Healthcare laws in India for hospital administrators

In short

Healthcare law in India is the web of central and state statutes, rules and professional regulations that decide how a hospital may be set up, who may treat, how drugs, blood, radiation and waste are handled, what rights a patient has, and what liability follows when care goes wrong. A hospital administrator is the person legally answerable for registrations, licences, statutory registers, committees and reporting - a missing licence or an unreported notifiable disease is an administrative failure, not a clinical one. The subject is examined in BHA/BBA Hospital Management papers on hospital law and medico-legal aspects, and is tested directly in interviews for Quality/NABH coordinator, hospital operations and medical superintendent roles at Apollo, Fortis, Max, Manipal, Narayana Health, AIIMS and state health departments. It also drives the legal-and-statutory chapters of NABH assessment, insurance empanelment and hospital due diligence.

Explained

Establishment, registration and the licence file

• Clinical Establishments (Registration and Regulation) Act, 2010 - central Act for registration of all clinical establishments (allopathy and recognised AYUSH systems, from a single-doctor clinic to a multi-speciality hospital); adopted by some states/UTs, while others (Maharashtra, Karnataka, West Bengal, Tamil Nadu, Delhi, etc.) run their own nursing-home/clinical-establishment laws. Verify which law applies in your state - this varies.
• Scheme of the Act: provisional registration → minimum standards notified → permanent registration; National Council and State Councils; a National Register; penalties for running unregistered.
• Local body/municipal trade licence, building plan and occupancy/completion certificate, and change-of-use sanction under the state Town Planning/Municipal Act.
• Fire NOC from the State Fire Services under the state Fire Prevention and Life Safety Act, based on the National Building Code of India 2016 (hospitals are an institutional occupancy); periodic renewal and fire drills.
• Consent to Establish and Consent to Operate from the State Pollution Control Board under the Water Act, 1974 and the Air Act, 1981, plus authorisation under the Biomedical Waste Rules.
• Other registrations: lifts/escalators under the state Lifts Act, boiler/pressure-vessel under the Boilers Act for laundry/CSSD steam, diesel generator and electrical safety approvals under the Electricity Act, 2003 and CEA Regulations, Legal Metrology stamping of weighing equipment, PNG/LPG and medical gas approvals (PESO for cylinders), FSSAI licence for the hospital kitchen and canteen.
• Labour law - the four Labour Codes (Code on Wages, Industrial Relations Code, Code on Social Security, OSH & Working Conditions Code) are in force from 21 November 2025 and have replaced the earlier Factories, Minimum Wages, Industrial Disputes and BOCW Acts; hospitals also register under the state Shops and Commercial Establishments Act and comply with ESI, EPF, maternity benefit, equal remuneration and the Sexual Harassment of Women at Workplace (POSH) Act, 2013 (Internal Committee is mandatory).

Practice, drugs, radiation and blood

• National Medical Commission Act, 2019 - replaced the Indian Medical Council Act, 1956; NMC with its four autonomous boards (UG, PG, Medical Assessment and Rating, Ethics and Medical Registration), National Medical Register, NEXT/licentiate examination and fee regulation of a share of private seats. Professional conduct is governed by the NMC's ethics regulations (the 2002 MCI Code of Ethics continues to be the examined baseline; a 2023 Registered Medical Practitioner regulation was notified and then kept in abeyance - treat the current text as subject to change).
• Parallel councils: National Commission for Allied and Healthcare Professions Act, 2021, National Commission for Indian System of Medicine Act, 2020, National Dental Commission Act, 2023, Pharmacy Act, 1948 (a registered pharmacist must dispense), Indian Nursing Council Act, 1947 and state nursing councils.
• Administrator's duty: verify and file state medical council registration of every doctor at joining and at renewal - credentialing and privileging is both an NABH and a legal requirement; allowing an unregistered person to treat invites prosecution for quackery.
• Drugs and Cosmetics Act, 1940 and Rules 1945 - hospital pharmacy needs a retail sale licence (Form 20/21) and, if it stocks restricted drugs, the related schedules; Schedule H, H1 and X drugs need a prescription and registers (Schedule H1 register retained 3 years), Schedule X needs double-lock storage. Blood centres are licensed under Part XIIB of the Rules.
• Narcotic Drugs and Psychotropic Substances Act, 1985 - morphine and other opioids for palliative care need a Recognised Medical Institution status and state licence; strict stock registers and reconciliation; the 2014 amendment created "essential narcotic drugs" to ease medical access.
• Atomic Energy Act, 1962 with the Radiation Protection Rules / Safety Code AERB/RF-MED - every X-ray, CT, cath lab, linac, brachytherapy or nuclear-medicine installation needs AERB licence through the eLORA portal, a qualified Radiological Safety Officer (for higher categories), TLD badges, layout approval, decommissioning approval, and QA records.
• Pharmacovigilance and clinical research - New Drugs and Clinical Trials Rules, 2019: registered Ethics Committee with CDSCO, ICMR National Ethical Guidelines 2017, compensation for trial-related injury, SAE reporting timelines.

Patient rights, consent and confidentiality

• Consent - must be free, informed and given by a competent person. Implied consent for examination; express written consent for any procedure under anaesthesia, surgery, invasive tests, blood transfusion and HIV testing. For major/anaesthetic procedures the law treats 18 years as the age of consent; a parent/guardian consents for minors. The Supreme Court in *Samira Kohli v. Prabha Manchanda* (2008) held that consent is for the specific procedure explained - a surgeon cannot extend surgery beyond it except to save life.
• Information to be disclosed - nature of the illness, the proposed procedure, material risks, alternatives and consequences of refusal; "real consent" on the *Bolam*-based Indian standard, not full US-style disclosure.
• Confidentiality - a professional duty under the ethics regulations and the Digital Personal Data Protection Act, 2023 (health data is personal data; notice, purpose limitation, security safeguards, breach notification; Rules were notified in 2025 with phased implementation - timelines are still rolling out). Permitted disclosure: court order, notifiable disease reporting, protection of an identifiable third party (*Mr X v. Hospital Z*, 1998).
• Medical records - the patient is entitled to a copy of the records, conventionally within 72 hours of a written request under the ethics regulations; retention is commonly 3 years from the last entry for in-patient records, longer where litigation, MTP (5 years for the MTP admission register under the MTP Regulations), PCPNDT (2 years, or till case disposal) or state rules require it, and a child's records are usually kept till the child attains majority plus the limitation period. Records are the primary evidence in negligence claims.
• Mental Healthcare Act, 2017 - decriminalised attempted suicide, gave every person a right to mental healthcare, created advance directives and nominated representatives, Mental Health Review Boards, registration of mental health establishments and regulated admission (independent, supported, and admission of minors) and restraint/ECT (no ECT without muscle relaxants and anaesthesia; banned for minors except with Board permission).
• Rights of Persons with Disabilities Act, 2016 - accessible hospital premises, non-discrimination; HIV and AIDS (Prevention and Control) Act, 2017 - no discrimination in treatment, informed consent for testing, confidentiality, and a duty to maintain universal precautions.
• Charter of Patients' Rights (NHRC/Union Health Ministry, 2018-19, adopted by several states) - 17 rights including emergency care, estimate of charges, second opinion, and choice of pharmacy/diagnostics; advisory unless adopted in state rules.
• Emergency care duty - *Parmanand Katara v. Union of India* (1989): every doctor must give immediate emergency care regardless of medico-legal formalities; Good Samaritan protection now in the Motor Vehicles Act, 1988 (Section 134A, inserted by the 2019 amendment) and the "golden hour" cashless treatment scheme for road accident victims.

Specific-purpose Acts an administrator must operationalise

• Pre-conception and Pre-natal Diagnostic Techniques (Prohibition of Sex Selection) Act, 1994 - registration of every ultrasound/genetic facility, Form F for each scan, mandatory "sex determination not done here" notice, no disclosure of foetal sex, records for 2 years, Appropriate Authority inspections; offences are cognisable, non-bailable, non-compoundable; machine sealing and suspension of registration are routine penalties.
• Medical Termination of Pregnancy Act, 1971 as amended in 2021 - up to 20 weeks on one RMP's opinion; 20-24 weeks for specified categories (survivors of rape, incest, minors, disability, changed marital status, etc.) on two RMPs' opinions; beyond 24 weeks only for substantial foetal abnormality on a State Medical Board's opinion; approved place requirement, confidentiality of the woman's identity, and Form III/MTP admission register retained 5 years. Consent of the woman alone (guardian for a minor or a mentally ill woman).
• Transplantation of Human Organs and Tissues Act, 1994 (amended 2011) - near-relative versus unrelated (needs Authorisation Committee approval), brain-stem death certification by a four-member board (including a neurologist/neurosurgeon and the treating doctor, with two tests at an interval), registration of transplant and retrieval centres, mandatory transplant coordinator, no commercial dealing; NOTTO/ROTTO/SOTTO network.
• Assisted Reproductive Technology (Regulation) Act, 2021 and Surrogacy (Regulation) Act, 2021 - registration of ART clinics and banks on the National Registry, altruistic-only surrogacy, National and State Boards.
• Biomedical Waste Management Rules, 2016 (amended 2018, 2019) - four colour-coded categories: yellow (anatomical, soiled, chemical, expired drugs - incineration/deep burial), red (contaminated recyclable plastics - autoclave/microwave then recycle through registered recyclers), white (translucent puncture-proof - sharps, needles), blue (broken/discarded glass and metal implants); barcoding, no chemical pre-treatment of blood bags on site, pre-treatment of lab/microbiology waste, annual report to SPCB by 30 June for the previous year, authorisation renewal, needle-tip destroyers, training at induction and once every year thereafter, and immunisation of handlers; "no untreated waste beyond 48 hours".
• Allied environmental rules: Solid Waste Management Rules 2016, E-Waste (Management) Rules 2022, Mercury/Hazardous and Other Wastes Rules 2016, and the Plastic Waste Management Rules.
• Notifiable diseases and public health - reporting under state public health Acts and IDSP/IHIP; the Epidemic Diseases Act, 1897 (amended 2020) which protects healthcare personnel and clinical establishments from violence (3 months-5 years imprisonment, compensation, offences cognisable and non-bailable); the Disaster Management Act, 2005 used for COVID-19 directions; most states also have a Medicare Service Persons and Institutions (Prevention of Violence) Act.
• Others to know by name: Cigarettes and Other Tobacco Products Act (COTPA) 2003 - smoke-free hospital, signage; Food Safety and Standards Act 2006; Maternity Benefit Act provisions now under the Code on Social Security; Juvenile Justice Act 2015 and POCSO Act 2012 - mandatory reporting of child sexual abuse within 24 hours, free first-aid/medical care, no two-finger test; Protection of Women from Domestic Violence Act 2005 - hospital as a service provider; Registration of Births and Deaths Act 1969 (amended 2023) - event reporting within 21 days; Anatomy Act (state) for body donation; Insurance Regulatory and Development Authority (IRDAI) health insurance regulations for cashless claims and empanelment; Ayushman Bharat PM-JAY scheme conditions; Bharatiya Nyaya Sanhita, 2023, Bharatiya Nagarik Suraksha Sanhita, 2023 and Bharatiya Sakshya Adhiniyam, 2023 (in force 1 July 2024) replaced the IPC, CrPC and Evidence Act - medico-legal cases, wound certificates, dying declarations and expert evidence now cite these.

Liability, negligence and consumer law

• Medical negligence - civil liability in tort/contract and criminal liability for rash or negligent act. Four elements: (1) a duty of care, (2) breach of the standard of a reasonably competent practitioner of that class, (3) causation - the breach caused the harm, (4) damage.
• Standard of care - the *Bolam* test, approved in India in *Jacob Mathew v. State of Punjab* (2005): a doctor is not negligent if acting in accordance with a practice accepted as proper by a responsible body of professionals; mere error of judgement or an unsuccessful outcome is not negligence.
• Criminal negligence (Section 106 BNS, the successor to Section 304A IPC) needs gross negligence or recklessness; *Jacob Mathew* laid down that a private complaint against a doctor should ordinarily be supported by a credible independent medical opinion before prosecution, and that the arrest should be avoided unless necessary.
• Res ipsa loquitur - "the thing speaks for itself": the burden shifts where negligence is obvious (instrument left in the abdomen, wrong-site surgery, wrong blood transfused).
• Vicarious liability - the hospital is liable for the acts of its employees (resident doctors, nurses, technicians) under *respondeat superior*; liability for a visiting consultant depends on whether the hospital held the consultant out as its own and who controlled the work. The hospital is also directly liable for systems failures: no oxygen, defective equipment, untrained staff, no blood, no consent process.
• Consumer Protection Act, 2019 - medical services are "service" and a patient is a "consumer" (*Indian Medical Association v. V.P. Shantha*, 1995; free-of-charge service to all is excluded). Three-tier redressal: District Commission up to ₹50 lakh, State Commission above ₹50 lakh to ₹2 crore, National Commission above ₹2 crore (pecuniary limits were revised in 2021 - confirm the current notification); complaint within 2 years of the cause of action; e-filing, mediation and product liability added by the 2019 Act. In 2024 the Supreme Court held that advocates' services are not covered under the Act but did not disturb *Shantha* for doctors.
• Other routes for a patient: state medical council ethics complaint (warning to removal from the register), writ petition for a public hospital, criminal complaint, and civil suit for damages.
• Risk management for the administrator - documented consent, legible and contemporaneous records, incident reporting and root-cause analysis, credentialing, equipment maintenance logs, grievance redressal, display of charges, and professional indemnity insurance for the institution and its doctors.

Key points

• Clinical Establishments Act, 2010 - central registration law; adopted only by some states, others use their own nursing-home Acts.
• CEA process - provisional registration first, permanent registration after minimum standards are notified and verified.
• Licence bundle - CEA/state registration, fire NOC, PCB consent, BMW authorisation, AERB licence, drug licence, FSSAI, lifts, boiler, Legal Metrology, PESO.
• NMC Act, 2019 - replaced the MCI; four boards, National Medical Register, NEXT; verify every doctor's state council registration.
• Consent - free, informed, specific and by a competent adult; *Samira Kohli* bars extending surgery beyond the consent given.
• Confidentiality - ethics duty plus DPDP Act, 2023; disclosure only by law, court order or to protect an identifiable third party.
• BMW Rules, 2016 - yellow, red, white, blue segregation; annual report to SPCB by 30 June; treatment within 48 hours.
• PCPNDT Act - Form F per scan, no sex disclosure, registration of every ultrasound machine, non-bailable offences.
• MTP (Amendment) Act, 2021 - 20 weeks/1 RMP, 20-24 weeks/2 RMPs for specified categories, beyond 24 weeks only via State Medical Board.
• THOTA 1994/2011 - brain-stem death by a four-member board, Authorisation Committee for unrelated donors, mandatory transplant coordinator, no organ trade.
• Mental Healthcare Act, 2017 - advance directive, nominated representative, Review Boards, regulated restraint and ECT.
• Epidemic Diseases Act (2020 amendment) - violence against healthcare personnel is a cognisable, non-bailable offence.
• Negligence - duty, breach, causation, damage; *Bolam* standard adopted in *Jacob Mathew*; criminal liability needs gross negligence.
• Vicarious liability - hospital answers for employees' acts and for systems failures; consultant liability turns on control and holding out.
• Consumer Protection Act, 2019 - *V.P. Shantha* made medical service a "service"; file within 2 years; three-tier pecuniary jurisdiction.
• POCSO/JJ Act - mandatory reporting of child sexual abuse within 24 hours; free medical care; two-finger test prohibited.
• BNS/BNSS/BSA 2023 - replaced IPC/CrPC/Evidence Act from 1 July 2024; medico-legal documentation now cites these.
• Records - generally 3 years for in-patient records, 5 years for the MTP admission register, longer under PCPNDT, state rules or pending litigation.

Formulas and examples

Example 1 - Which forum and is it in time? A patient paid ₹7,20,000 for a knee replacement in June 2025; a retained swab was found in September 2025 and compensation of ₹60 lakh is claimed.

• Jurisdiction is decided by the consideration paid (₹7.2 lakh), not by the claim (₹60 lakh) → ₹7.2 lakh ≤ ₹50 lakh → District Commission.
• Cause of action arose September 2025; limitation 2 years → file by September 2027.
• A retained swab is a classic res ipsa loquitur case - the burden effectively shifts to the hospital, and the hospital is vicariously liable for the surgical team it employs.

Example 2 - Biomedical waste segregation and cost. A 300-bed hospital at 78% occupancy generates 0.55 kg of biomedical waste per occupied bed per day.

• Occupied beds = 300 × 0.78 = 234.
• Daily BMW = 234 × 0.55 = 128.7 kg/day; monthly (30 days) = 3,861 kg.
• At a Common Biomedical Waste Treatment Facility charge of ₹13 per kg: 3,861 × 13 = ₹50,193 per month (₹6,02,316 a year at this rate).
• If segregation discipline is poor and 10% of the 128.7 kg that should be red/white/blue ends up in yellow, the extra incineration-rate cost (say ₹22/kg instead of ₹13/kg) on 12.87 kg/day = 12.87 × 9 × 30 = ₹3,475 a month of avoidable cost, besides the non-compliance risk.
• Statutory point: the annual report for calendar 2026 is due to the SPCB by 30 June 2027.

Example 3 - MTP decision. A 16-year-old survivor of sexual assault presents at 22 weeks of gestation.

• Gestation is 20-24 weeks and she falls in two specified categories (minor, survivor of rape) → permitted on the opinion of two RMPs at an approved place.
• Consent: she is a minor, so the guardian's written consent is required along with her assent.
• Parallel duty: assault on a minor triggers mandatory POCSO reporting within 24 hours, free medical care, and recording of her identity only to the officer prescribed - the MTP Act bars disclosing her identity to anyone else.
• Records: MTP register/Form III retained 5 years; MTP forms are sent to the government as prescribed.

Example 4 - Deceased-donor transplant checklist. A 29-year-old on a ventilator after a road accident is a potential donor.

• Brain-stem death must be certified by a board of four registered medical practitioners - the RMP in charge of the hospital, an authorised specialist, a neurologist/neurosurgeon from the panel, and the treating doctor - with two sets of tests at a prescribed interval.
• Consent from the person lawfully in possession of the body (near relative) in the prescribed form; no payment of any kind (commercial dealing is punishable).
• The hospital must be a registered retrieval/transplant centre with a transplant coordinator, and allocation runs through SOTTO/ROTTO/NOTTO.
• Road-accident case → also a medico-legal case: police intimation, inquest, and the post-mortem/no-objection sequence under the BNSS.

Where it is used

• Corporate hospital chains (Apollo, Fortis, Max, Manipal, Narayana, Medanta) - legal and statutory compliance calendars, licence renewal trackers, medico-legal cells, and the NABH "Responsibilities of Management" and legal-compliance standards.
• Quality and accreditation roles - NABH/NABL entry-level and full accreditation require evidence of every applicable statutory licence; insurance and PM-JAY empanelment audits check the same file.
• Government health administration - district hospitals, CMO/Appropriate Authority offices under PCPNDT and CEA, state health departments, Ayushman Bharat implementation units, National Health Authority.
• Medico-legal and insurance work - TPAs, health insurers, hospital legal cells, claim repudiation and fraud investigation, expert panels for consumer cases.
• Specific operational units - transplant coordinators under THOTA, blood centre in-charge under Part XIIB, radiation safety officer under AERB, biomedical waste officer, POSH Internal Committee, Ethics Committee secretariat for clinical trials.
• Digital health and data - ABDM/ABHA implementation, Health Data Management Policy and DPDP Act, 2023 obligations for hospital IT and HIMS teams.

Interview questions

• Q: Which single law governs registration of hospitals across India? A: The Clinical Establishments (Registration and Regulation) Act, 2010 is the central law, but it applies only in states and UTs that have adopted it; other states regulate under their own nursing-home or clinical-establishment Acts, so the applicable law must be checked state by state.
• Q: List the licences you would check first in a new 200-bed hospital. A: Clinical establishment registration, fire NOC, Pollution Control Board consent to operate with biomedical waste authorisation, drug licence for the pharmacy, AERB licences for imaging, PCPNDT registration for ultrasound, FSSAI for the kitchen, lift and DG approvals, and labour-law registrations.
• Q: What are the four colour codes under the Biomedical Waste Rules, 2016? A: Yellow for anatomical, soiled, chemical and expired-drug waste; red for contaminated recyclable plastics; white translucent puncture-proof for sharps; blue for broken glass and metallic implants.
• Q: What makes an act medical negligence in law? A: A duty of care owed to the patient, a breach of the standard of a reasonably competent practitioner of that class, a causal link between the breach and the injury, and resulting damage - all four must be proved.
• Q: Is a hospital liable for a visiting consultant's error? A: Not automatically; liability depends on whether the hospital held the consultant out as its own and controlled the work, but the hospital is always liable for its employees and for its own systems failures such as defective equipment or untrained staff.
• Q: A patient demands a copy of her case sheet. What do you do? A: Supply it - the ethics regulations entitle the patient to records, conventionally within 72 hours of a written request; release to anyone else needs the patient's authorisation, a court order or a statutory requirement.
• Q: What is Form F and why does it matter? A: The PCPNDT record completed for every pre-natal diagnostic procedure; an incomplete or missing Form F is itself an offence and the commonest ground for sealing an ultrasound machine and suspending registration.
• Q: Who certifies brain-stem death for organ donation? A: A board of four registered medical practitioners including the medical administrator in charge, an authorised specialist, a neurologist or neurosurgeon from the approved panel and the treating doctor, who confirm the findings with two sets of tests separated by the prescribed interval.
• Q: Can a 17-year-old consent to her own surgery? A: No - for a procedure under anaesthesia the consent of a parent or guardian is needed as she is a minor, though her assent should be taken and her confidentiality respected.
• Q: Why does the value of the hospital bill decide the consumer forum? A: Pecuniary jurisdiction under the Consumer Protection Act, 2019 is based on the consideration paid for the service, not on the compensation claimed - District up to ₹50 lakh, State above that up to ₹2 crore, National beyond.
• Q: What legal protection exists if staff are assaulted by a patient's relatives? A: The Epidemic Diseases (Amendment) Act, 2020 makes violence against healthcare personnel a cognisable, non-bailable offence with imprisonment and compensation, and most states have their own Medicare Service Persons and Institutions (Prevention of Violence) Act.
• Q: How does the DPDP Act, 2023 change hospital practice? A: Health data is personal data, so the hospital as data fiduciary must give notice, limit use to the stated purpose, keep reasonable security safeguards, report breaches and honour access and erasure requests - the Rules were notified in 2025 with phased timelines.

Common mistakes

• Treating the Clinical Establishments Act, 2010 as applicable all over India; many large states have not adopted it and follow their own law.
• Confusing a consent form with consent - an unexplained signature on a printed form is no defence; the disclosure and the person explaining must be documented.
• Saying a bad outcome proves negligence; the *Bolam*/*Jacob Mathew* standard protects an accepted practice and a mere error of judgement.
• Mixing up PCPNDT (prohibits sex selection) with the MTP Act (permits termination) - they are different statutes with different registers and retention periods.
• Quoting IPC Sections 304A, 312 or 376 after 1 July 2024; the BNS, BNSS and BSA now apply, and labour answers citing the Factories or Minimum Wages Act miss the four Labour Codes in force from 21 November 2025.
• Choosing the consumer forum from the compensation claimed instead of the consideration paid, and forgetting the two-year limitation.
• Memorising colour codes but not the dated duties - 48-hour storage limit, 30 June annual report, annual refresher training, handler immunisation.

Related topics

NABH and JCI accreditation · Patient safety and healthcare quality indicators · Medical records management and HMIS · Hospital risk management and insurance · Health insurance, TPAs and Ayushman Bharat · Hospital planning, licensing and project management