PRIVACY POLICY
Privacy Policy for Management of Personal Information
Alicia La Brooy, accredited practising dietitian, recognises the importance of keeping your information private and confidential. This document outlines the way I collect, use, share, secure and dispose of your personal information collected through the provision of services to you, as well as through the website (www.canberrahealthcollective.org). This is done in accordance with the Privacy Act 1988 and the Australian Privacy Principles (APPs) outlines in Schedule 1 of the Act.
By providing personal information or sensitive information, individuals consent to me using, storing and disclosing that information in accordance with this Privacy Policy.
What is personal information?
Personal information refers to any information that is reasonably identifiable and can include sensitive information.
Client information collected and why
The types of information collected to inform clinical case formulation and treatment planning may include:
• Your name, date of birth, address and contact information.
• Current and past medical information, as well as social and psychological history.
• Your family medical history to the extent that it may inform your care.
• Past or present healthcare information from other providers that may inform your care, including referral information, medical reports, assessment reports and test results.
• Other relevant information disclosed by you through the course of treatment, such as relationship status, education and occupational history, sexuality and gender information, race, cultural identification, religion, legal history.
• Clinical records developed by the clinician that contains information or opinion on presentation, formulation, treatment plans and response to treatment. •
Responses/results from administered tests and/or questionnaires.
• Healthcare identifiers such as Medicare number, health fund details.
• Financial payment details (e.g., your credit card number).
Client information is collected for the purpose of providing high quality services to the client. Personal information is collected as is reasonably necessary to inform accurate assessment, diagnosis, and treatment planning for clients of Alicia La Brooy.
How information is collected
Personal information is collected directly from clients during consultation and other interactions, or when the client provides information through hardcopy, electronic forms, or other correspondence such as email. Information may also be collected from a client’s responsible person, such as a parent or guardian. Where relevant, information may be sought, collected and held from a third party. This may include information from others involved in your care such as a GP, allied health providers, or people with whom you have a relationship (such as a family member or school teacher). We will endeavour to advise of the collection of this information and always aim to seek your written consent to contact and retrieve relevant information. Personal Information is collected in compliance with relevant privacy laws.
Disclosing personal information
While the aim is to keep your personal information private and confidential, there may be instances where sharing of information may benefit your level of care or be required for safety or legal reasons. Your information may be shared:
• With other healthcare providers involved in your care.
• If you make a request and provide written consent.
• When required to liaise with Medicare, Healthcare fund or other government agencies.
• When it is necessary to “lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety”, even if the risk is not imminent.
• As required by law.
• When handling a complaint or in response to anticipated or existing legal action.
• As part of quality assurance activities, research, training, statistical purposes.
Private information will not be disclosed outside of Australia, unless requested and consented to by the client or if required by law. The personal information of clients will not otherwise be sold, exchanged, rented , disclosed or used for any other purposes outside of treatment.
Storage of information
Reasonable steps are taken to ensure the safety and security of your personal information. Your personal information is stored electronically using the practice management system, Halaxy. Halaxy uses bank grade security and encryption which means that records, notes, and payment information is protected to the same level used in banks. All information is encrypted and stored in protected data centre in Australia. To learn more about Halaxy’s privacy and security please refer to Halaxy’s Privacy Policy.
Other precautions taken to protect your personal information includes:
• SSL encryption of webpages and internet forms
• Information is only accessed on a need-to-know basis
• We protect devices used to collect and store personal information with anti-virus software and password protection
• Any hard copy information is stored securely in locked filing cabinets
• If a data breach occurs, clients will be notified immediately, as per requirements under Privacy Act and the guidelines provided here: https://www.oaic.gov.au/privacy/notifiable-data-breaches
All information collected will be stored electronically and held for a minimum of 7 years after the last contact with the service, or until a client turns 25 if they are under 18 at the time of service.
Accessing, correcting or deleting your personal information
Clients have a right to access their personal information. Requests for information need to be put in writing. Information will be provided to you if reasonable to do so, however some requests may be refused under circumstances set out in the Privacy Act. Alicia La Brooy reserves the right to set a fee for this if it requires significant effort or expense on her part.
If a client comes to believe the personal information stored is incomplete, incorrect, or out of date, the client may notify to the practitioner to request an update and/or correction. Likewise, a client may request deletion of personal information held about them by writing to the practitioner.
Changes to policy
This policy may be updated from time to time. Updates become effective at time of publication.
Complaints or concerns
If you are concerned about how your personal information has been handled, please contact Alicia La Brooy (Alicia@canberrahealthcollective.org). If you wish to make a complaint about the use, disclosure of, or access to your personal information, you can do so through the Office of the Australian Information Commissioner (OAIC) by phone 1300 363 992 or online https://www.oaic.gov.au/privacy/making-a-privacy-complaint or by post to: Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001