# FAQs for digital health teams URL: https://tymirahealth.com/resources/faqs/for/digital-health-teams > 50 questions from digital health teams, each with a short answer and a full answer page. ### [Can PHQ-9 and similar screening tools be delivered digitally and scored automatically?](https://tymirahealth.com/resources/faqs/can-phq-9-and-similar-screening-tools-be-delivered-digitally-and-scored-automatically) Yes, if you keep the validated wording, response options and item order unchanged, use translations that have been validated, and check the instrument's licence terms. ### [Can a teenager use our digital mental health service without parental consent for data processing?](https://tymirahealth.com/resources/faqs/can-a-teenager-use-our-digital-mental-health-service-without-parental-consent-for-data-processin) Generally, the Data Protection Act requires a parent's or guardian's consent to process a child's personal data, plus processing that advances the child's best interests and age-verification... ### [Can an AI chatbot be used to detect suicide risk or triage mental health crises?](https://tymirahealth.com/resources/faqs/can-an-ai-chatbot-be-used-to-detect-suicide-risk-or-triage-mental-health-crises) Only as a supporting tool, never as the sole safety net. Language models can miss risk, misread context or generate harmful replies, and WHO warns that generative AI tools not designed or tested for... ### [Can generative AI be offered to clients for emotional support between sessions?](https://tymirahealth.com/resources/faqs/can-generative-ai-be-offered-to-clients-for-emotional-support-between-sessions) Proceed with great caution. WHO experts in 2026 called generative AI use a public mental health concern, noting that many tools used for emotional support were neither designed nor tested for it... ### [Can insurers or the Social Health Authority receive mental health diagnoses through digital claims?](https://tymirahealth.com/resources/faqs/can-insurers-or-the-social-health-authority-receive-mental-health-diagnoses-through-digital-clai) Claims usually need a diagnosis code; Kenya's eClaims FHIR guide, built with the Social Health Authority, uses ICD-11 for diagnoses. ### [Do we need a data sharing agreement with NGOs, insurers or employer programmes?](https://tymirahealth.com/resources/faqs/do-we-need-a-data-sharing-agreement-with-ngos-insurers-or-employer-programmes) Usually, yes. When mental health data moves between organisations, document the purpose, legal basis, data fields, security, retention, onward sharing and breach duties. ### [Does a mental health system need an offline mode, and how do we keep it secure?](https://tymirahealth.com/resources/faqs/does-a-mental-health-system-need-an-offline-mode-and-how-do-we-keep-it-secure) In areas with unreliable connectivity or power, offline capability keeps appointments and notes going. ### [Does our digital mental health system need certification from Kenya's Digital Health Agency?](https://tymirahealth.com/resources/faqs/does-our-digital-mental-health-system-need-certification-from-kenya-s-digital-health-agency) Very likely. The Digital Health (Health Information Management Procedures) Regulations 2025 require the Agency to certify digital health solutions, including e-health and telemedicine platforms, and... ### [Does using Tymira360 make a clinic automatically compliant?](https://tymirahealth.com/resources/faqs/does-tymira-health-make-a-clinic-automatically-compliant) No. Tymira360 can support good practice with tools such as role-based access, consent records and audit trails, but compliance also depends on clinic policies, staff behaviour, supplier contracts... ### [How can SMS and USSD be used safely for mental health with low-connectivity users?](https://tymirahealth.com/resources/faqs/how-can-sms-and-ussd-be-used-safely-for-mental-health-with-low-connectivity-users) SMS and USSD reach basic phones without data, and WHO recommends targeted client communication for some health uses. ### [How can we reduce bias in AI tools used for mental health in African settings?](https://tymirahealth.com/resources/faqs/how-can-we-reduce-bias-in-ai-tools-used-for-mental-health-in-african-settings) Models trained mostly on data from other regions and languages may perform worse for African users, misread local idioms of distress or under-detect risk. ### [How do mental health services report to KHIS (DHIS2)?](https://tymirahealth.com/resources/faqs/how-do-mental-health-services-report-to-khis-dhis2) KHIS, Kenya's DHIS2-based aggregate reporting system, receives summary indicators from facilities, not individual records. ### [How do we connect a mental health system to Kenya's national Health Information Exchange?](https://tymirahealth.com/resources/faqs/how-do-we-connect-a-mental-health-system-to-kenya-s-national-health-information-exchange) Under the Digital Health (Data Exchange Component) Regulations 2025, certified solutions are onboarded onto the Agency's enterprise service bus and use shared resources: the client registry... ### [How do you integrate a mental health platform with a hospital EMR?](https://tymirahealth.com/resources/faqs/how-do-you-integrate-a-mental-health-platform-with-a-hospital-emr) Integrating a mental health platform with a hospital EMR starts with agreeing what data must flow, such as referrals, appointments, demographics and discharge summaries, then choosing a method such... ### [How does Kenya's Digital Health Act affect mental health platforms?](https://tymirahealth.com/resources/faqs/how-does-kenya-s-digital-health-act-affect-mental-health-platforms) Kenya's Digital Health Act 2023 creates a national framework for digital health services, health information management and exchange. ### [How often should healthcare content and workflows be reviewed?](https://tymirahealth.com/resources/faqs/how-often-should-healthcare-content-and-workflows-be-reviewed) High-risk clinical, privacy, billing and legal content and workflows should be reviewed on a regular, recorded schedule with a named owner. ### [How should a digital mental health system record consent and its withdrawal?](https://tymirahealth.com/resources/faqs/how-should-a-digital-mental-health-system-record-consent-and-its-withdrawal) Store consent as structured data, not just a signed PDF: what was agreed, for which purpose, by whom, when, through which channel and which notice version. ### [How should a digital mental health tool respond when a user discloses thoughts of self-harm?](https://tymirahealth.com/resources/faqs/how-should-a-digital-mental-health-tool-respond-when-a-user-discloses-thoughts-of-self-harm) Agree the pathway with clinicians before launch. The tool should immediately show crisis contacts, such as emergency services and a national helpline, tell the user honestly when a human will... ### [How should a mental health app protect users on shared or family phones?](https://tymirahealth.com/resources/faqs/how-should-a-mental-health-app-protect-users-on-shared-or-family-phones) Many users share handsets, and exposure can carry stigma or safety risks. ### [How should a mental health platform handle requests to access, correct or delete data?](https://tymirahealth.com/resources/faqs/how-should-a-mental-health-platform-handle-requests-to-access-correct-or-delete-data) The Data Protection Act gives people rights to access, correct and, in some cases, erase their personal data. ### [How should backups and disaster recovery work for mental health records?](https://tymirahealth.com/resources/faqs/how-should-backups-and-disaster-recovery-work-for-mental-health-records) Kenya's Digital Health Regulations require regular, encrypted backups stored securely, and certification applicants must submit a backup and recovery policy. ### [How should break-glass (emergency) access to restricted mental health records work?](https://tymirahealth.com/resources/faqs/how-should-break-glass-emergency-access-to-restricted-mental-health-records-work) Break-glass lets an authorised clinician override normal access controls in a genuine emergency. ### [How should digital health teams design mental health tools for low bandwidth in Africa?](https://tymirahealth.com/resources/faqs/how-should-digital-health-teams-design-mental-health-tools-for-low-bandwidth-in-africa) Digital health teams designing mental health tools for Africa should build mobile-first, lightweight interfaces, support offline use and graceful reconnection, offer SMS, USSD or WhatsApp fallbacks... ### [How should digital mental health tools support Kiswahili and other Kenyan languages?](https://tymirahealth.com/resources/faqs/how-should-digital-mental-health-tools-support-kiswahili-and-other-kenyan-languages) Translate and culturally adapt, do not just machine-translate. ### [How should mental health software connect with other health systems?](https://tymirahealth.com/resources/faqs/how-should-mental-health-software-connect-with-other-health-systems) Mental health software should connect selectively. Share referral status, essential clinical summaries and aggregate reports, not full therapy notes. ### [How should our system match clients using the national client registry?](https://tymirahealth.com/resources/faqs/how-should-our-system-match-clients-using-the-national-client-registry) The Data Exchange Regulations make the client registry available to certified solutions, and Kenya's Health Sector Unique Identification Framework describes a unique patient identifier issued... ### [How should physiotherapy software record measurements and outcome scores?](https://tymirahealth.com/resources/faqs/how-should-physiotherapy-software-record-measurements) Physiotherapy software should record each measurement with enough detail to make repeat testing meaningful: body region, side, position, method, units, device, assistance, symptoms, assessor and date. ### [How should we migrate legacy or paper mental health records into a new system?](https://tymirahealth.com/resources/faqs/how-should-we-migrate-legacy-or-paper-mental-health-records-into-a-new-system) The 2025 Digital Health Regulations address migration of health data from legacy solutions and require stored or archived data to meet the Act. ### [How should we monitor an AI tool after it goes live in a mental health service?](https://tymirahealth.com/resources/faqs/how-should-we-monitor-an-ai-tool-after-it-goes-live-in-a-mental-health-service) Treat deployment as the start of evaluation. WHO's guidance on large multi-modal models recommends post-release audits and impact assessments, with results broken down by user groups such as age or... ### [Should a mental health technology provider pursue ISO/IEC 27001 certification?](https://tymirahealth.com/resources/faqs/should-a-mental-health-technology-provider-pursue-iso-iec-27001-certification) ISO/IEC 27001 is an international standard for running an information security management system, and ISO 27799:2025 adds health-specific security controls. ### [Should mental health diagnoses be coded in ICD-11 in Kenya?](https://tymirahealth.com/resources/faqs/should-mental-health-diagnoses-be-coded-in-icd-11-in-kenya) Kenya's national FHIR guides from the Digital Health Agency bind conditions to ICD-11, and the eClaims guide developed with the Social Health Authority uses ICD-11 as the primary diagnosis code... ### [What accessibility standards should a mental health app or portal meet?](https://tymirahealth.com/resources/faqs/what-accessibility-standards-should-a-mental-health-app-or-portal-meet) 2 at level AA is the widely used benchmark: readable contrast, scalable text, screen-reader support, keyboard navigation, clear error messages and no time limits users cannot extend. ### [What approvals are needed to use mental health data for research in Kenya?](https://tymirahealth.com/resources/faqs/what-approvals-are-needed-to-use-mental-health-data-for-research-in-kenya) For health data accessed from the national system, the 2025 Regulations require approval from a registered Institutional Review Board, a NACOSTI research licence and, where applicable, approval from... ### [What are the limits of WhatsApp chatbots for mental health support?](https://tymirahealth.com/resources/faqs/what-are-the-limits-of-whatsapp-chatbots-for-mental-health-support) WhatsApp is widely used, but it was not built as a clinical system. ### [What does a 'Health Facility Information Security Operations Centre' mean for our organisation?](https://tymirahealth.com/resources/faqs/what-does-a-health-facility-information-security-operations-centre-mean-for-our-organisation) The 2025 Digital Health Regulations define facility and health-sector Information Security Operations Centres: capabilities to monitor, detect, analyse and respond to security threats, with... ### [What evidence should we ask for before procuring a digital mental health intervention?](https://tymirahealth.com/resources/faqs/what-evidence-should-we-ask-for-before-procuring-a-digital-mental-health-intervention) Match evidence to risk. NICE's Evidence Standards Framework expects tools that treat or guide treatment, such as digital CBT, to show effectiveness evidence, ideally from comparative studies, plus... ### [What happens to our mental health data if we close the service or change vendor?](https://tymirahealth.com/resources/faqs/what-happens-to-our-mental-health-data-if-we-close-the-service-or-change-vendor) Plan exit from day one. The 2025 Digital Health Regulations say a health data controller that stops dealing with health data must ensure its digital health solution archives all health data in the... ### [What information should not appear in messages or logs?](https://tymirahealth.com/resources/faqs/what-information-should-not-be-exposed-in-messages-or-logs) Patient names, diagnoses, dates of birth, medical record numbers, national ID numbers, insurance and billing details and other clinical information should be kept out of public links, SMS and... ### [What is interoperability in mental health care, and why does FHIR matter?](https://tymirahealth.com/resources/faqs/what-is-interoperability-in-mental-health-care-and-why-does-fhir-matter) Interoperability means mental health systems can exchange information safely with other systems, such as hospital EMRs, labs, referral networks and payers. ### [What minimum security controls do Kenya's Digital Health Regulations expect?](https://tymirahealth.com/resources/faqs/what-minimum-security-controls-do-kenya-s-digital-health-regulations-expect) The 2025 Regulations list controls for sensitive personal data, including: unique usernames with strong passwords; monitoring of login attempts and password changes; secure networks with firewalls... ### [What safeguards do we need before using an AI scribe in therapy sessions?](https://tymirahealth.com/resources/faqs/what-safeguards-do-we-need-before-using-an-ai-scribe-in-therapy-sessions) Get explicit, informed agreement from the client to record, with an easy way to decline. ### [What security testing should a mental health app pass before launch?](https://tymirahealth.com/resources/faqs/what-security-testing-should-a-mental-health-app-pass-before-launch) Test against recognised standards: the OWASP Top Ten for web and API risks and the OWASP Mobile Application Security Verification Standard for apps. ### [What should a digital guided self-help programme include?](https://tymirahealth.com/resources/faqs/what-should-a-digital-guided-self-help-programme-include) WHO's 2026 manual on psychological self-help sets out how to plan, adapt and deliver guided or unguided programmes, featuring Step-by-Step for depression and Doing What Matters in Times of Stress. ### [What should a technical team check when building video sessions into a mental health platform?](https://tymirahealth.com/resources/faqs/what-should-a-technical-team-check-when-building-video-sessions-into-a-mental-health-platform) Confirm the platform's Digital Health Agency certification position, as the 2025 Regulations require certification of telemedicine platforms. ### [What should an audit trail in a mental health record system capture?](https://tymirahealth.com/resources/faqs/what-should-an-audit-trail-in-a-mental-health-record-system-capture) Record who accessed or changed what, when, from where and why: user identity and role, patient record, action (view, create, edit, print, export, share), timestamp, device or IP address, and any... ### [What should an incident response plan for a mental health system include?](https://tymirahealth.com/resources/faqs/what-should-an-incident-response-plan-for-a-mental-health-system-include) Kenya's Digital Health Regulations require controllers to have an incident response plan for identifying, reporting and mitigating security incidents. ### [What should the privacy notice for a mental health app say?](https://tymirahealth.com/resources/faqs/what-should-the-privacy-notice-for-a-mental-health-app-say) The Data Protection Act requires people to be told how their data is processed. ### [What should vendor due diligence cover for a mental health EHR or app?](https://tymirahealth.com/resources/faqs/what-should-vendor-due-diligence-cover-for-a-mental-health-ehr-or-app) Check the vendor's Digital Health Agency certification status and ODPC registration, and sign a data processing agreement covering purposes, sub-processors, breach notice to you, hosting location... ### [Which FHIR resources should we use for mental health screening and outcome data?](https://tymirahealth.com/resources/faqs/which-fhir-resources-should-we-use-for-mental-health-screening-and-outcome-data) A common pattern is: Questionnaire to define an instrument such as the PHQ-9; QuestionnaireResponse to store a completed form; Observation for item and total scores, coded with LOINC (for example... ### [Will sensitive mental health notes be shared through Kenya's Shared Health Record?](https://tymirahealth.com/resources/faqs/will-sensitive-mental-health-notes-be-shared-through-kenya-s-shared-health-record) The Data Exchange Regulations describe the shared health record as a longitudinal record of encounters, accessible to the client through the patient portal and to providers in the system. --- **About Tymira Health:** Tymira Health is a healthcare technology company based in Nairobi, Kenya. It builds Tymira360, a practice management and EHR platform for mental health, physiotherapy and dental providers, clinics, hospitals, NGOs and insurers across Africa. - Book a demo: https://tymirahealth.com/demo - Contact: https://tymirahealth.com/contact (info@tymirahealth.com) - All resources: https://tymirahealth.com/resources/all