User Documentation
Breadcrumbs

Personal Data Processing (PII)

HID Integration Service Dataflow diagram

pii-v4.drawio.svg



Data persistence

HIS PACS message queue

Database name

HIS PACS message queue


PII data scope

  • Full name

  • Photo

  • Email address

  • Phone number

  • Unique credential

  • Physical address

  • Date of birth

  • Gender

PII persistent storage

NO

PII processing

YES

Purpose

PACS management

PII data is deleted as soon as it is passed to the PACS system or, latest, in 24 hours by a dedicated watchdog process, whichever comes first.

HID Authentication Service

External system (ISO certified, HID-owned): This system is managed by HID and external to the HIS platform.

Database name

HIS Authentication Service


PII data scope

  • API user:

    • Unique credential

    • Encrypted password

  • Tenant Administrator:

    • Unique credential

    • Encrypted password

    • Full name

    • Physical address

    • Email address

    • Phone number

    • Billing address

PII persistent storage

YES

PII processing

YES

Purpose

  • Authorization

  • Billing

  • MFA

  • Only platform API users are persisted, not all PACS identities.

  • Username + password combo is managed via HID Authentication Service.

  • The platform stores only IDs and ACLs.

  • Communication is encrypted between HIS agent and HID.

  • HIS API does not access Tenant Admin PII used only for support/billing.


Data retention

Retention period

  • Retention period for HIS message queue for HIS Agent software is at most 24 hours.

  • PII data inside the PACS system is managed by the customer/partner.

Retention period configuration

  • Since version 1.1, users can configure the retention period on the tenant level.

  • The platform does not accept a longer retention interval than 24 hours.

  • Please see Advanced Tenant Configuration for more details.

PII disposal and access

Partner billing-related data is persisted as part of the HID Authentication Service. For its processing, please refer to the HID Global Privacy page. Disposal and access can be requested by sending an inquiry to privacy@hidglobal.com.

Changes to PII processing: For updates to PII processing, please refer to the changelog.

PII disposal and access