Privacy Policy
Policy:
The purpose of the Goulburn River Group Practice’s privacy policy is to inform our patients about how personal information (including health information) is collected and used within the clinic and also the circumstances in which it may be shared with third parties.
Procedure:
Consent: By registering as a patient of the Goulburn River Group Practice, you consent for our doctors and practice staff to access and use your personal information so that they can provide you with the best possible healthcare. Only the staff who need to see your personal information will have access to it. If we need to use your information for anything else, we will seek additional consent from you to do this.
Collection, use and sharing of personal information: The main purpose for collecting, using, holding and sharing your personal information is to manage your health. It is also used for directly related business activities; financial claims and payments, practice audits, accreditation and business processes such as staff training. Your personal information may be collected in different ways. When you first make an appointment, our practice staff will collect your personal and demographic information via your registration. Additionally, during the course of providing medical services, further information may be collected via the electronic transfer of prescriptions or My Health Record. In some circumstances, personal information may also be collected from other sources usually when it is not practical or reasonable to collect it from you directly. This may include information from your guardian, other healthcare providers (specialists, allied health professionals, hospitals, community health services, pathology, diagnostic imaging services, your health fund, Medicare or the Department of Veteran’s Affairs).
Information that is collected: The information that is collected includes your name, date of birth, address and contact details. We also request medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors. Additional information gathered will include your Medicare number (for identification and claiming purposes), healthcare identifiers and health fund details.
The right to deal with us anonymously: You have the right to deal with us anonymously or under a pseudonym unless it is impracticable for us to do so or unless we are required or authorised by law to only deal with identified individuals. When, why and with whom i s your personal information shared: At times your personal health information will be shared with third parties who work with our practice for business purposes, with other healthcare providers, when it is required or authorised by law, when it is necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, when it is impractical ot obtain the patient’s consent, when there is a statutory requirement to share certain personal information, or during the course of providing medical services (e.g.: electronic transfer of prescriptions, My Health Record). Only people who need to access your information will be able to do so. Other than in the course of providing medical services, or as otherwise described in this policy, our practice will not share personal information with any third party without your consent. Al transfer of information regarding your personal health information is done so in a secure and confidential manner.
Storage and protection of personal health information: Our practice stores your information electronically and securely in protected information systems requiring specific password access. Confidentiality agreements for staff and contractors are also in place. Your personal health information is securely and confidentially destroyed when no longer required.
How to access your personal information: You have the right to access your personal information. This request is to be made in writing and addressed to the Practice Manager. A response will be made within 30 days and a fee for accessing this information will apply. The fee will be dependent on the amount of information and the time involved to compile it. Our practice will also take reasonable steps to correct your personal information where the information is not accurate or up to date. Occasionally we will ask you to verify that your personal information held by this clinic is correct and current. You may also request that we correct or update your information either verbally or in writing with the reception staff.
How to lodge a privacy-related complaint: The Goulburn River Group Practice takes complaints and concerns regarding privacy very seriously. Please place your privacy concerns in writing addressed to the Practice Manager (Goulburn River Group Practice, P.O. Box 599, Seymour. 3660) and we will attempt to resolve it within 30 days. You may also contact the OAIC in accordance with their website or telephone 1300 363 992. The Victorian Health Service Commissioner has an external complaints facility which can be accessed at https://hcc.vic.gov.au or telephone 1300 582 113.
Policy review: This privacy policy will be reviewed regularly to make sure that it is in accordance with any changes that may occur. Patients may access the displayed privacy policy in the clinic waiting room.
Updated: September 2021