In compliance with the Privacy Amendment (Private Sector) Act 2000, we have developed a Privacy Policy that governs the handling of your personal information.

"Personal Information means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent or can reasonably be ascertained, from the information or opinion."  (Source: P57 Guidelines on Privacy in the Private Health Sector, Office of the Federal Privacy Commissioner – October 2001).

Our Privacy Policy governs: 

• What personal information is being collected
• Who is collecting personal information
• How personal information is being used
• To whom and under what circumstances personal information is disclosed
• How personal information is stored

In most circumstances, we at the Corowa Medical Centre will:

• Only collect personal information about you with your consent (unless legally required or authorized to do otherwise)
• Collect your personal information directly from you (where possible and practicable)
• Only collect personal information about you that is necessary and relevant to the purpose for which it is collected
• Use staff to collect your information who are appropriately trained and have a specific role in the purpose for which your personal information is being collected
• Only use your personal information for the purpose for which it is collected or for a directly related secondary purpose that you would expect your personal information to be used for (unless legally required or authorised to do otherwise)
• Provide you with access to your personal information (unless legally required or authorized to do otherwise). A small reasonable administration fee may be levied to provide such access
• Only disclose your personal information to a third party with your consent, or where you expect such disclosure, or where legally we are required or authorised to do so
• Take reasonable steps to keep your personal information complete, current and accurate, and to ensure that your personal information is kept secure
  

Patient access to personal health records request

You are entitled to access your own health records at any time that is convenient to both yourself and the practice and provided the steps listed below are followed.  A small reasonable administration fee may be levied to provide such access

Access can be denied where:

• To provide access would create a serious threat to life or health
• There is a legal impediment to access
• The access would unreasonably impact on the privacy of another
• Your request is frivolous or vexatious
• The information relates to anticipated or actual legal proceedings and you would not be entitled to access this information in those proceedings
• In the interests of national security

Handling Requests for Information

• We ask that your request be in writing. There will be a small charge for photocopying and staff time involved in processing your request.  Should you dispute the accuracy of the information we have recorded, you are entitled to correct that information.
• It is policy to take steps to record all your information.  It is practice policy to record all your corrections and place them in your file, but we cannot for legal reasons, erase the original record
• A patient's request for access should be scanned and kept on the patient's file and all requests should be referred to a director.
• The request should be completed within a reasonable time, taking into account the patient needs, and should not ordinarily exceed 30 days.
• Patients should be made aware of the costs charged.
  

This may involve:

• Doctor's time to review the file to ensure that no other patients are harmed by the disclosure,
• Administrative and staff costs involved in photocopying
  

Please contact our General Manager 02 6033 1211 if you require more information.