Yarram and District Health Service (YDHS) is committed ensuring the privacy and confidentiality of all patient, client, employee, business and health service-related information.
We manage this information in accordance with state and federal legislation and regulation including the:
- Federal Privacy Act 1988;
- Information Privacy Act 2000 (Vic);
- Health Record Act 2001 (Vic);
- Health Services Act 1988;
- Freedom of Information Act 1982 (Vic);
- Mental Health Act 2014;
- Privacy and Data Protection Act 2014 (Vic);
- Family Violence Act 2008 (Vic); and
- Child Wellbeing and Safety Act 2005 (Vic).
In addition, all patient, client, business and health service-related information is managed in accordance with the Health Privacy Principles, which are designed to protect privacy and promote individual autonomy. The principles are outlined below.
1. Open and transparent management of personal information
All personal information collected, stored, used, released and destroyed by YDHS complies with all Victorian legislation relating to privacy and confidentiality.
2. Anonymity and pseudonymity
Where it is lawful and practicable, consumers, clients and patients have the option of not identifying themselves when accessing services within the Health Service.
3. Collection of solicited personal information
YDHS will only collect health and personal information that is necessary to assess and treat the health condition of the patient and to fulfil administrative and statutory requirements.
Confidential patient information is only to be accessed and used by members of the healthcare team directly involved in the care and treatment of the patient.
4. Dealing with unsolicited personal information
Unsolicited personal information that could not have been collected under Principle 3, must be destroyed or de-identified as soon as practicable if it is lawful and reasonable to do so.
5. Notification of the collection of personal information
Where reasonable and practicable to do so, YDHS will collect the Personal Information only from the patient. However, in some circumstances YDHS may be provided with information by third parties. In such a case YDHS will take reasonable steps to ensure that the patient is made aware of the information provided to YDHS by the third party.
6. Use or disclosure of personal information
YDHS shall only use or disclose personal information where the use or disclosure of the information is for the purpose of providing care and treatment to consumers and for purposes directly related to providing such care and treatment; and for quality and safety purposes.
7. Direct marketing
Yarram and District Health Service will not use patient information for any direct marketing.
8. Cookies & Applets
9. Cross-border disclosure of personal information
When required to transfer health information to organisations outside of Victoria from the provision of care and treatment this will only be done when consent has been obtained, and the receiving organisation is subject to binding privacy obligations similar to the ones which Yarram and District Health Service is obligated.
10. Principle Nine: Adoption, use or disclosure of government related identifiers
Yarram and District Health Service will only assign identifiers to consumers if the assignment of identifiers is reasonably necessary to enable the Health Service to carry out any of its functions efficiently.
11. Quality of personal information
Yarram and District Health Service will endeavour to make sure that the information held is accurate, complete and up to date.
12. Security of personal information
Personal information kept in electronic and hard copy is controlled, monitored and restricted to relevant staff and authorised external users only. Security safeguards are in place to ensure information is protected against loss, unauthorised access or misuse.
13. Access to personal information
Patients seeking access to, or correction of, their health information must do so in writing under the Freedom of Information Act 1982.
14. Correction of personal information
Staff are required to update and confirm patient details on each contact at any department within the Health Service.
Yarram and District Health Service is required to take reasonable steps to correct personal information it holds if the personal information is incorrect and / or when an individual requests YDHS to do so.
For further information about YDHS’ Privacy and Confidentiality Policy please contact us on 03 5182 0222.