Australian Privacy Principles (APP) Policy
Part A – Purpose and Context
- Physio Place is committed to ensuring the privacy and confidentiality of all personal information affiliated with Physio Place’s business undertakings.
- Physio Place follows the terms and conditions of privacy and confidentiality in accordance to the Australian Privacy Principles (APPs) as per schedule 1 of the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth), forming part of the Privacy Act 1988 (‘the Act’).
- The point of contact regarding any queries regarding this policy is Kaye Lewis, Practice Manager: 07 5523 9994, firstname.lastname@example.org.
Part B – Australian Privacy Principles
- As a private sector health service provider and under permitted health situations, Physio Place is required to comply with the APPs as prescribed under the Act.
- The APPs regulate how Physio Place may collect, use, disclose and store personal information and how individuals, including Physio Place’s patients may:
- address breaches of the APPs by Physio Place;
- access their own personal information; and,
- correct their own personal information.
- In order to provide patients with adequate health care services, Physio Place will need to collect and use personal information. It is important to be aware that if the patient provides incomplete or inaccurate information or the patient withholds personal health information Physio Place may not be able to provide the patient with the services they are requesting.
- “personal information” as defined by the Privacy Act 1988 (Cth). Meaning
“information or an opinion including information or an opinion forming part of a database, whether true or not, and whether recorded in a material format or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion”; and,
- “health information” as defined by the Privacy Act 1988 (Cth). This is a particular subset of “personal information” and means:
- Information or opinion about the health or disability (at any time i.e. past, present or future) of an individual that can be classified as personal information;
- Information or opinion about an individual’s expressed wishes about the future provision of health services that can be classified as personal information;
- Information or opinion about health service provided, or to be provided, to an individual, that can be classified as personal information;
- Other personal information collected to provide, or in providing, a health service.
- Personal information also includes ‘sensitive information’ which is information including, but not limited to a patient’s:
- political opinions;
- sexual preferences; and or,
- health information.
- Information deemed ‘sensitive information’ attracts a higher privacy standard under the Act and is subject to additional mechanisms for the patient’s protection.
Part C – Types of personal information
- Physio Place collects information from each individual patient that is necessary to provide the patient with adequate health care services.
- This may contain collecting information about a patient’s health history, family history, ethnic background or current lifestyle to assist the health care team in diagnosing and treating a patient’s condition.
Part D – Collection & Retention
- This information will in most circumstances be collected directly from the patient through but not limited to the following mediums:
- Patient consent form;
- medical treatment form; and or,
- face to face consultation.
- In other instances, Physio Place may need to collect personal information about a patient from a third party source. This may involve:
- Emergency contact; or,
- other health service providers.
- This will only be conducted if the patient has provided consent Physio Place to collect his/her information from a third party source; or, where it is not reasonable or practical for Physio Place to collect this information directly from the patient. This may cover when:
- the patient’s health is potentially at risk and his/her personal information is needed to provide them with emergency medical treatment.
- Physio Place stores and retains a patient’s personal & health information electronically onto a secure domestic server.
Part E – Purpose of collection, Use & Disclosure
- Physio Place only uses a patient’s personal information for the purpose(s) they have provided the information for unless one of the following applies:
- the patient has consented for Physio Place to use his/her information for an alternative or additional purpose;
- the disclosure of the patient’s information by Physio Place is reasonably necessary for the enforcement of criminal law or a law imposing a penalty or sanction;
- the disclosure of the patient’s information by Physio Place will prevent or lessen a serious and imminent threat to somebody’s life or health; or,
- Physio Place is required or authorised by law to disclose the patient’s information for another purpose