Privacy Policy

This practice is subject to the Privacy Act 1988 (Cth) and relevant State Legislation in some States and territories of Australia. This document outlines the privacy policy for Tyabb Health.

Purpose

The purpose of this policy is to ensure that patients receiving care from Tyabb Health are comfortable entrusting their health information to the Practice. It provides information to patients on how their personal information (including health information) is collected and used within the Practice, as well as the circumstances under which it may be disclosed to third parties.

Background and Rationale

The Australian Privacy Principles (APP) establish a framework for privacy protection that governs the collection, storage, use, access, and correction of personal information. The APP comprises 13 principle-based laws that apply equally to paper-based and digital environments. These principles complement the long-standing general practice obligation to manage personal information in a regulated, open, and transparent manner.

Practice Procedure

The Practice will:

• Provide a copy of the policy upon request
• Ensure staff comply with the APP and address inquiries or concerns appropriately
• Take reasonable steps to implement practices, procedures, and systems to ensure compliance with the APP and address inquiries or complaints
  

Collection of Information

The Practice collects personal information for the primary purpose of managing a patient’s healthcare and for financial claims and payments. This information may include:

• Names, addresses, and contact details
• Medicare number (where available) for identification and claiming purposes
• Healthcare identifiers
• Medical information, including medical history, medications, allergies, adverse events, immunizations, social history, family history, and risk factors

Use and Disclosure of Information

Personal information will only be used for providing medical services and for claims and payments, unless otherwise consented to. Disclosure may occur to third parties engaged by or for the Practice for business purposes, such as accreditation or information technology provision. The Practice will inform the patient where there is a statutory requirement to disclose certain personal information.

Privacy and Website

Tyabb Health will not collect information about you from your use of the website unless you provide it. Staff and contractors, who are subject to obligations of confidentiality, may be given access to personal information as part of our services.

Access, Corrections, and Privacy Concerns

Patients may request access to their medical records in writing, and the Practice will respond within a reasonable time. The Practice will take reasonable steps to correct personal information where it is satisfied they are not accurate or up to date. Patients can also request corrections or updates to their information in writing.

The Practice takes privacy complaints seriously and will attempt to resolve them in accordance with its complaint resolution procedure. Patients with concerns or suggestions can use the suggestion box in the waiting room, which can be completed anonymously.