PRIVACY POLICY
Home > Privacy Policy
Introduction
We are committed to protecting the privacy of patient information and to handling your personal information in a responsible manner in accordance with the Privacy Act 1988 (Cth) and its amendments, and the Health Records and Information Privacy Act 2002 (NSW) (referred to as privacy legislation).
This Privacy Policy explains how we collect, use, store and disclose your personal information, how you may access that information and how you may seek the correction of any information. It also explains how you may make a complaint about a breach of privacy legislation.
This policy is current from March 2018. From time to time we may make changes to our policy, processes and systems in relation to how we handle your personal information, without notice. We will update this Privacy Policy to reflect any changes. Those changes will be available for you in the practice.
Melanoma Dermatology: what we do and how we use your personal information
We are a private medical practice that specialises in diagnosis and management of melanoma and related skin conditions. The practice has consulting rooms in suite 8, level 3 of the Melanoma Institute Australia, Wollstonecraft, Sydney.
The practice is affiliated with the Melanoma Institute Australia, Sydney Melanoma Diagnostic Centre and the University of Sydney. Our specialists hold accreditation at various public and private hospitals in New South Wales.
The practice actively participates in melanoma research and clinical trials by providing information and data.
Melanoma Dermatology is a medical services business. We provide management, facilities, administrative and nursing services to independent medical practitioners who run their own independent business from our practice. These practitioners have agreed to fall under and abide by our Privacy Policy and framework.
Melanoma Dermatology uses your personal and health information:
-
to provide healthcare services to you;
-
to appropriately manage our practice, undertake accreditation processes, manage billings and train staff;
-
to effectively communicate with third parties, including other medical practitioners, private health insurers, Medicare Australia and other government departments; and
-
for research, audit, quality assurance, teaching and education, in order to improve current methods of diagnosis and treatment. Only de-identified information is utilised for these purposes.
De-identified disclosure requires removal of personal identifiers (name, address, date of birth, or other identifying information) and other information which may allow you to be identified.
Collection of your information
We collect personal details such as your name, address, date of birth, gender, family history, next of kin, and contact details. Your racial or ethnic origin may be collected, where this pertains to a relevant patient care question. Health information includes your medical history, past and current treatments, lifestyle factors and any other information which is necessary to assist us in providing you with appropriate care. We may collect the names of other health care providers involved in your care, and copies of relevant referrals, reports, results and samples. We may collect medical images, such as medical photography. We will also collect your Medicare number and private health insurance details. This information may be stored on our computer medical records system and/ or in hand written medical records.
Wherever practicable we will collect information from you personally. However we may also need to collect information from other sources such as general practitioners, treating specialists, radiologists, pathologists, hospitals, other health care providers, next of kin and MyHealth Record to assist in your medical care. We often require health information from other specialist medical practices within the Melanoma Institute Australia and affiliated health services.
We collect information in various ways such as over the telephone, fax, email, in writing, in person in our rooms in suite 8, or over the Internet if you transact with us online. We may request information from other medical services by email. This information may be collected by medical and administrative staff.
Medical photography
With your consent, we utilise photographs to assist in your health care. These include total body photographs, clinical photographs and dermoscopic photographs. These photographs form part of your legal medical record.
Dealing with unsolicited information
If we receive personal information that our practice did not solicit, we will determine whether it could have been collected in the usual way and if not then it will be destroyed in accordance with the Australian Privacy Principles.
Anonymity and pseudonymity
Wherever it is lawful and practicable you have the option to request that we deal with you under a pseudonym or anonymously. However it may be necessary for us to collect your personal or sensitive information for your health care treatment. It is important to be aware that if you provide incomplete or inaccurate information or withhold information we may not be able to provide you with healthcare services, or the treatment you require.
Disclosure of your information
We treat your personal information as strictly private and confidential. We will only use or disclose your information for purposes directly related to your care and treatment, or in ways that you would reasonably expect that we would use it for your ongoing care and treatment. For example, the disclosure of histopathology results to your referring doctor or your medical history in requests for diagnostic testing. We disclose your personal information to healthcare professionals directly involved in your treatment, for example specialist medical practices within the Melanoma Institute Australia. We may discuss your case for quality assurance purposes at the Melanoma Institute Australia weekly multidisciplinary team meeting.
We may transmit information by mail, fax, electronic delivery, email or upload to your My Health Record if you have one.
Where your medical records are required in the case of a medical emergency, we will provide these to the relevant medical professional without waiting for your consent, where we believe this is in your interests.
We may disclose information about you to outside contractors to carry out activities on our behalf, such as an IT service provider, medical transcription service, medical photography software provider, accountant, solicitor or debt collection agent. We impose security and confidentiality requirements on how they handle your personal information. Outside contractors are required not to use information about you for any purpose except for those activities we have asked them to perform.
We will not use your information for another purpose unless you have given consent (for example, the Melanoma Research Database) or if one of the exceptions under the Privacy Act applies. For example, if the use of the information is authorized by Australian law or is necessary for law enforcement by an enforcement body. Your personal information may also be provided to third parties if we are legally obliged to do so by a court subpoena, statutory authority, search warrant, coronial summons or to defend a legal action.
We may provide your personal information to third parties involved in your care, such as:
-
government departments and agencies, such as Defence or Department of Veterans Affairs, or departments responsible for health, aged care and disability where we are required to do so;
-
private health insurers and Medicare Australia;
-
anyone authorised by you to receive your personal information
The Melanoma Institute Australia may access some personal and health information from the Practice Management software via Middleware for audit purposes and financial reports.
The lease requires Melanoma Dermatology to permit representatives of the head-lessor, St Vincent’s and Mater Health Sydney Limited, to inspect patient records to confirm compliance with the Ethics Standards for Catholic Health and Aged Care Services in Australia.
Further consent will be obtained if your information is used for any purpose other than set out in this document.
Data Quality and Security of your information
We will take reasonable steps to ensure that your personal information is accurate, complete, up to date and relevant. For this purpose our staff may ask you to confirm that your contact details are correct when you attend a consultation. We request that you let us know if any of the information we hold about you is incorrect or out of date.
We hold personal information in paper-based and electronic records and systems. Personal information may be collected in paper-based documents and converted to electronic form for storage (with the original paper-based documents either archived or securely destroyed).
We take reasonable steps to protect your personal and sensitive information held by us from misuse, interference, unauthorized access, modification, loss or disclosure. This includes during collection, processing, transfer, storage and destruction of the information, whether your records be in hard copy or electronic form.
Personal information that we hold is protected by:
-
Securing our premises
-
Placing user identifiers, passwords and varying access levels on databases to limit access and protect electronic information from unauthorized interference, access, modification and disclosure
The Information and technology services, including medical record and practice management software, are provided to the practice and maintained by the Melanoma Institute Australia. These also include virus controls, firewalls, encryption, data hosting and back up. These services are provided by independent specialist IT contractors.
In the event of a data breach we will use our Data Breach Response Plan and comply with the data breach notifications scheme under the Privacy Act.
Destruction of records
We are required by law to retain medical records for certain periods of time, depending on your age at the time we provided medical services and if you were participating in a clinical trial.
When we are no longer required to retain your personal information we will take reasonable steps to securely destroy the information.
Corrections
If you believe that the information we have about you is not accurate, complete or up-to-date, we ask that you contact us in writing (see contact details below).
Access to Your Medical Record
We encourage you to contact us if you have a query regarding your personal information. You are entitled to request access to your medical records. We request that you put your request in writing and we will usually respond to it within 30 days.
There may be a fee for the administrative costs of retrieving and providing you with copies of your medical records.
We may deny access to your medical records in certain circumstances permitted by law, for example, if disclosure may cause a serious threat to your health or safety, or if it would interfere with the privacy of others. We will always give you a written explanation of why access is denied and the options you have to respond to our decision.
Sending Data Overseas
Melanoma Dermatology does not engage with any overseas entities or persons where your personal information will be transferred, stored or disclosed. Should we wish to transfer your personal information overseas, we will ask for your consent before we do so.
We may send information abroad, for example to international experts, when deemed necessary in your treatment.
The Spam Act 2003
The Spam Act 2003 prohibits sending unsolicited emails, SMS and MMS messages for commercial purposes.
Dermatology will send appointment reminders via SMS. If you do not wish to receive communication via SMS you may opt out by advising the practice.
Participation in research and clinical trials
As an affiliate of the Melanoma Institute and the University of Sydney, Melanoma Dermatology actively participates in medical research and clinical trials. Clinical trial activity undergoes approval by an Ethics Committee.
We will always request your permission to be involved in such research before we release any personal information to third party researchers. Your clinician will explain the purpose of the research or trial and ask that you sign a consent form before you can participate.
We may use your de-identified health information for research and audit purposes, in order to improve diagnosis and treatment of melanoma and related conditions.
Melanoma Research Database
The Melanoma Research Database (MRD) is administered by MIA and the use of data is explained in The Privacy Policy of MIA which can found on the MIA website www.melanoma.org.au. Melanoma Dermatology provides patient information to the MRD but this is only provided with your consent.
Definitions
In this Privacy Policy, we use the terms:
"Personal information" as defined in the Privacy Act. This means:
"information or an opinion about an identified individual, or an individual who is reasonably identifiable:
-
whether the information or opinion is true or not; and
-
whether the information or opinion is recorded in a material form or not";
“Health information" as defined in the Privacy Act. This is a subset of "personal information" and means information or an opinion about:
-
the health or a disability (at any time) of an individual; or
-
an individual's expressed wishes about the future provision of health services to him or her; or
-
a health service provided or to be provided to an individual.
“Health information” is classified as “sensitive information” under the Privacy act, and is subject to additional mechanisms for your protection.
Complaints and enquiries
Melanoma Dermatology is committed to the protection of your privacy. If you have any questions about how we handle personal information, would like to complain about how we have handled your information or would like further information about our Privacy Policy, please submit a written query or complaint to our Privacy Officer.
Privacy Officer / Practice manager
Ph: 02 9911 7277
Email: dermatology.manager@melanoma.org.au
Post: The Practice Manager
Suite 8, Level 3
Poche Centre, 40 Rocklands Rd
Wollstonecraft NSW 2065
Our Privacy Officer will address your complaint and liaise with you to resolve the issue within a reasonable time (usually two weeks). If you are unhappy with the outcome you may lodge a complaint with the Australian Information Commissioner to review. www.oaic.gov.au/individuals/how-do-i-make-a-privacy-complaint for further information.