process patient identifiers, demographic details, contacts, visit history, clinical notes, diagnoses, prescriptions, lab and radiology data, admissions, billing, payments, insurance, user and staff profiles, access permissions, institutional data, technical logs, audit logs, de-identified analytics, and AI model performance logs where enabled.

Data Subject Rights

Patients and users may have rights to be informed, access their data, request correction, object to processing, request deletion or erasure where legally allowed, request restriction of processing, request portability where applicable, and request human review of AI-assisted decisions.

User Responsibilities

Users must use their own credentials, protect passwords, access only records needed for official duties, avoid unnecessary viewing, avoid unauthorized exports or screenshots, report suspected breaches, verify patient identity before updates, and avoid entering false or misleading information.

AI Governance Principles

AI-assisted features must support human decision-making and follow human oversight, transparency, explainability where possible, fairness, non-discrimination, safety, accountability, privacy by design, and security.

AI Restrictions

Users must not upload patient data into external AI tools without approval, rely on AI as the final clinical decision, use AI to deny care without human review, profile patients unfairly, make discriminatory decisions, disable audit controls, or copy AI-generated clinical content into records without review.

Clinical AI Disclaimer

AI outputs are not a substitute for professional clinical judgment, patient examination, diagnostic confirmation, specialist review, institutional protocols, national guidelines, or emergency medical judgment.

Audit and Monitoring Notice

KILINIKI HMIS may log access, login attempts, patient record activity, billing changes, clinical validation, role and permission changes, data exports, system configuration changes, and AI-assisted recommendation review or override.

Contact and Support

For privacy, correction, deletion, breach reporting, access, or AI governance concerns, users should contact their Facility Administrator, Tenant Administrator, Data Protection Officer or Lead, ICT/Security Officer, Compliance Officer, or KILINIKI HMIS Support Team.