libreosteo / LibreOsteo

Open Source software for osteopathes
GNU General Public License v3.0
28 stars 17 forks source link

[FEATURE] GDPR conformity : store the consent of the patient for data storage #264

Closed jbgury closed 2 years ago

jbgury commented 3 years ago

In accordance with the GDPR Law, therapeuts have to obtain the consent of their patient in order to create a file into LibreOsteo. This consent was not managed into the software, but managed as a separate process (when taking the appointment for example).

This feature has the goal to store the consent of the patient and keep track of this consent.

If the therapeut does not have the consent, the patient folder has to be destroyed.

When creating a new patient, a checkbox is present to ensure that the consent was obtained. No new creation without the consent.

For existing patient, a warning message is displayed to obtain the consent when opening the patient folder. The process could start from this warning message.

For patient imported from CSV file, the consent is set to false by default. Each consent has to be obtained again for this system. (because it could be on paper sheet and not by a automated technical system.)