Handles health records, in El Salvador

Ley de Deberes y Derechos de los Pacientes y Prestadores de Servicios de Salud (Decreto Legislativo No. 307 of 2016), arts. 20, 42(g), 42(l), 43(b), 45 and 46 · Read the law's page

• If you provide health services, public or private, respect the confidential character of a patient's clinical record and of all information on their diagnosis, treatment, stay, prognosis and illness, and disclose it only on the patient's written authorization or for imperative legal or medical reasons.
• Do not publicly disclose the medical and clinical information on a patient's health that you obtained in giving care.
• Do not damage, alter or remove sheets of a patient's clinical record.
• Give care and perform procedures in a way that safeguards the patient's intimacy and privacy.

Ley de Prevención y Control de la Infección Provocada por el Virus de Inmunodeficiencia Humana (Decreto Legislativo No. 562 of 2016), arts. 26, 27, 30, 34(c) and 35 · Read the law's page

• Do not request a test to diagnose HIV infection by any means or for any reason, and do not use deception or routine tests to infer a person's HIV status.
• Do not require an HIV test as a condition of entering the country, obtaining goods or services, or joining a public or private institution or workplace.
• Do not reveal information about a person's HIV condition or diagnosis without their consent.
• If you are a public or private health institution or a health professional, report people diagnosed with HIV, and HIV-related deaths, to the Ministry of Health for epidemiological purposes, guaranteeing confidentiality.

Decreto Legislativo No. 144, arts. 4(g), 26, 37, 38, 39 and 42 (sensitive personal data and children) · Read the law's page

• Do not compel a person to provide sensitive personal data (data touching physical or moral characteristics, or facts of private life whose misuse could cause discrimination or gravely harm honor or privacy, including religious belief, ethnic origin, political or union affiliation, sexual preference, health, or biometric or genetic information); take it only with the data subject's express and unequivocal consent after telling them of their right to withhold it.
• Obtain a sensitive data subject's consent in writing, by an autograph signature or its equivalent, and apply the Progressive Exercise of Faculties principle to a child's consent to provide their personal data.
• Process health data, as a health establishment or professional, only for a patient under your care and only for prevention, diagnosis, treatment or health service management, under professional secrecy.
• Collect or process sensitive personal data only where this Law authorizes it, another statute authorizes it for a general interest, you have a legal mandate, or the purpose is statistical or scientific and the data have been dissociated from the data subject.
• Do not create a database of sensitive personal data in violation of this Law.
• Guarantee the best interests of a child or adolescent in any processing of their data, and inform both the child and their parent or guardian, in clear and age appropriate language, before exercising the child's rights.