Privacy policy

This privacy policy provides information to you, our patients, on how your personal information (which includes your health information) is collected and used within Care 24-7’s Emergency Departments and the circumstances in which we may share it with third parties.

This policy also includes details on how your personal information is stored, your rights to access and correct your personal information, how to lodge a complaint relating to our treatment of your personal information and how we will deal with the complaint.

Commitment to privacy

Care 24-7 is committed to ensuring each person’s right to privacy.  Care 24-7 will collect and use the personal information required to ensure you receive a high level of emergency health care within our Emergency Department.  Care 24-7 will:

 

  • provide a copy of this policy to a patient upon request;
  • ensure staff comply with the Australian Privacy Principles (APP) as contained in the Privacy Act 1988 (Cth) (the Act) and deal appropriately with inquiries or concerns;
  • take such steps as are reasonable in the circumstances to implement practices, procedures and systems to ensure compliance with the APPs and deal with inquiries or complaints; and
  • collect personal information for the primary purpose of managing a patient’s healthcare and for billing and receiving payments for services rendered.

Why we collect your personal information

We collect your personal information:

 

  • to provide information to our Emergency Physicians/GPs and staff, associated health care service providers (such as radiologists and pathologists) or other third parties (such as health care funds) in order for us to provide emergency health care services to you;
  • for administrative and quality control purposes including activities such as financial claims and payments, patient satisfaction measures, business audits and, where required, for national accreditation;
  • to provide your updated personal information to our associated health partners and service providers to ensure records are current;
  • to comply with any law, rule, regulation, lawful and binding determination, reporting obligation, decision or direction of a regulator or in cooperation with any governmental authority of any country or in response to any subpoena or lawful request for production of information;
  • to process and respond to any complaint made by you; and
    to share information with you about Care 24-7 Emergency Departments (such as developments, fees, services) and provide health and wellbeing education. You will be able to opt out of marketing and communication activities. 

When your consent is necessary

When you register as a patient at a Care 24-7 Emergency Department you provide consent for our Emergency Physicians / GPs and staff to access and use your personal information, so they can provide you with the best possible health care.
Only staff who need to see your personal information will have access to it. If we need to use your information for any other purpose, we will seek additional consent from you to do this.

What personal information do we collect?

Care 24-7 may collect and hold the following information about you:

 

  • names, address, telephone numbers, date of birth, gender, marital status, demographic information, email address, occupation;
  • health/medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors, general practitioner, referring doctor;
  • Medicare number (where available) for identification and claiming purposes;
    healthcare identifiers;
    health fund details;
  • transaction details associated with services we have provided to you;
  • any additional information provided to us by you through patient satisfaction measures and feedback forms.

 

Care 24-7 will destroy and/or de-identify personal information kept in hard copy after our legal obligations to retain the information have expired.

How do we collect your personal information?

We will collect your personal information:

 

  • When you attend the Emergency Department, at which point, we will collect your personal and demographic information via a combination of electronic and paper forms and/or verbal interaction between our doctor/nurse / reception staff and you.
  • During the course of providing medical services, we may collect further personal information, for example from a referring or known medical provider.
  • We may also collect your personal information when you visit our website, send us an email, SMS, telephone, employment applications for an advertised role or when a complaint is lodged with us.
  • In some circumstances personal information may also be collected from other sources. Often this is because it is not practical or reasonable to collect it from you directly. This may include information from:
    • your legal representative;
    • other involved healthcare providers, such as specialists, associated health professionals, hospitals, community health services and pathology and diagnostic imaging services;
    • your health fund, Medicare or the Department of Veteran’s Affairs (as necessary).

 

A patient’s personal information may be held by Care 24-7’s Emergency Department in various forms including:

 

  • paper records;
  • electronic records;
  • visual records – for example x-rays, CT / MRI scans, videos and photos;
  • audio recordings; or
  • a combination of all of the above.

Security

Care 24-7 is committed to the security of personal information of our patients.  We have policies and procedures in place to manage our Privacy obligations and we take all reasonable steps to keep Personal Information you provide to us secure and protected from misuse, interference and loss, as well as unauthorised access, modification or disclosure.

Our security measures include, but are not limited to:

 

  • system passwords;
  • employing firewalls, intrusion detection systems and virus scanning tools to protect against unauthorised persons and viruses entering our systems;
  • using dedicated secure networks and encryptions when we transmit electronic data; and
  • providing secure storage for physical records.

 

Confidentiality agreements for all Emergency Physicians / Doctors and employees of Care 24-7 are in place.

All doctors and nurses are registered with AHPRA and relevant professional boards, who have Codes of Conduct that include confidentiality requirements.

Who do we share your personal information with?

Care 24-7 will not sell or disclose your personal details for any purpose that is not related to your relationship with us. We may share your personal information:

  • with other healthcare providers including other Emergency Physicians and other specialists, your GP, related health service providers including pathology, radiology, or any other medical service providers to provide you with emergency healthcare;
  • when it is required or authorised by law (e.g. court subpoenas);
  • when it is necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent;
  • to assist in locating a missing person;
  • to establish, exercise or defend an equitable claim;
  • for the purpose of confidential dispute resolution process;
  • when there is a statutory requirement to share certain personal information (e.g. some diseases require mandatory notification);
  • during the course of providing medical services, through Electronic Transfer of Prescriptions (eTP), dictation of medical records, MyHealth Record/PCEHR system (e.g. via Shared Health Summary, Event Summary);
  • with third parties who work with our Emergency Department for business purposes, such as accreditation agencies or information technology providers – these third parties are required to comply with APPs and this policy.

We may provide information about your condition to your spouse or partner, parent, child, other relatives, close personal friends, guardians, or a person exercising your power of attorney under an enduring power of attorney or who you have appointed as your enduring guardian, unless you tell us that you do not wish us to disclose your personal information to any such person.

 

Only persons that need to access your information will be able to do so. Other than in the course of providing emergency medical services or as otherwise described in this policy, Care 24-7’s Emergency Department will not share personal information with any third party without your consent.

 

We will not share your personal information with anyone outside Australia (unless under exceptional circumstances that are permitted by law) without your consent.

 

Information regarding any individual experiencing or suspected of experiencing family and domestic violence and abuse will be treated confidentially. Care 24-7 policy and procedures are aligned to national and state government guidelines and ACEM policy.

How do we store your personal information?

Your personal information may be stored in various forms including cloud based format, paper records, electronic records, visual (x-rays, CT scans, videos and photos) and audio recordings or as a combination of forms.

How can you access and correct your personal information at our Emergency Department?

Care 24-7’s Emergency Department acknowledges patients may request access to their medical records. To access your medical records, we require you to put this request in writing and Care 24-7 will respond within 30 working days.

 

Care 24-7 will take reasonable steps to correct your personal information where the information is not accurate or up to date. From time to time we will ask you to verify that your personal information held by Care 24-7 is correct and up to date. You may also request that we correct or update your information, and you should make such requests in writing to Care 24-7 at admin@care24-7.com.au.

Privacy Concerns

Care 24-7 takes concerns about the privacy of patient’s personal information seriously.

Patients should express any privacy concerns in writing to Care 24-7 at admin@care24-7.com.au.

Care 24-7 will attempt to resolve your concern in accordance with our obligations under the Act and within a reasonable time frame and no later than within 30 days after the complaint is made to the Emergency Department.

If you are unhappy with the outcomes of your concerns, you may contact the Office of the Australian Information Commissioner.  Full contact details can be found on the website www.oaic.gov.au.

My Health Record

My Health Record is an online summary of your health information. You control what goes into your record, and who is allowed to access it. For patients who participate in the MyHealth Record program (operated by the Commonwealth Department of Health), Care 24-7 may upload personal information electronically to the MyHealth Record system unless you opt out.  Details on MyHealth Record can be obtained from https://www.myhealthrecord.gov.au.

Changes to the Privacy Statement

From time to time, it may be necessary for Care 24-7 to review and revise its Privacy Policy.
Care 24-7 reserves the right to change its Privacy Policy at any time, and it may notify patients about changes to its Privacy Policy by posting an updated version of the policy document on our website.