The practice may collect health information from a third party or a publicly available source, but only if the patient consents to such collection or would reasonably expect us to collect their health information from the third party, or if collection is necessary to provide the patient with appropriate health care.
As an employer, the practice also collects personal information related to employment and human resource management.
You have consented;
The other purpose is directly related to providing you with health services and you would reasonably expect that your information may be used for that purpose; or the use of your health information is required or authorised by law. For example, the practice may disclose your health information to another health service provider for the purpose of providing you with health care.
The practice keeps hard-copy and electronic records and takes steps to protect those records against loss, unauthorised access, use, modification or disclosure, or other misuse.
The practice ensures that hard-copy records are kept in locked files and there are security processes in place regarding computer access. The practice has taken steps to ensure that electronic data is backed-up.
After a period of 7 years (and if you attended the practice as a child,or you have reached the age of 25) we may destroy your records in accordance with applicable laws.
Requests for access or correction must be in writing and directed to the practice Privacy Officer. If you have any questions, the Privacy Officer can be contacted during business hours at the practice.
The practice may charge for access to or copies of health records.
The practice understands that you may not wish to receive marketing materials from the practice. If you would prefer not to receive such information, a request can easily be made to the Privacy Officer or another staff member at the practice.
Where practicable, we will inform you about where your information is sent; however, at all times the practice will ensure compliance with the Australian Privacy Principles in relation to any offshore transfer of your information.
Importantly, you could suffer some harm or other adverse outcome if you do not provide information relevant to your care.
In the event of a privacy breach, the practice will comply with applicable guides or guidelines issued by the Office of the Australian Information Commissioner for the
handling of privacy breaches.
If you would rather not raise the matter with the practice directly you can complain directly to the Office of the Australian Information Commissioner.
Privacy and general complaints about your care can also be directed to the Health Services Commissioner.