DPDP for hospitals. NABH-ready. BMW-tracked. One platform.
Every hospital in India runs under six regulators at once: DPDP Act 2023 for patient data, NABH accreditation, Bio-Medical Waste Rules 2016, PCPNDT, AERB for imaging, and Drug & Cosmetics licensing. dcomply ships modules for each layer, from consent capture at reception to BMW bag counts to the pre-assessment file for your next NABH cycle. Nothing to install. Nothing to integrate with your HIS. Every register, deadline and audit checklist in one workspace.
If any of this sounds familiar, you're in the right place.
These are the exact sentences we hear from hospital compliance heads on the first call. If two or three of them are true for you, dcomply is the workspace you have been trying to build in a spreadsheet.
Your NABH cycle is nine months away and your BMW records are still in a paper register.
A patient asked for their data under DPDP last week and you don't have a workflow.
Your PCPNDT audit is annual and your form-F filing is manual.
Your drug licence renewal date is a reminder on someone's phone.
Your consultant sends a PDF report every quarter and you can't tell if you're actually compliant.
For patient-data specifics, see the DPDP door. If you run a hospital finance arm, the Fintech door covers RBI and CERT-In.
Every Indian hospital lives under all of these.
DPDP is the foundation because every patient interaction generates personal data. NABH sits on top for accreditation. PCPNDT and Bio-Medical Waste Rules add clinical and operational obligations. Drug & Cosmetics licence and AERB apply based on your speciality. POSH and Labour codes catch every hospital because of the size of the workforce. dcomply ships modules for each layer.
One Hospital, Eleven Regulators, Endless Audits
From the medical superintendent to the BMW vendor, everyone keeps their own logbook. dcomply collapses them into one.
DPDP Special Handling
Patient data is sensitive personal data. Different retention, different consent, different breach severity.
BMW Manifest Trail
Daily generation, daily disposal, monthly Form III filing. Miss a day and your CPCB renewal is at risk.
PCPNDT Register
Forms F, B, B/F, every machine, every ultrasound, every quarterly return. Manual audit-prone work.
NABH Re-Accreditation
Hundreds of standards across patient care, infection control, governance. The 2-year review is brutal without a system.
Every Hospital Module. Pre-Mapped to Indian Law
Subscribe to dcomply Business (5 packs) and you get all of these. No three-month implementation.
Consent Management
Patient consent forms, withdrawal flows, retention rules per hospital data class.
DSR Portal
Patient right-to-access, correct, delete via WhatsApp / portal. SLA tracking.
Breach Notification
72-hr DPB notice + CERT-In 6-hr filing. AI severity classification.
Hospital NABH Tracker
Live score across NABH chapters with evidence locker. Audit-ready binder generation.
BMW Manifests
Daily generation, weekly Form II, monthly Form III. Vendor PO logs, tracking sheet exports.
PCPNDT Register
Forms F + B per ultrasound, machine register, quarterly returns.
AERB Radiation
X-ray / CT / linac registration, TLD records, decommissioning checklist.
Doctor License Tracker
Medical council registration, renewals, CME credits per state.
Drug License Renewals
Form 20/21/Schedule M reminders, narcotics register, expiry alerts.
POSH Compliance
Internal Committee, annual return, training records (hospitals are POSH-mandated).
Labour Code Tracker
Headcount snapshots, shop & est registration, ESI/PF registers.
Evidence Locker
One vault: SOPs, NABH evidence, BMW manifests, drug licenses. Linked to every register above.
What dcomply Replaces
| Regulator / Framework | Why It Applies | dcomply Module |
|---|---|---|
| DPDP Act 2023 | You process patient personal & sensitive data | Data Privacy pack (11 modules) |
| NABH | Accreditation for hospitals & clinics | Healthcare NABH tracker |
| BMW Rules 2016 | Any clinical waste generation | BMW Manifests + CPCB filings |
| PCPNDT Act | Ultrasound + diagnostic centres | PCPNDT register + Forms F/B |
| AERB | X-ray, CT, linac, radiotherapy | AERB radiation register |
| NMC / MCI | Doctor registration + renewals | Doctor License Tracker |
| Drug Control | Pharmacy operations | Drug License Renewals |
| POSH Act | Hospitals with > 10 employees | POSH IC + annual return |
DPDP Says You Need a DPO. We Become One.
Hospitals processing sensitive patient data at scale fall under DPDP Section 10 SDF criteria. A DPO is mandatory.
dcomply vDPO bolts onto your tenant from ₹2,499/mo with AI Q&A, monthly DPO PDF, auto-DPIA triggers, and DSR auto-drafts. Standard tier adds a human checkpoint each month. Premium gives you a dedicated retained advocate-DPO who liaises with the DPB.
See vDPO tiersDedicated advocate-DPO on retainer.
- Named advocate as your DPO
- Weekly compliance review call
- Breach response in 4 hours
- DPB liaison (regulator-facing)
- Quarterly board report
- Annual staff training session
Patient data lives in many places. We find it all.
Hospital EMR, billing in Excel, WhatsApp triage. Connect them, the discovery engine maps the PII automatically.
Questions hospital compliance officers actually ask.
Everything you need to know about running DPDP, NABH, BMW, PCPNDT, POSH and Labour compliance in a hospital.
"Patients actually use it."
"We used to prepare for NABH with a two-week fire drill. Now the file is ready any day of the year. The DPDP portal was the surprise. Patients actually use it."
Start Free. Scale When You're Ready.
Pay-per-module from ₹1,499. Corporate Compliance pack from ₹11,999. vDPO from ₹2,499.