Definitions:
Patient File - means the whole of the information including contact information, medical records, attachments and any other information relative to the patient.
Patient Record - means the medical record or history of the patient collected at your 1st appointment by a healthcare professional and history and all information added to the record by treating healthcare professionals.
You acknowledge your understanding of our Privacy Policy when you submit or complete any form provided to you via City Clinic's websites or any persons employed by City Clinic.
Our Privacy Policy ensures your patient file is maintained with the greatest care for security, accuracy and privacy and that it complies with all current State and Federal Privacy Legislation.
We will not sell or otherwise provide your personal information to a third party or make any other use of personal information for any purpose which is not specifically allowed under this Policy or is not incidental to the normal use of our services.
Your patient file and any information contained in your patient file, including: contact information, the patient record (medical history) and any relevant attachments cannot be removed from City Clinic secured servers to any other location without written authority, provided by you, to Robab Pty Ltd (Licensor TM City Clinic).
After paying your account we do not retain any credit / debit card or other payment method information.
Your patient file is created by our reception staff from information you provide on City Clinic owned forms prior to (online) or when you attend your first appointment. As an additional security measure, after your patient file is created on our computer system all contact information is greyed out providing access only to your name and date of birth. Your patient record (medical record or history contained within the patient file) is required to be created and maintained on our computer system by your treating healthcare professional(s) incorporating all appropriate information to provide a full understanding of your medical history relevant to a medical or health practitioner (example referring doctors, specialists, other healthcare workers).
These records and specific attachments (consent forms, doctor or other health professional referrals, imaging and diagnostic reports etc.), your name and date of birth are the only items in your patient file available to healthcare professionals at City Clinic. Whilst these parts of your file are only available to healthcare professionals they are jointly owned by the health professionals who create or contribute to the record and City Clinic and must be maintained for a period of seven years from your last visit to City Clinic. However regardless of any ownership in part or whole of the patient record none of this information nor any contact information can be removed from City Clinic by any person without your written authority or a court order provided to the owners of City Clinic.
Health Records and Information Privacy Act 2002 entitles you to request access to your patient record. Under the Act City Clinic is required to see evidence of your or your agents’ identity and a written authority from you to copy any information contained in your patient record before providing it to any person or organisation authorised by you. City Clinic is entitled to charge a reasonable administration fee for providing a copy of any requested information.
Soliciting or in any other way obtaining, copying or downloading your contact information for the purposes of removing it from City Clinic or removing any other part of your patient file by any person, including management, employees and sub-contractors or any other person provided lawful access to City Clinic premises, without your written authority to do so, is a breach of the Privacy Act 1998, our Privacy Policy with you and all City Clinic employment / contractor agreements written or otherwise agreed. All management, employees, locums, healthcare contractors and any other person, provided lawful access to City Clinic, are automatically bound by this Privacy Policy when they work for or enter City Clinic premises.
All City Clinic practitioners are bound by enforceable restrictive covenants while working at City Clinic and for 12 months following termination of their agreements with City Clinic unless they have otherwise agreed a variation of their agreements with the owners of City Clinic. These covenants include City Clinic healthcare professionals not practicing within a radius of 2 klms of any City Clinic location and not to solicit or persuade any patient who has obtained medical or health services at City Clinic to follow them to another location or cease obtaining medical or health services at City Clinic.
Under the guidelines of the Office of the Australian Information Commissioner (OAIC) City Clinic is required to notify you immediately if there is any breach or suspected breach of your patient file or any part of your patient file. As of March 2014 notification of any breach is mandatory and at the discretion of the Privacy Commissioner City Clinic and or persons responsible for any breach may be liable to heavy fines by the OAIC (Privacy Amendment - Enhancing Privacy Protection Bill 2012). In the unlikely event a breach or suspected breach occurs notification to you may be by SMS, e-mail or post.
All City Clinic owned websites and centres provide forms that may ask you to provide contact information and other information so that we may deal with your health related requirements, queries, online appointments or requests to receive information that is relevant to you. Some non-personal information may be collected, via these forms, to assist City Clinic manage patient expectations. This information is kept anonymously and with no cross reference to you.
We may use contact information you provide to SMS or e-mail appointment reminders to help prevent you missing appointments.
We may also use your contact details to provide information about City Clinic such as notification of new services, updates, birthday or welcome cards, invite feedback on our services, newsletters, conduct surveys on possible future initiatives or request a vote for City Clinic in the Annual Sydney or Telstra Business Awards.
If you wish to opt out of receiving SMS, e-mail appointment reminders or any other communications please check the appropriate boxes on the patient information form prior your first appointment. If you have completed the form and not checked the related box you can always opt out by informing reception via our contact us form (See drop down in 'Online Forms' at cityclinic.com.au).
If there are changes to your contact information please visit and complete our 'Patient Data Change Form' (See drop down in 'Online Forms' at cityclinic.com.au).
If you have any questions about this Privacy Policy or information provided on our websites, please feel free to contact us.
References:
OAIC Data Breach Notification April 2012
OAIC Reasonable steps’ to protect personal information April 2013
OAIC Australian Privacy Principles and Information Privacy Principles April 2013
OAIC Australian Privacy Principles and National Privacy Principles April 2013
OAIC Guide to information security summary April 2013
Health Records and Information Privacy Act 2002
Privacy Amendment (Enhancing Privacy Protection) Bill 2012
©2013 City Clinic®. All Rights Reserved.
Robab Pty Ltd (Licensor TM City Clinic®).