Mount Gravatt Family Practice
PRIVACY POLICY
Introduction
Mount Gravatt Family Practice (MGFP) is committed to ensuring your personal and medical information is managed in accordance with the Privacy Act 1988 and Australian Privacy Principles (APP). This information is to inform you, the patient, on how and why we collect and use this information within our practice and when, why and how we share it with third parties.
What personal information we collect and why:
When you register as a patient at our practice, you provide consent for your doctor, receptionist and nurse to collect your personal information so they can create a confidential patient health record to provide you with the best possible healthcare services. We also use it for directly related business activities, such as financial claims, payments, practice audits, accreditation, and normal business processes. Only staff who need to see your personal information will have access to it. We will not use your information for anything else, unless you provide consent to do so. To enable ongoing care and total quality improvement within our practice, and in keeping with the Privacy Act 1988 and Australian Privacy Principles (APPs), we wish to provide you with sufficient information on how your personal health information may be used or disclosed and record your consent or restrictions to this consent. All staff at Mount Gravatt Family Practice have signed a Confidentiality Agreement as part of their employment contract with us.
Collection of information to create your patient health record:
-
Your name, address, date of birth, contact details, including next of kin and emergency contacts.
-
Medicare number, DVA for identification and claiming purposes.
-
Healthcare identifiers
-
Health Fund
-
Pension, Health Care and Senior Card numbers.
-
Medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors.
How we collect your personal information:
-
When you make your first appointment with our practice our staff will ask you to fill in a ‘New Patient Form’.
-
During provided medical services by the practitioner or nurse we may collect further personal information. This can occur by receiving records form your previous practice, correspondence with other health care providers and My Health Records.
-
When you send emails, telephone us, make appointment and respond to SMS reminders. (We will only communicate medical information via email if given consent as this is not secure).
-
If it is not possible or practical to collect the information directly from you, we may also collect this information from your guardian or responsible person, other healthcare providers, hospitals, community health services, pathology and diagnostic imaging services. (This is with your consent).
-
Reception will ask you to sign an ‘Authority Release’ for you previous Medical Records, this is actioned with your consent.
MGFP holds all personal information securely, whether in electronic format or protected information systems:
A patient’s personal information may be held at Mount Gravatt Family Practice in various forms. Many of our records are in electronic format. Any correspondence received in an alternative method for example by post, are scanned into your personal record and then the paper document is shredded. Documented photos are stored in your electronic records. Our practice stores all personal information securely using individual passwords, confidentiality agreements for any staff or contractors entering the premises. The system is maintained with the practice and via our IT consultants: encrypted back-ups or all data are performed daily and held securely in the event of a fire.
When, why and with whom do we share your personal information with:
-
Other Healthcare providers, for example, referral to a specialist.
-
Personal information will only be used for the purpose of providing medical services and for claims and payments, unless otherwise consented to. Some disclosure may occur to third parties engaged by or for Mount Gravatt Family Practice for business purposes, such as accreditation or for the provision of information technology. These third parties are required to comply with this policy. Mount Gravatt Family Practice will inform the patient where there is a statutory requirement to disclose certain personal information (for example, some diseases require mandatory notification).
-
Mount Gravatt Family Practice will not disclose personal information to any third party other than while providing medical services, without full disclosure to the patient or the recipient, the reason for the information transfer and full consent from the patient. Mount Gravatt Family Practice will not disclose personal information to anyone outside Australia without need and without patient consent.
-
Mount Gravatt Family Practice have processes in place via our electronic editing software whereby only relevant and necessary personal information is included when sharing personal information.
Exceptions to disclose without patient consent are where the information is:
-
Required by law, for example Subpoena.
-
Necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent
-
To assist in locating a missing person
-
To establish, exercise or defend an equitable claim
-
For the purpose of a confidential dispute resolution process