Purpose

The purpose of this policy is to ensure patients who receive health care from Port Pirie Medical Centre are comfortable in entrusting their personal information with the Practice. This policy provides information to patients as to how their personal information (which includes all health information) is collected and used within Port Pirie Medical Centre and the circumstances in which information may be disclosed to third parties.

Practice Procedure

Port Pirie Medical Centre will:

• Provide a copy of this policy to a patient upon request.
• Ensure Staff comply with the Australian Privacy Principles (APP) and manage enquiries or concerns appropriately to protect the privacy of everyone.
• Take reasonable actions in circumstances to implement practices, procedures and systems to ensure compliance with the APPs and deal with enquiries or complaints.
• Collect personal patient information for the sole purpose of managing patient healthcare and for billing and receiving payments for services rendered.
• Maintain confidentiality at all times.

Consent

When you register as a patient of Port Pirie Medical Centre, you provide consent for our GPs and practice staff to access and use your personal information so you can be provided with the best possible healthcare. Only the required staff who need to see your information will have access to it. If your information is required for anything else, additional consent will be requested from you. Why do we collect, use, hold and share your personal information? Our practice will need to collect your personal information to provide healthcare services to you. Our sole purpose for collecting, using, holding and sharing your personal information is to manage your health. We also use it for directly related business activities, such as financial claims and payments, practice audits and accreditation.

What personal information do we collect?

The information necessary to be collected about you includes:

• Name, date of birth, address (residential and postal), phone number, email address
• Medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors
• Medicare number (where available) for identification and claiming purposes
• Concession/Health Care card details
• Veteran’s Affairs card details
• Emergency Contact Details (Next of Kin)
• Healthcare identifiers

How is your personal information collected?

Port Pirie Medical Centre will collect your personal information:

1. When you make your first appointment. Our reception staff will collect your personal and demographic information via your registration. A new patient form will be used to collect the data.
2. During the course of providing health care services, further personal information may be required. Information may also be collected through Electronic Transfer of Prescriptions (eTP), MyHealth Record/PCEHR system, eg via Shared Health Summary, Event Summary. We may also collect your personal information when you visit our website, send us an email or SMS, telephone us or make an online booking.
3. In some circumstances, personal information may be collected from other sources or third parties due to it not being practical or reasonable to collect it from you directly. This may include information from:
   • your legal guardian, next of kin, EPOA or responsible person
   • other involved healthcare providers including specialists, previous medical practices, allied health professionals, hospitals, community health services and pathology and diagnostic imaging services
   • Your health fund, Medicare, or the Department of Veteran’s Affairs (when required).
4. Your personal information may be held at Port Pirie Medical Centre in various forms including:
   • as paper records
   • as electronic records
   • as visual records – for example x-rays, CT scans, videos and photos

• as audio recordings

Who is your personal information shared with?

Port Pirie Medical Centre may share your personal information:

• With third parties who work with our practice for business purposes, such as accreditation agencies or information technology providers – these third parties are required to comply with APPs and this specific policy
• With other healthcare providers including Allied Health, Specialists, Hospitals, Diagnostic departments and in the event of when a patient becomes a resident in a Nursing Home.
• When it’s a requirement by law (eg court subpoenas)
• When it is necessary to minimise or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent
• To assist in locating a missing person
• To establish, exercise or defend an equitable claim
• For the purpose of confidential dispute resolution process
• When there is a statutory requirement to share certain personal information (eg some diseases require mandatory notification to specific health departments)
• During the course of providing medical services, through Electronic Transfer of Prescriptions (eTP), MyHealth Record/PCEHR system (eg via Shared Health Summary, Event Summary).

Only people that require professional to access your information will be granted. Other than in the course of providing medical services or as otherwise described in this specific policy, Port Pirie Medical Centre will not share personal information with any third party without your consent. We will not share your personal information with anyone outside Australia (unless under exceptional circumstances that are permitted by law) without your consent.

How is your personal information stored?

Your personal information may be stored at our practice in various forms. Port Pirie Medical Centre stores information, eg as paper records, as electronic records, as visual (x-rays, CT scans, videos and photos), as audio recordings. Our practice stores all personal information securely. We store and protect personal information, eg electronic format and in hard copy format in a secured environment. Computer access is password protected. Confidentiality agreements for all doctors, nurses and staff are a requirement.

How can you access and correct your personal information at our practice?

You have the right to request access to, and correction of, your personal information. Port Pirie Medical Centre acknowledges patients may request access to their own medical records and personal information. If you wish to request your records, we require a written request from yourself and our practice will respond within 30 days. Reasonable actions will occur to correct your personal information where the information is not accurate. Occasionally you will be asked to verify your personal information held by our practice to ensure your information is correct. If you wish to request corrections of your information, we require a written request from yourself and reasonable actions will occur to ensure the corrections are made. Written requests are to be addressed to Port Pirie Medical Centre, 45 Gertrude Street, PORT PIRIE SA 5540

Privacy Concerns and Complaints

Port Pirie Medical Centre takes complaints and concerns regarding the privacy of patient’s personal information very seriously and a priority. Patients should express any privacy concerns in writing to the Practice Manager. The Practice Manager will attempt to resolve the concern in accordance with our obligations under the Act and within a reasonable time frame and no later than within 30 days after the complaint is made to the Practice Manager. If a patient feels that their complaint about the privacy of their personal information has not been adequately addressed by the Practice they are encouraged to refer the matter to the Federal Privacy Commissioner at:- Office of the Australian Information Commissioner (OAIC) GPO BOX 5218 Sydney NSW 2001 Website www.oaic.gov.au Privacy Hotline 1300 363 922

Changes to Privacy Statement

Occasionally it may be a requirement for Port Pirie Medical Centre to review and revise the Privacy Policy. Port Pirie Medical Centre reserves the right to change the Privacy Policy at any time, and it may notify patients about changes to its Privacy Policy by keeping an updated version of the policy document on the practice website.

Further Information

The Privacy Policy is designed to show Port Pirie Medical Centre strives to comply with the Privacy Act and the Australian Privacy Principles. For any persons who would like to know more about the Privacy Act or Australian Privacy Principles should contact the Office of the Australian Information Commissioner at:- Phone 1300 363 992 Website www.oaic.gov.au Email enquiries@oaic.gov.au Write GPO BOX 5218, Sydney NSW 2001