Privacy Policy
Purpose
This policy provides information to patients as to how their personal information (which includes their health information) is collected and used, and the circumstances in which we may disclose it to third parties.
Background
The Australian Privacy Principles (APP) provide a protection framework that supports the rights and obligations of collecting, holding, using, accessing and correcting personal information. The APP consist of 13 principle-based laws and apply equally to paper-based and digital environments. The APP complement the long-standing general practice obligation to manage personal information in a regulated, open and transparent manner.
Policy
Provide a copy of this policy upon request
Ensure compliance with the APP and deal appropriately with inquiries or concerns
Take such steps as are reasonable in the circumstances to implement practices, procedures and systems to ensure compliance with the APP and deal with inquiries or complaints
Collect personal information for the primary purpose of managing a patient’s healthcare and for financial claims and payments
Patient Consent
Interpreting and applying a patient’s consent will only be applicable for the primary purpose for which it was provided. Additional consent will be sort from the patient if the personal information collected may be used for any other purpose.
Collection of Information
Paddington Family Practice has been entrusted to collect patients personal information for the provision of medical services. This will include:
Names, addresses and contact details
Medicare number (where available) for identification and claiming purposes
Healthcare identifiers
Medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors.
Personal information is held as electronic records.
For more information you can visit the practice’s privacy policy from their website, paddingtonfamilypractice.com.au.
Use and Disclosure of Information
Personal information will only be used for the purpose of providing medical services and for claims and payments, unless otherwise consented to. Some disclosure may occur to third parties engaged by or for the Practice for business purposes, such as accreditation or for the provision of information technology. These third parties are required to comply with this policy. The Practice will inform the patient where there is a statutory requirement to disclose certain personal information (for example, some diseases require mandatory notification).
Personal information will no be disclosed to any third party other than in the course of providing medical services, without full disclosure to the patient or the recipient, the reason for the information transfer and full consent from the patient. This includes communication outside Australia without need and without patient consent.
Exceptions to disclose without patient consent are where the information is:
Required by law
Necessary to lessen or prevent a serious threat to a patients life, health or safety or public health or safety, or it is impractical to obtain the patient's consent
To assist in locating a missing person
To establish, exercise or defend an equitable claim
For the purpose of confidential dispute resolution process
Personal information in relation to direct marketing will not be used without that patients express consent. Patients may opt-out of direct marketing at any time by notification in a letter or email.
Access, Corrections and Privacy Concerns
Acknowledgement that patients may request access to their medical records. Patients are encouraged to make this request during consultation or in writing, and a response will be given within a reasonable timeframe.
Reasonable steps will be taken to correct personal information where it is satisfied they are not accurate or up to date. From time to time, patients will be asked to verify the personal information held is correct and up to date. Patients may also request the Practice corrects or updates their information, and patients should make such requests in writing.
Complaints and concerns about the privacy of patients personal information will be taken seriously. Patients should express any privacy concerns in writing. Attempts will be taken to resolve it in accordance with this complaint resolution procedure.