Privacy Policy

Aug 29, 2024

PRIVACY POLICY

Purpose

This policy provides information to patients as to how their personal information (which includes their health information) is collected and used, and the circumstances in which it may be disclosed to third parties.

Background

The Australian Privacy Principles (APP) provide a protection framework that supports the rights and obligations of collecting, holding, using, accessing and correcting personal information. The APP consist of 13 principle-based laws and apply equally to paper-based and digital environments. The APP complement the long-standing general practice obligation to manage personal information in a regulated, open and transparent manner.

Policy

Dr Stern will:

  • provide a copy of this policy upon request;
  • ensure compliance with the APP and deal appropriately with inquiries or concerns;
  • take such steps as are reasonable in the circumstances to implement practices, procedures and systems to ensure compliance with the APP and deal with inquiries or complaints; and
  • collect personal information for the primary purpose of managing a patient’s healthcare and for financial claims and payments.

Interpreting and applying a patient’s consent will only be applicable for the primary purpose for which it was provided. Additional consent will be sort from the patient if the personal information collected may be used for any other purpose.

Collection of Information

Dr Stern and Paddington Family Practice has been entrusted to collect patients’ personal information for the provision of medical services. This will include:

  • names, addresses and contact details;
  • Medicare number (where available) for identification and claiming purposes;
  • Healthcare identifiers; and
  • medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors.

Personal information is held as electronic records.

Use and Disclosure of Information

Personal information will only be used for the purpose of providing medical services and for claims and payments, unless otherwise consented to. Some disclosure may occur to third parties engaged by or for Dr Stern or Paddington Family Practice for business purposes, such as accreditation or for the provision of information technology. These third parties are required to comply with this policy. The patient will be informed where there is a statutory requirement to disclose certain personal information (for example, some diseases require mandatory notification).

Personal information will not be disclosed to any third party other than in the course of providing medical services, without full disclosure to the patient or the recipient, the reason for the information transfer and full consent from the patient. This includes communication outside Australia without need and without patient consent.

Exceptions to disclose without patient consent are where the information is: required by law;

  • necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent;
  • to assist in locating a missing person;
  • to establish, exercise or defend an equitable claim; or
  • for the purpose of confidential dispute resolution process.

Personal information in relation to direct marketing will not be used without that patient’s express consent. Patients may opt-out of direct marketing at any time by notification in a letter or email.

Access, Corrections and Privacy Concerns

Patients may request access to their medical records. Patients are encouraged to make this request during consultation or in writing, and a response will be given within a reasonable timeframe.

Reasonable steps will be taken to correct personal information where it is satisfied they are not accurate or up to date. From time to time, patients will be asked to verify the personal information held is correct and up to date. Patients may also request that their information be corrected or updated. Such requests should be made in writing.

Complaints and concerns about the privacy of a patient’s personal information will be taken seriously. Patients should express any privacy concerns in writing. Attempts will be taken to resolve it in accordance with a complaint resolution procedure.