Patient data — [1] DPDP Act mandates every entity processing information to explain [a] how they are processing patient information–[b]  what is included in patient information [c] how long this information will remain with the entity and [d] who is allowed to access this information [2]Failure to disclose these details and /or enforce data safeguards or even inform a patient of a data breach makes the health entity liable to a whopping fine of ₹ 250 crore [3] In another 8 months the law and its penalties will kick in –Courtesy BusinessLine