Privacy

Your privacy is important to us

Background

In accordance with the Tasmanian Government legislation and Australian Privacy Principles, Devonport Eye Hospital protects the privacy of personal and health information. The information is held and used only for the purposes intended.

Purpose

To ensure privacy and confidentiality of patient information is maintained.
To ensure patients have the right to request access to their own medical records.
To ensure consent is obtained from consumers for the release of any personal and health information.

Position Statement

The DEH will abide by the 13 Australian Privacy Principles.
The DEH will collect general information for record keeping (name, address, etc.). Sensitive information may be collected about health or disability and will be held in a secure area accessed by authorised staff only employed by the DEH.
Consumers may request to access their medical information. Consumers have the right to access their own information and this can be arranged at a date and time agreeable to both parties within 30 days.
The consumer must give written consent for any personal information held by the DEH for release to a third party.
For some purposes only, such as providing feedback or a complaint made by the consumer will anonymity be acceptable.
Any unsolicited personal information will be destroyed or de-identified.
The DEH will not use or disclose any personal or health information for the purpose of marketing.
All information collected by the DEH will be reasonably necessary for, or directly related to provision of service or care at the DEH.
The DEH will take all reasonable steps to ensure that personal information is accurate, up-to-date, complete and relevant.
The consumer may request the correction, withdrawal or amendment to personal information by making a written request to do so.
All reasonable steps will be taken to store and protect information, whether in paper or electronic format, from loss or unauthorised access.
All personal and sensitive information will be retained in accordance with lawful retention periods.
Information will be destroyed in a safe and secure manner.

Application

This policy applies to all staff employed by the Devonport Eye Hospital.

Audit and Compliance

This policy and all forms relating to Privacy will be audited for compliance.
All staff are required to comply with this policy. Failure to comply without good reason may lead to disciplinary action.

Review

This policy will be reviewed every three years.