Privacy & Security at nexuzhealth

At nexuzhealth, data protection is top priority. We support healthcare institutions and providers by offering technology and platforms that meet or exceed current industry standards for privacy and security.

Discover more about our role, our security principles, and frequently asked questions.

Disclaimer

Nexuzhealth acts solely as a data processor with regard to patients’ medical records. This means that hospitals, healthcare institutions, and healthcare providers determine how these records are processed, while nexuzhealth operates strictly in accordance with their instructions. As data controllers, these institutions and providers bear full responsibility for the processing of medical records.

Quick links:       Privacy policies          Cookie policy          What to do in case of phishing?           FAQ         

Our privacy and security principles

At nexuzhealth, we adhere to key principles, including:

  • Minimal data processing: we fully comply with the instructions of healthcare institutions and providers, ensuring that we process only the necessary personal data.
  • Confidentiality obligations: all nexuzhealth employees are subject to confidentiality clauses as part of their employment contracts.
  • Transparency and audit trails:  through the mynexuzhealth app, users can access their health data. Nexuzhealth ensures that every access or modification to a record is carefully logged. Users can request an audit log overview from their healthcare institution.

We also adhere to the principles of Privacy by Design, Privacy by Default, Security by Design, and Security by Default. Want to know what these terms mean and how we ensure compliance with these methodologies? Be sure to read this article.

What is the role of nexuzhealth?

Nexuzhealth supports healthcare institutions and providers (the data controllers) in managing and securing patient data. As a data processor, our role is to provide technical and operational support.

If patients wish to exercise their rights—such as the right to access or correct their data—they must submit their request to the data controller, who will handle the request. Nexuzhealth cannot process such requests directly but can provide general information and advise patients to contact their treating healthcare provider or institution.

In summary:

  • Healthcare providers and institutions are the data controllers and bear the responsibility for ensuring patient privacy rights.
  • Nexuzhealth supports its customers by providing secure technology and infrastructure but cannot handle direct requests from patients.

Health record

Consult record for third parties

Exercising the rights of another patient can be done in various roles:

A representative can gather information about the health condition and access the patient's medical record.

Are you responsible for making medical decisions on behalf of another patient? In this case, you can become a representative or legal guardian.

Foster parents and proxy holders for healthcare decisions also have certain rights regarding a patient and may access the medical record.

As a parent, how can I access my child's record?

As a parent, you can access the medical record of your child (under 15 years old) through a parent/child link. To prove that you have parental authority, additional documents may be required.

For a child under 15 years (parent/child link)

For a child over 15 years (representative)

Parental authority

Additional documents

 

Does my general practitioner or healthcare provider have access to my record?

Information about your privacy and who has access to your medical record can be found here.

In the 'Access' section, you can find an overview of healthcare providers who have access to your medical record (e.g., general practitioner, healthcare provider, representative, etc.).

Your general practitioner automatically has access to your record. If you do not want this, you can report it to the registration desk at your hospital or revoke access on the website www.mynexuzhealth.be. Other healthcare providers do not have automatic access to your nexuzhealth record.

If you want to grant access to an external healthcare provider, they must register through www.nexuzhealth.com/en/consult. Once the healthcare provider has access to nexuzhealth consult, they need to submit a request to access your record.

If you later wish to deny access to a healthcare provider, you can report it to the registration desk at your hospital or revoke access via www.mynexuzhealth.be.

Why can I no longer access a deceased patient's health record?

Accessing the medical record after a patient's death is often a challenging and delicate matter. On one hand, it involves privacy and the protection of personal data, while on the other hand, the patient has passed away and cannot personally object.

The Patient Rights Act provides for only indirect access to the medical record after the patient's death by a healthcare professional (e.g., doctor, nurse, pharmacist, dentist, or paramedic) designated by the requester. This means that the requester cannot personally view the record.

Article 9 of the Law of August 22, 2002, concerning patient rights, stipulates that indirect access to the record of the deceased patient can be requested by the spouse, legal cohabiting partner, partner, and blood relatives up to the second degree (e.g., sisters, grandparents, and grandchildren). Access to the record must be sufficiently motivated and is only possible if the patient did not explicitly object to it during their lifetime.

In the mynexuzhealth application, access to the patient's record is immediately closed upon the patient's death. The entitled individuals can submit a request for indirect access through the hospital's ombudsman service.

What is an exlusion?

A patient’s file is shared with a healthcare provider when a therapeutic relationship is established between the patient and this healthcare provider. A therapeutic relationship is a relationship between a patient and a healthcare provider in the context of which healthcare is provided, or simply put, the relationship of trust between patient and healthcare provider.

In the absence of a known therapeutic relationship in the system, healthcare providers do not, in principle, have access to the patient’s medical records. However, several other scenarios are possible where access to the file is required. Some examples to illustrate this:

  • When a healthcare provider sends a sample to the hospital laboratory, a clinical biologist or laboratory technician can consult the patient’s file;
  • Within the framework of clinical studies, medical data from health records may be consulted by a researcher;
  • A healthcare provider is called by the patient’s general practitioner with questions about a report of a treatment some months ago;
  • When a patient arrives unconscious in an emergency room and their representative cannot be reached in time, the healthcare provider will be able to consult the patient’s record in order to administer appropriate care.

In the above cases, the healthcare provider must apply the ‘break the glass principle ‘. This will also be logged in the system with the corresponding justification of the care provider (e.g. the therapeutic relationship is not yet known by the system).

A patient can choose to deny specific healthcare providers access to their file (so-called “exclusion” of a healthcare provider). As a result, a healthcare provider may, in principle, no longer access the patient file in any way whatsoever. The patient may request an exclusion regardless of whether or not a therapeutic relationship exists or has existed. This allows a patient to apply for a preventive exclusion (e.g. if an ex-partner is a healthcare provider).

In order to ensure continuity of care, a temporary override of an exclusion may be applied. Suppose that an excluded healthcare provider is the only one on duty for a specific medical discipline for which the patient requires urgent care, this healthcare provider will still be able to gain access to the health record.

There are two different types of exclusions:

  1. eHealth exclusions: via the eHealth platform, healthcare providers (with a NIHDI number) can be excluded. These are included in the nexuzhealth applications, but can only be managed via the eHealth platform (e.g. to stop an exclusion) which can be reached via https://www.mijngezondheid.belgie.be/.
  2. nexuzhealth exclusions: via the nexuzhealth healthcare institutions healthcare providers and staff can also be excluded. These can be accessed and managed via mynexuzhealth, but are not taken over by the eHealth platform.

In order for an exclusion to have the broadest possible effect, it is therefore advisable to register it via the eHealth platform, where non-nexus healthcare institutions can also consult these exclusions.

For more information, click on Exclusion.

Who can be excluded?

Via the nexuzhealth care institutions, care providers as well as support staff can be excluded. For example, an administrative employee who can no longer consult the patient’s agenda due to an exclusion.Via the eHealth platform, only healthcare providers with a NIHDI number can be excluded for the time being

For more information, click on: Exclusions.

 

What is the link between eHealth and nexuzhealth exclusions?

The federal eHealth platform is used as a so-called metahub and connects all regional hubs (such as CoZo or VZN KUL) so that healthcare providers who have a therapeutic relationship with this patient can consult the available documents about the patient (provided the patient has given their global consent). The patient can register exclusions in the eHealth platform that will result in the excluded healthcare providers no longer having access to the health record via the eHealth platform.

Nexuzhealth supplies an Electronic Health Record (EHR) to the nexuzhealth care institutions. The exclusions of healthcare providers and staff members that the patient has registered via a nexuzhealth healthcare institution has effect in all nexuzhealth healthcare institutions.

In addition, the nexuzhealth applications take over the exclusions registered in the eHealth platform (starting at Q1 2023), so that the healthcare providers who were already excluded for the health record in the eHealth platform are automatically excluded for the health record in the nexuzhealth healthcare institutions.
Conversely, the eHealth platform does not take over any exclusions from the nexuzhealth applications.If the patient wants to stop an exclusion, this requires going through the same process as for the application. In concrete terms, this means that an exclusion originally registered via the eHealth platform must be stopped via the eHealth platform. An exclusion requested via a nexuzhealth healthcare institution can be stopped via the mynexuzhealth (web) application or via the nexuzhealth healthcare institution.

For more information, click on: Exclusions

Privacyverklaringen

We have several privacy policies that outline how nexuzhealth processes personal data as a data controller. Some privacy policies also clarify nexuzhealth’s role as a data processor, distinguishing between situations where nexuzhealth processes data solely on instruction from healthcare institutions (as a processor) and situations where nexuzhealth determines how data is processed (as a data controller, e.g., for events or nexuzhealth job applications).

 

Read our privacy policies

Cookie policy

We use cookies to ensure our website functions properly, collect statistics, improve user experience, and display relevant advertisements. You can always adjust your preferences.

 

Read our cookie policy

Phishing: protect your personal information 

Phishing is a form of fraud where criminals attempt to gain access to your personal information, such as your medical records or banking details, often by impersonating a trusted entity like nexuzhealth.

How to recognize phishing?
20240831-nexuzhealth-mynexuzhealth-klinisch werkstation

Any questions?

  • Do you have general questions about privacy or security? Contact nexuzhealth via the service portal
  • Do you have specific questions about your patient record? Contact your hospital, healthcare institution, or healthcare provider.

We are here for you

Any questions or can we help with anything? 

The answers to the most frequently asked questions can be found on the website. If you still have questions, please contact the service desk.

Frequently asked questions Our service deks
Contact the following healthcare facilities directly:

MS Center MelsbroekAZ TurnhoutSint-Trudo Sint-TruidenAZ Glorieux Ronse – AZ Jan Portaels – Rehabilitation Hospital Inkendaal