Why and when your consent is necessary?
When you register yourself/your child as a patient of this practice, you provide consent for our Doctors and practice staff to access and use your personal information, so they can provide you with the best possible healthcare. Only staff who need to use your personal information will have access to it. If we need to use your information for any purpose not outlined in the patient consent you provide on registering to collect and disclose information, we will seek additional consent from you to do this.
Why do we collect, use, hold and share your personal information?
Our practice will need to collect your/your child’s information to provide healthcare services to you. Our main purpose for collecting, holding and sharing your information is to manage your health. We also use it for directly business-related activities such as financial claims and payments, practice audits and business processes e.g. staff training.
What personal information do we collect?
- Names, Dates of birth, addresses and contact details
- Medical information including but not limited to medical history, family history, medications, allergies, adverse events, immunisations, social history, genetic information, risk factors and ethnicity
- Relevant Court orders
- Medicare, Private Health Fund and Pensioner Concession details for identification and claiming, billing purposes
- Clinical Photography- where indicated- refer to patient consent form
How do we collect your personal information?
Our practice may collect your information in a number of different ways.
- During the course of providing medical services, the practice’s healthcare practitioners will consequently collect further information.
- Personal information may also be collected from the patient’s guardian or responsible person (where practicable and necessary) or from other involved healthcare specialists, hospitals, pathology and diagnostic imaging services, pharmacists, allied health, community health services, Medicare, your child’s school and other agencies.
- We may also collect your personal information when you visit our website, send us an email or SMS, or telephone us.
When, Why and with whom do we share your personal information?
We sometimes share your personal information with your consent for purposes such as but not limited to:
- Account keeping and billing where information may be passed onto the Health Insurance Commission.
- Referral to another medical practitioner or health care provider
- Sending of pathology specimens such as blood or urine samples
- Referral to hospital for treatment or advice
- Advice on treatment options
- The management of our practice
- Quality assurance, practice accreditation and complaint hearing
- To meet our obligation of notification to our medical defence organisation or insurers
The practice will not disclose information to any third party, other than in the course of the above, without full disclosure to the patient or the recipient, the reason for the information transfer and full consent. The practice will not disclose personal information to anyone outside of Australia without need and without consent.
Exceptions to disclose without patient consent will occur where the information is:
- Required by law
- Necessary to prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patients consent.
- To assist in locating a missing person
- To establish, exercise or defend and equitable claim.
- For the purpose of a confidential dispute resolution process.
The practice will not use any personal information in relation to direct marketing to a patient without the patients express consent.
The practice evaluates all unsolicited information it receives to decide if it should be kept, acted on or destroyed.
How do we store and protect your personal information?
Your personal information may be stored at our practice in various forms.
Our practice stores all personal and health information securely in electronic format, in protected information systems. Our practice uses passwords and confidentiality agreements for all staff and contractors.
How can you access and correct your personal information at our practice?
You have the right to request access to and correction of your personal information.
Our practice acknowledges patients may request access to their medical records. We require you to put this request in writing with signed consent and our practice will respond within 30 days.
There may be a fee associated with providing this information.
Our practice will take reasonable steps to correct your personal information where the information is not accurate or up to date. We will ask you to verify your personal information held by our practice when on attendance. If you require us to correct or update your information please advise us.
How can you lodge a privacy related complain and how will the complaint be handled?
This practice takes complaints and concerns about patients’ personal information seriously. Patients should express any privacy concerns in writing to the practice manager. The practice will then attempt to resolve it in accordance with its complains resolution process.
Policy Review Statement