Patient Newsletter and Appointment Reminders — DPDP-Compliant Email

Two legal categories of patient email

Indian patient communication splits along a clean legal line. Clinical communication — appointment reminders, lab-result delivery notifications, prescription pickup, post-procedure care instructions — is treated as a legitimate-purpose service email under DPDP Section 7. Marketing communication — wellness tips, seasonal screening campaigns, doctor-introduction newsletters — requires explicit, granular, separately-revocable consent under Section 6. A clinic that emails both from the same address using the same consent record is treating a Section 6 obligation as if it were a Section 7 obligation. That is exactly the misclassification DPDP enforcement targets.

DPDP consent shape for marketing email

A compliant marketing-email consent record carries six fields, none of them optional: the patient identifier, the exact channel (email vs SMS vs WhatsApp), the purpose category (wellness newsletter is different from screening campaign), the timestamp of capture, the verbatim wording shown to the patient at the moment of consent, and the captured consent state (granted or refused). Re-consent prompts every twelve months for active patients. Withdrawal must be one-click — the link at the bottom of every marketing email, not a portal-login workflow. Withdrawal must take effect within seven days under DPDP guidance.

• Patient identifier — never the email address alone; the internal patient ID
• Channel — granular: email, SMS, WhatsApp, voice all separate
• Purpose category — wellness, screening, doctor-intro, seasonal each separate
• Timestamp — captured with the second-resolution clock, never inferred later
• Wording shown — the actual consent text at that moment, not a template ID
• State — granted, refused, withdrawn, withdrawn-by-staff with reason

Appointment reminder cadence by speciality

Appointment-reminder email cadence should follow the speciality, not a blanket policy. Chronic-care patients respond to longer lead times — a 14-day, 7-day, and 2-day cadence works. Acute patients need a single same-day reminder; the longer cadence reads as nagging. Elective procedures benefit from a 21-day, 7-day, 3-day, and same-morning sequence to manage the larger psychological commitment. Paediatric follow-ups belong with the parent's reminder address, never the child's. A no-show pattern that drops from 18% to 9% within one quarter is a realistic target with this speciality-aware setup.

Wellness newsletter — the 4-section template

The wellness newsletter format that has worked across the seven clinics in our 2024 audit: open with a single health topic relevant to the patient's recorded conditions (diabetes-management this month for diabetic patients only, never to everyone), then a doctor-introduction or returning-doctor schedule, then a screening or seasonal-vaccination reminder if applicable, and close with the appointment-booking link. Newsletters that try to be relevant to every patient simultaneously are relevant to none — segmentation on recorded condition is the difference between 14% and 38% open rates.

Why PHI never goes in the email body

Lab results, diagnosis notes, and prescription details are Protected Health Information under DPDP guidance for the healthcare sector. Email bodies are not encrypted at rest on the patient's email provider. A safe pattern: the email body says 'your lab report is ready — log in to view'; the actual PHI lives behind authentication. Clinics that email PHI directly in the body — even in PDF attachments — are creating a breach surface every time. The cost of fixing this is one extra click for the patient and one fewer regulatory headache for the clinic.

If your clinic cannot articulate which consent the patient gave for this specific email, do not send the email.

DPDP readiness review, healthcare cohort, 2024