We abide by the National Privacy Principles. We respect the privacy of the individual and adhere to the principles with regard to the treatment of the Clients personal information.

Privacy Legislation has set National standards in Privacy/Confidentiality for health related employees and employers.

It is important that you are aware of the principles now laid out, in relation to information that you record, both on the intake form and on notes that are made by support staff, office staff and files.

The Privacy Principles are summarised as follows:

Collection of information

• Collect only the information necessary to deliver the health service
• Collect lawfully, fairly and  not intrusively; and
• Obtain a person’s consent to collect health information about them.

Use and Disclosure
A health service provider may use or disclose health information :

• For the main reason it was collected; or
• For directly related secondary purposes, if the consumer would reasonably expect these; or
• If the consumer gives consent to the proposed use or disclosure; or
• If one of the other provisions under this principle applies.

Promote a common understanding about privacy of health information.

Data Quality

Health providers are required to take reasonable steps to keep health information up to date., accurate and complete.
Health service providers should maintain data quality and integrity

Data Security

This principle requires that health service providers take reasonable steps to protect and secure health information from loss, misuse and unauthorised access.  Information that is no longer needed should be destroyed.
Health service providers should protect information against security risks

Openness

Health service providers need to be open about how they handle health information. A provider must developed a document for consumers, which clearly explains how their organization handles health information.  The document must be made available to anyone who asks for it.

Fewer surprises about handling health information leads to fewer privacy complaints

Access and Correction

Consumers have a general right of access to their own health records.

Access can only be denied in certain circumstances – for instance where access can pose a serious risk to a person’s life or health.
Also consumers can ask for information about them to be corrected, if it is inaccurate, incomplete or out of date.  The providers will need to take reasonable steps to correct information.

Consumers have a general right of access to their own health records

Identifiers

There are restrictions on how Commonwealth government identifiers, such as Medicare number or Veterans Affairs number, can be adopted, used or disclosed.  At present, a health provider is not permitted to adopt these identifiers for their own record keeping systems.  These identifiers may only be used or disclosed for the reasons they were issued or if other provisions under this principle apply.

Anonymity

Where lawful and practicable. Consumers must be given the option to use health services without identifying themselves.

Trans-border data flows

If health information needs to be transferred out of Australia, this may occur if laws (or a scheme) with similar privacy protection to these principles bind the recipient.  Otherwise health information should only be transferred with the consumer’s consent, or if other provisions under this principle apply.

Complaints

Complaints about alleged breaches of privacy can be made to the Federal Privacy Commissioner.  The Commissioner can investigate, conciliate and, if necessary, make determinations about complaints.  However, the Commissioner will not investigate, unless the complainant has first complained formally to the health service provider concerned.

Guidelines on Privacy in the Private Health Sector

The Privacy Commissioner’s Guidelines on Privacy in the Private Health Sector and information sheets are available on the following web site. Please familiarise yourself with the Guidelines and obtain the information sheets.

www.privacy.gov.au

Suncare Community Services Inc. collects and administers a range of personal information for the purposes of [insert purposes]. The organisation is committed to protecting the privacy of personal information it collects, holds and administers.

Suncare Community Services Inc. recognises the essential right of individuals to have their information administered in ways which they would reasonably expect – protected on one hand, and made accessible to them on the other.  These privacy values are reflected in and supported by our core values and philosophies.

Suncare Community Services Inc. is bound by Queensland Privacy Laws, the Information Privacy Act 2000, as well as other laws, which impose specific obligations when it comes to handling information. The organisation has adopted the respective Privacy Principles contained in the Queensland Privacy Laws as minimum standards in relation to handling personal information.

In broad terms this means that we:

• Collect only information which the organisation requires for its primary function;
• Ensure that stakeholders are informed as to why we collect the information and how we administer the information gathered;
• Use and disclose personal information only for our primary functions or a directly related purpose, or for another purpose with the person’s consent;
• Store personal information securely, protecting it from unauthorised access; and
• Provide stakeholders with access to their own information, and the right to seek its correction.

• The organisation’s Committee/Committee of Management is responsible for adopting this policy.
• The organisation’s Committee/Committee of Management, Coordinator (Manager) and all staff members, contractors and volunteers are responsible for the implementation of this policy.
• The organisation’s Coordinator (Manager) is responsible for monitoring changes in Privacy legislation and for reviewing this policy as and when the need arises.

Confidentiality and Privacy in practise incorporates but is not limited to:

• Sharing only information with others with clients clear consent (recorded)
• Only sharing information that is relevant to providing a quality service. Eg- Support worker may need to know about health conditions impacting on care but not that the person is living in housing commission
• Staff engaging with a clients information on a need to know basis – eg- a support facilitator that is actively working with a client request, not another support worker or administration
• Don’t discuss with other service providers or family unless the person is aware and consent is clearly provided and recorded. Eg- a service provider associated with the client asks you information in a casual forum not related directly to a service
• Ensuring security of information in all circumstances. Eg- Client files are locked in a bag in the boot of a car. Is final necessary? Are any personal notes secured?
• Is environment conducive to confidentiality. Ie- can other people overhear or see information, especially in open office environments or in public
• Is transfer of information safe? Ie- Who will receive it at destination and when
• Are files locked and secured (database and paper)
• If in doubt check with client or manager. There can be serious consequences for clients lives, Suncare and yourself if confidentiality is breached.
• Following our policy and procedures upholds clients rights and covers you