---
title: "PATCH /clinic-config/compliance - Update compliance settings"
method: PATCH
path: "/clinic-config/compliance"
tags: ["ClinicConfig"]
---

# PATCH /clinic-config/compliance - Update compliance settings

`PATCH /clinic-config/compliance`

## Request

- Base URL: `https://api.clinicos.vet/backend/business`
- URL: `https://api.clinicos.vet/backend/business/clinic-config/compliance`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/clinicos/apis/pawthosx-business-api-v1/docs/clinic-config/compliance/patch.ts> (a function with typed inputs; its response is checked against the schema)

## Request body

- ComplianceSettingsDto: Compliance and data retention settings
  - `hipaaCompliance` boolean
  - `dataRetentionPolicy` string
  - `notificationRetentionDays` union: Days in-app notifications are kept before the retention sweep deletes them (ITE-347). 0 = use the sweep's configured default; negative = disable the sweep for this tenant. Null on PATCH = leave the stored value unchanged (the endpoint replaces the whole Compliance section, so omitting this must not reset the override).
    - integer
    - string, int32
  - `clinicIdentity` ClinicIdentitySettingsDto: Clinic identity disclosure block for CMA compliance.
    - `ownershipType` string, nullable: "Independent" | "Corporate" | "Group" | null.
    - `parentOrganization` string, nullable
    - `ownershipStatement` string, nullable
    - `vatRegistrationNumber` string, nullable: VAT registration number — legally required on UK invoices.
  - `publicPricingEnabled` boolean
  - `rxTransparencyEnabled` boolean
  - `estimateBeforeTreatmentEnabled` boolean
  - `requireUsdaNumberForRabiesCertificates` boolean
  - `promptNextDueAtAdministration` boolean: Show the computed next-due date — editable — while administering a vaccine (ITE-632). Defaults true so a payload from an older client that omits the key doesn't switch it off.
  - `controlledDrugRegisterEnabled` boolean
  - `antimicrobialStewardshipEnabled` boolean
  - `cascadeWorkflowEnabled` boolean
  - `vcprEnforcementEnabled` boolean

## Response `200`

OK

- ComplianceSettingsDto: Compliance and data retention settings
  - `hipaaCompliance` boolean
  - `dataRetentionPolicy` string
  - `notificationRetentionDays` union: Days in-app notifications are kept before the retention sweep deletes them (ITE-347). 0 = use the sweep's configured default; negative = disable the sweep for this tenant. Null on PATCH = leave the stored value unchanged (the endpoint replaces the whole Compliance section, so omitting this must not reset the override).
    - integer
    - string, int32
  - `clinicIdentity` ClinicIdentitySettingsDto: Clinic identity disclosure block for CMA compliance.
    - `ownershipType` string, nullable: "Independent" | "Corporate" | "Group" | null.
    - `parentOrganization` string, nullable
    - `ownershipStatement` string, nullable
    - `vatRegistrationNumber` string, nullable: VAT registration number — legally required on UK invoices.
  - `publicPricingEnabled` boolean
  - `rxTransparencyEnabled` boolean
  - `estimateBeforeTreatmentEnabled` boolean
  - `requireUsdaNumberForRabiesCertificates` boolean
  - `promptNextDueAtAdministration` boolean: Show the computed next-due date — editable — while administering a vaccine (ITE-632). Defaults true so a payload from an older client that omits the key doesn't switch it off.
  - `controlledDrugRegisterEnabled` boolean
  - `antimicrobialStewardshipEnabled` boolean
  - `cascadeWorkflowEnabled` boolean
  - `vcprEnforcementEnabled` boolean

## Changes

- **2026-09-02** `061f8d95e1d1`: 12 info
  - added the new optional request property `notificationRetentionDays` (media type: application/json)
  - added the new optional request property `notificationRetentionDays` (media type: text/json)
  - added the new optional request property `notificationRetentionDays` (media type: application/*+json)
  - added the new optional request property `promptNextDueAtAdministration` (media type: application/json)
  - …8 more

[Operation history](https://skmtc.dev/clinicos/apis/pawthosx-business-api-v1/changes/clinic-config/compliance/patch.md)

---

[API](https://skmtc.dev/clinicos/apis/pawthosx-business-api-v1.md) - [All operations](https://skmtc.dev/clinicos/apis/pawthosx-business-api-v1/llms.txt) - [OpenAPI document](https://skmtc.dev/clinicos/apis/pawthosx-business-api-v1/revisions/099cf36186e0?raw)