1. Processing and Roles
Where the GDPR applies, CareTech AI is committed to supporting principles of lawful processing, transparency, data minimization, storage limitation, confidentiality, and accountability. Depending on the service agreement, CareTech AI acts as a data processor, service provider, or independent controller.
2. Supported Privacy Protections
Where GDPR is active, CareTech AI supports data privacy through:
- Providing tools for data subject access, correction, deletion, and portability.
- Incorporating privacy-by-design and privacy-by-default workflows during product development.
- Applying appropriate security controls to safeguard data against processing risks.
- Managing processor list updates and subprocessor security reviews.
3. Customer Responsibility
Customers are responsible for determining their own lawful basis for processing personal data, providing required notices to patients, obtaining necessary consents, and ensuring that their use of CareTech AI services complies with GDPR requirements.