In relation to the Kanta service, the patients are entitled to
- check the details in their prescription and patient records
- check their disclosure information
- be informed of the Kanta Services
- decide on the disclosure of their patient data
- use the My Kanta service
Patient rights concerning prescriptions
Informing the patient
Patients are entitled to receive information about electronic prescriptions before they are issued for them for the first time. Patients must be told about their own rights, where and on what terms their prescription information can be disclosed, and what they can do themselves to influence the movement of this information. Patients must also be explained how the information stored on them in the Prescription Centre is protected and the operating principles and administrators of the information systems.
This information can be provided by a healthcare receptionist, nurse or doctor. The methods of procedure vary between operating units. The information may be provided either verbally or in writing.
Informing patients on the result of renewal requests
Patients are entitled to be informed as to whether their prescription has been renewed or if their renewal request has been denied or it has lapsed. Patients may enquire about the status of their renewal request at the pharmacy or healthcare unit one week after the request was made at the earliest.
If the prescription cannot be renewed, the healthcare unit is obliged to inform the patient about it.
Information about a renewed or denied prescription can also be received by text message. The mobile telephone number is given in connection with the renewal request. The text message is sent by the Prescription Centre, stating the name of the medicine.
Patients' right to check their details
Patients have the right under the law (the Personal Data Act and the Act on Electronic Prescriptions) to
- check the details stored on them in the Prescription Centre and the Patient Data Repository
- demand that incorrect information is corrected
- obtain information on who have handled and viewed their personal information.
If a patient wants to inspect the information of a prescription in the Prescription Centre, the request shall be addressed to Kela. In case of an error, a request to rectify incorrect information shall be addressed to the healthcare unit or pharmacy that has made the mistake.
There are two ways to find out which organisation has handled the information. The patient may view the matter in My Kanta or make a log data request to Kela. By making a log data request to Kela, the patient will also receive information about the persons who have viewed or handled the data.
Requests are made in writing on Kela's official forms, which are available from healthcare units and pharmacies or from Kela offices.
If the patient is of the opinion that their information has been handled unfoundedly, they can request the pharmacy or healthcare unit in question for an explanation on the matter.
Patient rights concerning patient records
Patients may also require treatment elsewhere than in their home town. The patient's consents and refusals influence how and where their patient data can be used. In the My Kanta service, patients can view and make use of their patient records.
Information on the Patient Data Repository and Patient Data Management service
Patients must be informed about the Patient Data Repository in connection with the first service event at the latest. They must be explained the conditions of disclosing information recorded in the service and how they can influence the way their data is processed. Patients must also be told how the information stored on them in the Patient Data Repository is protected and about the operating principles and administrators of the information systems.
The information can be given, for example, by a healthcare receptionist, nurse or doctor. The information may be provided either verbally or in writing. Patients may also acknowledge receipt of the information in the My Kanta pages.
Patient's right to decide on disclosure of information
Disclosure of information from the Patient Data Repository requires the patient's consent. The consent is valid until further notice and concerns all patient data already in the repository and data recorded there at a later date.
Patients may limit the extent of their consent by issuing a refusal. For example, they may refuse information related to a specific appointment or to a certain healthcare unit or its register.
Consents and refusals related to the Patient Data Repository must be given in writing. Official consent and refusal forms are available from healthcare units and Kela offices. Consent may also be given in the My Kanta pages.
Patients' right to check their details
According to legislation (Personal Data Act and the Act on the Electronic Processing of Client Data in Social and Health Care Services), patients are entitled to
- check the information stored on them in the Patient Data Repository and in Patient Data Management service
- find out who has used information stored on them in the Patient Data Repository and in Patient Data Management service and who this information has been disclosed to
- demand that incorrect information is corrected.
Requests to check patient data and log data requests are sent to the custodian of the data. The custodian of patient documents is the healthcare service provider, under the name of which the documents (e.g. medical records) have been created and recorded. A log data request can also be sent to the healthcare unit that has received patient data from the repository. If there is an error in the data, the correction request shall be addressed to the healthcare service provider (custodian) that made the error.
The custodian of the patient data management service is Kela. Patients are entitled to request from Kela data that has been recorded in the patient data management service, including
- information about the fact that a patient has been informed of the nationwide patient data management service (Kanta Services)
- patient’s consent to sharing patient data
- withdrawal of consent
- refusals to share patient data
- withdrawals of refusals to share information
Checking and log data requests concerning Patient Data Management service shall be made in writing using official Kela forms. These forms are available in healthcare units, pharmacies and Kela's offices. If the patient wishes to receive the log data on the handling of their patient data, they must contact the healthcare service provider that has created the patient data or that has received the patient data. Kela is unable to provide log data on the handling of patient data as, by law, the provision of this data is the responsibility of the healthcare service provider. Patients may follow the use and browsing of their data at the organisation level through My Kanta pages.
Patients' rights in the Common Register
Informing about the Common Register
The Common Register gathers together the patient record registers of all municipal healthcare register controllers in the Healthcare District.
Patients must be told about the common patient data register and the possibility of passing patient information to other service providers included in the common register without separate consent. The information may be provided either verbally or in writing. Patients may also receive information about the Common Register in the My Kanta pages.
Patients must be explained that they are entitled to refuse disclosure of information. The refusal may apply to a healthcare unit, a register or an individual service event. The refusal is valid until further notice and it can be revoked at any time. The refusal can be made at a healthcare unit using the Common Register. The refusal can also be made via the My Kanta pages.