Duty LXD-6744
Handles health records, in Djibouti
Digital Code, Book I: sensitive categories of personal data and the minor's consentsince 2 lines
Code Numérique, Livre Premier, Arts. 59 et 62 (consentement du mineur et données sensibles) · Read the law's page
- Do not process sensitive personal data (racial or ethnic origin, political or philosophical opinions, religious opinions or beliefs, trade-union membership, genetic data, biometric data used to uniquely identify a person, or health data) without the data subject's express consent or another statutory ground.
- Let a minor consent alone to an information-society service's processing of their personal data only from age 16, obtain the consent of the person holding parental authority below that age, and make reasonable efforts to verify it given the technology available.
Digital Code, Book VII: National Health Data System Security Incident Reportingin force3 lines
Loi n° 019/AN/23/9ème L portant Code Numérique, Livre Septième, Art. 747 · Read the law's page
- Report a serious information-system security incident to the cybersecurity authority without delay, if you access data in Djibouti's national health data system as a health professional, health establishment, health-insurance financing body, or other body accessing that system.
- Expect a significant security incident to be separately and immediately transmitted by the national authority in charge of information systems to the State's competent authorities.
- No numeric reporting clock is stated for this duty; a decree defining which incidents count as significant, and how they are handled, was not located in this review.
Digital Code, Book VII: Health-Data Hosting Security Certificationin force3 lines
Loi n° 019/AN/23/9ème L portant Code Numérique, Livre Septième, Arts. 760 à 763 · Read the law's page
- Hold a conformity certificate the national cybersecurity authority issues before hosting digital health data, if your activity is making available and maintaining the physical site, the physical or virtual infrastructure, or an application-hosting platform for a health-data information system, administering or operating such a system, or backing up health data.
- Expect the certificate's own issuance conditions to be set by a decree not located in this review.
- Expect the certificate to be withdrawn for a breach of the legislative or regulatory provisions governing digital health-data hosting, or of the certificate's own conditions.