We will use all reasonable efforts to protect the privacy of individuals’ personal information and to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to all staff (including contracted agency staff), patients and volunteers.
We will only collect personal information by lawful and fair means and only that which is necessary for one or more of our functions or activities. Where reasonable and practicable, we will collect personal information about an individual only from that individual. We acknowledge that people with vision or hearing impairments, and those from culturally and linguistically diverse backgrounds, may require special consideration.
Purpose of this policy
The purpose of this policy is to ensure personal information is managed openly and transparently; to protect the privacy of personal information, including health information, of staff, patients and volunteers; to provide for the fair collection and handling of personal information; to ensure information is used and disclosed for relevant purposes only; to regulate access to and correction of personal information; and to ensure confidentiality through appropriate storage and security.
Key definitions
Personal Information is information or an opinion, whether true or not, about an individual whose identity is apparent or can reasonably be ascertained. Sensitive Information includes information about racial or ethnic origin, political or religious beliefs, memberships, sexual orientation, criminal record, and biometric, health and genetic information. Health Information is information about a person’s health, disability, wishes about future health services, or a health service provided to them.
Collection, use and disclosure
We collect and use information about you during the course of your relationship with us, only by fair and lawful means and only where necessary for our functions as a health care provider, including to comply with the law, provide appropriate services and care, and contact a nominated person about a person’s health status. If you choose not to provide the information we request, we may not be able to provide the care and services you require. We will not collect sensitive information (including health information) unless it is reasonably necessary for one of our functions and you have consented, or the collection is otherwise permitted or required by law.
Methods of collection
Personal, sensitive and health information may be collected from the staff member, patient or volunteer; from any person or organisation that assesses health status or care requirements; from a patient’s health practitioner or other health providers; and from family members, significant persons or a legal advisor of a patient. At admission, a patient should identify any parties from whom they do not wish personal information to be accessed or to whom it should not be provided.
Use and disclosure
We will not use or disclose personal information for a purpose other than the primary purpose of collection unless a related secondary purpose applies and you would reasonably expect it, you have consented, or the use or disclosure is otherwise permitted or required by law (for example to lessen a serious threat to life, health or safety). We will not disclose your personal information to an overseas recipient except as permitted by the APPs.
Access and correction
You have a right to request access to the personal information we hold about you, and we will make all reasonable attempts to grant that access unless an exception under the Privacy Act applies. Requests can be made orally or in writing to the Managing Director, and we will respond within a reasonable time. If information we hold is inaccurate, incomplete, out of date, irrelevant or misleading, we will take reasonable steps to correct it.
Direct marketing
We will not use or disclose personal information for direct marketing unless it was collected directly from you, you would reasonably expect it, and you have been given, and not taken up, the opportunity to opt out. We will not use sensitive information for direct marketing without your consent.
Security
We are committed to keeping your personal information secure and will take all reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure. Patient records are kept in secure storage, accessed only by health professionals attending to that person’s care, and details are not provided over the phone unless the identity of the person enquiring is certain. Our security measures include staff training, password-protected systems, firewalls and virus scanning. We will destroy or de-identify personal information that is no longer required, in accordance with the law.
Media
No member of staff or volunteer will make any statement to the media. Anyone approached to comment must refer the person to our Managing Director.
Complaints
If you wish to make a complaint about the way we have managed your personal information, you may do so verbally or in writing to our Privacy Officer / Managing Director, Phone: (07) 5479 0881, Email: [email protected]. Complaints may also be referred to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992). We will investigate your complaint in accordance with our internal procedures and provide a written response within a reasonable timeframe.
Privacy Officer
We have appointed a Privacy Officer to manage all matters relating to protecting the privacy of individuals’ personal information. The Privacy Officer can be contacted for more information about this policy or the way we protect personal information.