Privacy and Confidentiality Policy
1. Purpose
Annadale Family Medical Centre is committed to protecting the privacy and confidentiality of patient information. This policy explains how personal and health information is collected, used, stored, accessed and disclosed within the practice.
2. Scope
This policy applies to all employees, contractors, practitioners, nurses, allied health practitioners, students and other persons who may access patient information through the practice.
3. Collection of Information
- The practice collects information necessary to provide healthcare, manage appointments, communicate with patients, process billing and meet legal or professional obligations.
- Information should be collected fairly, respectfully and only to the extent reasonably necessary.
- Patients are informed, where appropriate, about why information is being collected and how it may be used.
4. Use and Disclosure
Patient information is used primarily for the provision and coordination of healthcare and related practice functions. Information is only disclosed where the patient has consented, where disclosure is reasonably expected and permitted for healthcare purposes, or where disclosure is otherwise authorised or required by law.
5. Confidentiality
- Patient information must not be accessed without a legitimate work-related need.
- Discussions about patients should occur privately and only with people involved in the patient's care or authorised practice functions.
- Printed records, screens, emails and other communications must be handled securely.
- Staff must continue to maintain confidentiality after leaving the practice.
6. Patient Access and Correction
Patients may request access to their health information or ask for inaccurate information to be corrected. Requests are managed through the Practice Manager and treating practitioners in accordance with applicable privacy, legal and professional requirements.
7. Data Security
The practice uses secure electronic systems, individual user access, passwords and other controls to protect patient information. Access is restricted according to role and need. Suspected privacy breaches must be reported promptly to the Practice Manager.
8. Patient Information
Information about the practice's privacy arrangements is made available to patients through written or digital privacy information and on request. Privacy enquiries are directed to the Practice Manager.
Document Control
- Version: 1.0
- Effective date: September 2026
- Next review: September 2028
- Document owner: Practice Manager