{"id":2441,"date":"2024-01-09T12:34:27","date_gmt":"2024-01-09T01:34:27","guid":{"rendered":"https:\/\/obmc.health4community.com.au\/?page_id=2441"},"modified":"2024-01-11T13:49:00","modified_gmt":"2024-01-11T02:49:00","slug":"privacy","status":"publish","type":"page","link":"https:\/\/obmc.health4community.com.au\/privacy\/","title":{"rendered":"Privacy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"2441\" class=\"elementor elementor-2441\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ca909ca elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ca909ca\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4c52f33\" data-id=\"4c52f33\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-167a132 elementor-widget elementor-widget-heading\" data-id=\"167a132\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 30-04-2024 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h1 class=\"elementor-heading-title elementor-size-default\">Privacy Policy<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-53cf7ea elementor-widget elementor-widget-text-editor\" data-id=\"53cf7ea\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 30-04-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<h3>01.12.01 Privacy and Maintenance of Medical Records &#8211; Privacy and Security of Personal Health Information<\/h3><p>\u00a0This practice is bound by, and complies with, the relevant privacy and health information legislation including (but not limited to):\u00a0<\/p><ul><li>Privacy Act 1988 (including Privacy Amendment Act 2012)and associated Australian Privacy Principles<\/li><li>Health Records and Information Privacy Act 2002<\/li><li>Children and Young Persons (Care and Protection) Act 1998<\/li><\/ul><p>This policy and the underpinning legislation applies to all recorded information about any individual held by the practice, including the formal medical record whether written or electronic and information held or recorded on any other medium e.g. letter, fax, electronically or information conveyed verbally. \u00a0<br \/><br \/>Our practices have a designated person (practice principal) with primary responsibility for the practice\u2019s electronic systems, computer security and adherence to protocols as outlined in our Computer Information Security policy. This responsibility is documented in the Position Description. Tasks may be delegated to others and this person works in consultation with the privacy officer. Our Security policies and procedures regarding the confidentiality of patient health records and information are documented and our practice team are informed about these at induction and when updates or changes occur. The practice team can describe how we correctly identify our patients using 3 patient identifiers, name, and date of birth, address or gender to ascertain we have the correct patient record before entering or actioning anything from that record.<\/p><p><br \/>For each patient we have an individual patient health record containing all clinical information held by our practice relating to that patient. The Practice ensures the protection of all information contained therein. Our patient health records can be accessed by an appropriate team member when required.\u00a0<br \/><br \/>Doctors, allied health practitioners and all other staff and contractors associated with this Practice have a responsibility to maintain the privacy of personal health information and related financial information. The privacy of this information is every patient\u2019s right.<br \/><br \/>The maintenance of privacy requires that any information regarding individual patients, including staff members who may be patients, may not be disclosed either verbally, in writing, in electronic form, by copying either at the Practice or outside it, during or outside work hours, except for strictly authorised use within the patient care context at the Practice or as legally directed. There are no degrees of privacy. \u00a0All patient information must be considered private and confidential, even that which is seen or heard and therefore is not to be disclosed to family, friends, staff or others without the patient\u2019s approval. \u00a0Sometimes details about a person\u2019s medical history or other contextual information such as details of an appointment can identify them, even if no name is attached to that information. This is still considered health information and as such it must be protected under the Privacy Act 1988.<br \/><br \/>Any information given to unauthorised personnel will result in disciplinary action and possible dismissal. Each staff member is bound by his\/her privacy clause contained with the employment agreement which is signed upon commencement of employment at this Practice.<br \/><br \/>Personal health information should be kept where staff supervision is easily provided and kept out of view and access by the public e.g. not left exposed on the reception desk, in waiting room or other public areas; or left unattended in consulting or treatment rooms.<br \/><br \/>Practice computers and servers comply with the RACGP computer security checklist and we have a sound back up system and a contingency plan to protect the practice from loss of data.<\/p><p><br \/>Care should be taken that the general public cannot see or access computer screens that display information about other individuals. To minimise this risk automated screen savers should be engaged.<br \/><br \/>Members of the practice team have different levels of access to patient health information. To protect the security of health information, GPs and other practice staff do not give their computer passwords to others in the team.<br \/><br \/>Reception and other Practice staff should be aware that conversations in the main reception area can often be overheard in the waiting room and as such staff should avoid discussing confidential and sensitive patient information in this area.<br \/><br \/>Whenever sensitive documentation is discarded the practice uses an appropriate method of destruction (e.g. shredding\/confidential waste service for paper records or compliant electronic data destruction for electronic records).<br \/><br \/><br \/><\/p><p><strong>Correspondence<\/strong><\/p><p>Electronic information is transmitted over the public network in an encrypted format using secure messaging software. Where medical information is sent by post the use of secure postage or a courier service is determined on a case by case basis.<br \/><br \/>Items for collection or postage are left in a secure area not in view of the public.<br \/><br \/>Incoming correspondence is managed in line withe the practice&#8217;s Incoming Correspondence Process.<\/p><p>\u00a0<\/p><p><strong>Facsimile<\/strong><\/p><p>Facsimile, printers and other electronic communication devices in the practice are located in areas that are only accessible to the general practitioners and other authorised staff. Faxing is point to point and will therefore usually only be transmitted to one location<br \/><br \/>All faxes containing confidential information are sent to fax numbers after ensuring the recipient is the designated receiver. Faxes received are managed according to incoming correspondence procedures <br \/><br \/>The practice uses a fax disclaimer notice on outgoing faxes that affiliates with the practice:<br \/><br \/><br \/><\/p><table style=\"height: 171px;\" width=\"1307\"><tbody><tr><td width=\"602\"><p><strong><em>PRIVATE &amp; CONFIDENTIAL The information contained in this e-mail and their attached files, including replies and forwarded copies, are confidential and intended solely for the addressee(s) and may be legally privileged or prohibited<\/em><br \/><em>from disclosure and unauthorised use. If you are not\u00a0the intended recipient any form of reproduction, dissemination, copying, disclosure, modification,\u00a0distribution and\/or publication or any action taken or omitted to be taken in<\/em><br \/><em>reliance upon this message or its attachments is prohibited. All liability for viruses is excluded to the fullest extent permitted by law.<\/em><\/strong><\/p><\/td><\/tr><\/tbody><\/table><p><strong>Emails<\/strong><\/p><p>Emails are sent via various nodes and are at risk of being intercepted. Patient information may only be sent via email if it is securely encrypted according to industry and best practice standards or after consent to send information via non-encrypted email has been provided by the patient and documented in the patients notes. \u00a0<br \/><br \/><\/p><p><strong>Patient Consultations<\/strong><\/p><p>Patient privacy and security of information is maximised during consultations by closing consulting room doors. All examination couches, including those in the treatment room, have curtains or privacy screens.<br \/><br \/>When, consulting, treatment room or administration office doors are closed prior to entering staff should either knock and wait for a response or alternatively contact the relevant person by internal phone or email.<br \/><br \/>Where locks are present on individual rooms these should not be engaged except when the room is not in use<br \/><br \/>It is the doctor\u2019s\/health care professional\u2019s responsibility to ensure that prescription paper, sample medications, medical records and related personal patient information is kept secure, if they leave the room during a consultation or whenever they are not in attendance in their consulting\/treatment room.<br \/><br \/><br \/><\/p><p><strong>Medical Records<\/strong><\/p><p>The physical medical records and related information created and maintained for the continuing management of each patient are the property of the Practice. \u00a0This information is deemed a personal health record and while the patient does not have ownership of the record, he\/she has the right to access under the provisions of the Commonwealth Privacy and State Health Records Acts. Requests for access to the medical record will be acted upon only if received in written format.<\/p><p><br \/>Our patient health records can be accessed by an appropriate team member when required.<br \/><br \/>The protection of computerised records occurs with password protected computers, screen savers, and staff logging off programs when they move away from a computer. Passwords are changed regularly and are not disclosed to others. Patients are not left unattended in the Dr\u2019s rooms without the screen being locked. Protection of all information contained in medical records is ensured by restricting access to certain staff members and secure passwords. Access to medical records is available by remote access from offsite when required (e.g. from aged care facilities), however offsite access is restricted to Doctors, Clinical Support and Management staff groups. Both active and inactive patient health records are kept and stored securely.\u00a0<br \/><br \/><br \/><\/p><p><strong>Computerised Records \u00a0<\/strong><\/p><p><br \/>Our practice is considered paperless and has systems in place to protect the privacy, security, quality and integrity of the personal health information held electronically. \u00a0Appropriate staff members are trained in computer security policies and procedures.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy 01.12.01 Privacy and Maintenance of Medical Records &#8211; Privacy and Security of Personal Health Information \u00a0This practice is bound by, and complies with, the relevant privacy and health information legislation including (but not limited to):\u00a0 Privacy Act 1988 (including Privacy Amendment Act 2012)and associated Australian Privacy Principles Health Records and Information Privacy Act [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/pages\/2441"}],"collection":[{"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/comments?post=2441"}],"version-history":[{"count":10,"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/pages\/2441\/revisions"}],"predecessor-version":[{"id":2460,"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/pages\/2441\/revisions\/2460"}],"wp:attachment":[{"href":"https:\/\/obmc.health4community.com.au\/wp-json\/wp\/v2\/media?parent=2441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}