1. POLICY STATEMENT
Central Anaesthetic Group (CAG) complies with its obligations and manages personal information in an open and transparent way in accordance with the Privacy Amendment (Private Sector) Act 2000.
The Australian Privacy Principles (APP) guide the practice of CAG. The APP regulate how CAG may collect, use, disclose and store personal information and how individuals may access and correct personal information which CAG holds about them.
As a service provider to health care organisations, CAG may be in receipt of and collect and use your personal information necessary to carry out its functions.
2. DEFINITIONSPersonal information
means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion name, address and telephone number are examples of personal information. (s.6 of the Privacy Act refers).Sensitive information
means information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations; philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record or health information about an individual (s.6 of the Privacy Act refers).Health information
means personal information or an opinion about:
- An individual’s health or disability at any time (that is, past, present or future)
- An individual’s expressed wishes regarding future health services to him or her
- A health service provided, or to be provided, to the individual
- Other personal information collected whilst providing a health service
3. HOW CAG HANDLES YOUR PERSONAL INFORMATION3.1 INFORMATION CAG MAY COLLECT
We will use and disclose your information for purposes directly related to the provision of your medical care and treatment, billing (including health fund claims) or scheduling your medical treatment. This may include, but is not limited to the transfer of relevant information to your nominated GP, to another health service provider or hospital, to a treating specialist etc.
We will usually collect your information directly from you. Sometimes, we may need to collect information about you from a third party such as another health service provider. CAG will only do this where you have given your consent or there is a risk to your life and emergency treatment is required.3.2 HOW CAG USES YOUR INFORMATION
We only use your personal information for the purpose you have given the information to us, including:
- to contact you regarding appointment scheduling, to provide advice or information in relation to the way in which the service will or has been provided
- to administer and manage services, including charging, billing, collecting debts and liaising with Medicare or private health funds
- for use by the specialist, including to gain an understanding of your needs so he/ she may provide you with the required service and advice
- in an emergency where your life is at risk and you cannot consent
- to manage CAG, including for processes relating to risk management, safety
and security activities, quality assurance and accreditation activities
- to maintain medical records as required under our policies and by law
- for the purposes of assessing and (if successful) engaging job applicants
- for other purposes required or permitted by law
Additionally, we may provide information about your condition to your parent, child, other relatives, close personal friends, guardians, or a person exercising your power of attorney under an enduring power of attorney or who you have appointed as your enduring guardian, unless you tell us that you do not wish us to disclose your health information to any such person.3.3 ACCESS TO AND CORRECTION OF YOUR INFORMATION
You have a right to have access health information that we hold about you. You can also request an amendment to this information should you believe that it contains inaccurate information.
CAG will allow access or make the requested changes unless there is a reason under the Privacy Act 1988 (Cth) or other relevant law to refuse such access or refuse to make the requested changes.
If we do not agree to change your health and or personal information in accordance with your request, we will permit you to make a statement of the requested changes and we will enclose this with your record.
Should you wish to obtain access to or request changes to your health and or personal information you can ask for our Practice Manager (see details below) who can give you more detailed information about CAG access and correction procedure.3.4 DATA QUALITY
CAG will take reasonable steps to ensure that your personal information which we will collect, use or disclose is accurate, complete and up-to-date.3.5 DATA STORAGE AND SECURITY
CAG may store the personal information we collect from you in various forms, including through an electronic database.
CAG will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. We use technologies and processes which are protected by secure network links, which are complemented by password protection, virus protection and internal quality procedures.
CAG will destroy or permanently de-identify any of your information which is in its possession or control and which is no longer needed for the purpose for which it was collected, provided CAG is not required under an Australian law or court/tribunal or otherwise to retain the information.3.6 CROSS BORDER DISCLOSURES
CAG may enter into arrangements with third parties to store data we collect, and such data may include personal information, outside of Australia. CAG will take reasonable steps to ensure that the third parties do not breach the APP. The steps CAG will take may include ensuring the third party is bound by privacy protection obligations which are the same (or substantially the same) as those which bind CAG and requiring that the third party have information security measures approved by CAG.3.7 IF YOU HAVE A COMPLAINT
(b) CAG does not agree to provide you with access to your personal information
(c) you have or a complaint about our information handling practices,
You can lodge a complaint with or contact our Practice Manager on the details below or directly with the Federal Privacy Commissioner.3.8 HOW TO CONTACT US