Design and Implementation of DPDP Act Compliant Hospital Management System

G. Santosh Kumar

Dept of CSE

Sphoorthy Engineering College Hyderabad, India gsk534@gmail.com

Mrs. P. Jhansi Rani

Professor

Dept. of CSE,Sphoorthy Engineering College, Hyderabad

Dr. Kiran B M2

Professor and Head of Department Dept of CSE,

Sphoorthy Engineering College Hyderabad, India

dr.kiran@sphoorthyengg.ac.in

ABSTRACT

The purpose of the project entitled as “Design and Implementation of DPDP Act Compliant Hospital Management System” is to computerize the hospital administration while ensuring compliance with India’s Digital Personal Data Protection Act.

The software is designed to be user friendly, secure, fast, and legally aligned. It deals with the collection and protection of patient information such as add patient, update patient, delete patient, search patient, view patient diagnosis, etc., with strict access controls. Traditionally, hospital systems lacked compliance features like audit trails and consent management.

The main function of the system is to register and store patient and doctor details, retrieve them when required, and manipulate these details meaningfully while maintaining privacy safeguards. The system can be accessed using a username and password, with roles defined for Admin, Doctor, and Receptionist. Only authorized users can add or modify data in the database. The data can be retrieved easily, is well protected against unauthorized access, and ensures fast and transparent processing.

The Government of India has emphasized safeguarding personal data in healthcare through the DPDP Act. The basic working of many hospitals in India is still fragmented and paper-based compared to hospitals in countries where compliance automation is standard. The concept of integrating privacy, accountability, and automation in hospital management is now being implemented in India, with large hospitals adopting secure digital systems.

This project bridges existing gaps by embedding audit trails, automated consent, and real-time monitoring, thereby enhancing patient trust and ensuring hospitals meet statutory requirements. Computers are not only used to increase efficiency in all fields ranging from fixing appointments to keeping patient records, but now also to enforce compliance with national data protection laws