[{"data":1,"prerenderedAt":284},["ShallowReactive",2],{"\u002Fblogs\u002Fhow-xia-helps-clinics-protect-patient-information":3},{"id":4,"title":5,"body":6,"category":275,"date":275,"description":272,"excerpt":275,"extension":276,"heroImage":12,"meta":277,"navigation":278,"path":279,"seo":280,"stem":282,"__hash__":283},"blogs\u002Fblogs\u002Fhow-xia-helps-clinics-protect-patient-information.md","How XIA Helps Clinics Protect Patient Information",{"type":7,"value":8,"toc":271},"minimark",[9,18,212],[10,11,14],"xia-hero-section",{"image":12,"imageAlt":13},"\u002Fhero-image-log-2.png","composition of security and new zealand symbole",[15,16,5],"h1",{"id":17},"how-xia-helps-clinics-protect-patient-information",[19,20,21,28,34,39,44,49,54,59,64,69,74,79,84,89,94,99,104,109,114,119,124,129,134,139,144,149,154,159,164,169,174,179,184,189,194,199,204],"xia-section",{},[22,23,24],"xia-title-two",{},[25,26,27],"p",{},"Supporting privacy, security, and better record management",[29,30,31],"xia-text",{},[25,32,33],{},"Trust is central to healthcare, and that trust extends beyond the treatment room.",[29,35,36],{},[25,37,38],{},"Every clinic system, whether digital or paper-based, becomes part of how a practitioner protects patient confidentiality, maintains professional records, and manages sensitive health information over time. For acupuncture and East Asian medicine clinics in New Zealand, this is especially important when clinical notes, ACC-related documentation, treatment history, and patient communication all need to be handled carefully and consistently.",[29,40,41],{},[25,42,43],{},"XIA was developed with this responsibility in mind. It is designed to help clinics manage patient and clinic information in a more organised, secure, and professional way, while supporting the day-to-day realities of modern practice.",[22,45,46],{},[25,47,48],{},"What Clinics Can Do in XIA",[29,50,51],{},[25,52,53],{},"Clinics can use XIA to book, modify, and cancel appointments, manage patient records, securely keep clinical notes, support ACC-related workflows, set up clinic organisation details, add and manage practitioners, set practitioner hours and days of operation, manage services and appointment types, and keep important clinic information in one organised system.",[22,55,56],{},[25,57,58],{},"Why Secure Record Management Matters",[29,60,61],{},[25,62,63],{},"Safe information management is not only about where records are stored. It is also about how easily information can be found, updated, reviewed, protected, and used appropriately. When clinic information is scattered across paper files, spreadsheets, emails, local folders, and separate admin tools, it becomes harder to manage consistently. XIA helps bring core clinic information into one structured system, reducing unnecessary fragmentation and supporting clearer day-to-day record management.",[29,65,66],{},[25,67,68],{},"Healthcare clinics manage highly sensitive personal information, including patient contact details, health information, injury information, treatment records, clinical notes, referral information, and ACC-related documentation. Protecting this information is a core professional responsibility.",[29,70,71],{},[25,72,73],{},"In New Zealand, the Privacy Act 2020 sets out privacy principles for how agencies collect, store, use, and share personal information. This includes storage and security, including taking reasonable safeguards to protect personal information from loss, misuse, unauthorised access, unauthorised modification, or unauthorised disclosure (Office of the Privacy Commissioner, n.d.-a).",[29,75,76],{},[25,77,78],{},"XIA supports clinics to meet their obligations under the Privacy Act. It does not replace a clinic’s own privacy responsibilities. Clinics still need appropriate internal policies, informed consent processes, staff training, professional judgement, and good day-to-day privacy practices. The right software can make it easier to manage information responsibly.",[22,80,81],{},[25,82,83],{},"How Cloud-Based Software Helps",[29,85,86],{},[25,87,88],{},"XIA is cloud-based software. This means it is accessed securely through the internet, rather than being installed only on one clinic computer. In practical terms, this means the clinic system is not tied to one physical device sitting in one room.",[29,90,91],{},[25,92,93],{},"This helps reduce reliance on local hard drives, paper folders, manual backup routines, disconnected spreadsheets, and files stored across multiple places. For clinics, this matters because patient records are not just business documents. They are sensitive health records that need to be protected, organised, and available when needed.",[29,95,96],{},[25,97,98],{},"A cloud-based system can also make maintenance and updates easier because clinics do not need to manually install software or manage complex local systems. This allows XIA to improve over time while helping clinics reduce some of the risks that come with relying only on paper records or information stored on a single local machine.",[22,100,101],{},[25,102,103],{},"Password Login and Multi-Factor Authentication",[29,105,106],{},[25,107,108],{},"XIA uses password-protected login to help control access to clinic information. A password is the first layer of protection, helping ensure that only authorised users can access the clinic account.",[29,110,111],{},[25,112,113],{},"Multi-factor authentication (MFA) is also available. MFA adds another layer of security by requiring an additional verification step before access is granted. This helps reduce the risk of unauthorised access if a password is guessed, reused, shared, or compromised.",[29,115,116],{},[25,117,118],{},"For clinics managing sensitive health information, this extra layer of protection is important. Security is not only about where information is stored. It is also about making sure access is limited to the right people.",[22,120,121],{},[25,122,123],{},"Moving Away From Paper Notes",[29,125,126],{},[25,127,128],{},"Paper notes still exist in many clinics, but they can create practical and privacy-related problems over time. These may include lost or damaged files, hard-to-read handwriting, inconsistent documentation, difficulty tracking long-term progress, limited accessibility, physical storage requirements, difficulty securely sharing records when needed, and uncertainty about retention and disposal.",[29,130,131],{},[25,132,133],{},"Digital record systems can help clinics move toward more organised, searchable, and secure record management. That does not mean digital systems remove all responsibility. It means they can support better processes. Moving away from paper-based systems makes clinical and administrative work easier to manage.",[22,135,136],{},[25,137,138],{},"Supporting Patient Access Requests",[29,140,141],{},[25,142,143],{},"Good record management is not only about storing information securely. It is also about being able to retrieve the right information when it is needed. Under New Zealand privacy law, patients have the right to ask for access to their own personal information. For health providers, this can include clinical notes and other health information held by the clinic (Office of the Privacy Commissioner, n.d.-b; Office of the Privacy Commissioner, 2020).",[29,145,146],{},[25,147,148],{},"XIA supports this by making clinical notes easy to download when needed. This helps clinics respond to patient requests more efficiently, without searching through paper files, scanning handwritten records, or manually compiling information from multiple systems.",[22,150,151],{},[25,152,153],{},"XIA as a Custodian of Clinic Information",[29,155,156],{},[25,157,158],{},"XIA provides software infrastructure that helps clinics store, access, and manage information securely. We see this as a custodial responsibility. Patient and clinic information should be handled carefully, with attention to privacy, security, and continuity. That means thinking not only about how information is stored while a clinic is using XIA, but also what happens if a clinic chooses to leave.",[22,160,161],{},[25,162,163],{},"If a Clinic Leaves XIA",[29,165,166],{},[25,167,168],{},"If a clinic chooses to stop using XIA or requests account deletion, the account deletion process can be started. A responsible deletion process needs to balance the clinic’s request, patient privacy, technical security, backup systems, and protection against accidental data loss.",[29,170,171],{},[25,172,173],{},"Account deletion requests are processed within 30 days. Some residual data may remain temporarily in encrypted backups or system logs until those backups are automatically rotated or securely deleted. This is normal in secure cloud systems because backups exist to protect against accidental loss, technical failure, or security incidents.",[29,175,176],{},[25,177,178],{},"The important point is transparency. Clinics should understand how their information is managed, how deletion requests are handled, and why some technical processes take time to complete safely.",[22,180,181],{},[25,182,183],{},"Security Is an Ongoing Responsibility",[29,185,186],{},[25,187,188],{},"Security is not a one-time feature. It is an ongoing responsibility shared between the software provider and the clinic using the system.",[29,190,191],{},[25,192,193],{},"Good clinic software should support secure login, multi-factor authentication, organised record keeping, safer storage of clinical information, responsible data management, and clear processes for account changes and deletion. Clinics also need to play their part by using strong passwords, enabling MFA where possible, limiting access to appropriate users, keeping internal privacy policies up to date, training staff in privacy and confidentiality, and reviewing how patient information is collected, used, stored, and shared.",[29,195,196],{},[25,197,198],{},"The safest clinic systems combine good software with good clinic processes.",[22,200,201],{},[25,202,203],{},"Built for Trust",[29,205,206,209],{},[25,207,208],{},"XIA was developed for acupuncture and East Asian medicine clinics in New Zealand. It supports everyday clinic management, including booking, practitioner setup, clinic hours, patient records, clinical notes, and ACC-related workflows. But just as importantly, it was built with the understanding that clinic software handles sensitive health information. That means privacy, security, and responsible record management need to be part of the foundation.",[25,210,211],{},"XIA helps clinics manage information in a more organised, secure, and professional way, so practitioners can spend less time fighting scattered systems and more time focusing on patient care.",[19,213,214,219],{},[22,215,216],{},[25,217,218],{},"References",[220,221,222],"xia-bullet-list",{},[223,224,225,245,258],"ul",{},[226,227,228,229,233,234],"li",{},"Office of the Privacy Commissioner. (n.d.-a). ",[230,231,232],"em",{},"Principle 5: Storage and security of personal information",". Privacy Commissioner. ",[235,236,239],"span",{"className":237},[238],"s1",[240,241,242],"a",{"href":242,"rel":243},"https:\u002F\u002Fwww.privacy.org.nz\u002Fprivacy-principles\u002F5\u002F",[244],"nofollow",[226,246,247,248,233,251],{},"Office of the Privacy Commissioner. (n.d.-b). ",[230,249,250],{},"Principle 6: Access to personal information",[235,252,254],{"className":253},[238],[240,255,256],{"href":256,"rel":257},"https:\u002F\u002Fwww.privacy.org.nz\u002Fprivacy-principles\u002F6\u002F",[244],[226,259,260,261,233,264],{},"Office of the Privacy Commissioner. (2020). ",[230,262,263],{},"Health Information Privacy Code 2020",[235,265,267],{"className":266},[238],[240,268,269],{"href":269,"rel":270},"https:\u002F\u002Fwww.privacy.org.nz\u002Fprivacy-principles\u002Fcodes-of-practice\u002Fhipc2020\u002F",[244],{"title":272,"searchDepth":273,"depth":273,"links":274},"",2,[],null,"md",{},true,"\u002Fblogs\u002Fhow-xia-helps-clinics-protect-patient-information",{"title":281,"description":272},"How XIA Helps Clinics Protect Patient Information file","blogs\u002Fhow-xia-helps-clinics-protect-patient-information","N1tacAa8Hv5i_PeqkrCvRzFif5FQdsZggygbgK985ss",1784876155123]