Handles health records, in Nicaragua

Ley No. 787, arts. 3(g), 7(l), 8 (sensitive categories of data) · Read the law's page

• Process sensitive personal data (racial or ethnic origin, political affiliation, religious or philosophical belief, union membership, health or sex life, criminal record, or financial and credit information) only on a general-interest ground recognized by law, the data subject's consent, or a judicial order.
• Do not create a data file that stores sensitive personal data except as this Act provides, even though a commercial company or nonprofit association may still keep a file of its own members' data.
• Process a person's criminal record or administrative infraction data only if you are a competent public authority acting within your own powers.
• Where you are a hospital, clinic, health center, or health professional, limit the health data you process to a patient's physical or mental health information, and process it under professional secrecy.
• Disclose a company's commercial data about its customers, suppliers, or human resources only with the data subject's consent, under an express law of social interest, or by judicial order.
• Do not compel a data subject to supply their sensitive personal data, except where this Act's own exceptions apply.