If the hospital leaks personal information, it can report it to the government department (health bureau, health department) in charge of the hospital. Involving cadres in party member, you can report to the county Commission for Discipline Inspection (Supervision Bureau) where the hospital is located, and you can report to the county public security organ where the hospital is located if you are suspected of committing a crime. No unit or individual may, without authorization, make statistics and publish population health information that affects national security, social order and citizens' rights and interests. In the process of collection, management and utilization of population health information, all responsible subjects should properly protect the safety and privacy of population health information, and it is strictly forbidden to disclose it to any irrelevant individuals or organizations. The collection unit is responsible for ensuring the information security in the process of data collection and storage, and the utilization unit and individual are responsible for ensuring the information security in the process of data utilization. In violation of the provisions, the competent department shall give or suggest administrative sanctions in accordance with the relevant provisions. If the circumstances are serious and violate national laws and regulations, the corresponding legal responsibilities shall be investigated in accordance with relevant national laws and regulations. If the population health information service and management object thinks that its legitimate rights and interests have been infringed, it may complain to the competent department or bring a reconsideration or lawsuit according to law.
Legal basis:
People's Republic of China (PRC) Civil Code
Article 1032 Natural persons have the right to privacy. No organization or individual may infringe upon the privacy rights of others by spying, harassing, exposing or making public.
Privacy is the private space, private activities and private information that natural people live in peace and don't want to be known by others.
Article 103 Unless otherwise provided by law or expressly agreed by the obligee, no organization or individual may commit the following acts:
(a) by telephone, SMS, instant messaging tools, e-mail, leaflets, etc. Disturb the private life of others;
(2) Entering, taking photos or peeping into other people's private spaces such as houses and hotel rooms;
(3) Shooting, peeping, eavesdropping or revealing other people's private activities;
(4) Shooting or peeping at the private parts of others' bodies;
(5) handling other people's private information;
(6) Infringe upon the privacy of others in other ways.