Privacy Act

The Privacy Act 1988 is Australian legislation governing how covered organisations handle personal information. Health information receives particular protection because it is sensitive. Private health service providers are generally covered even when they are small businesses, while public-sector health services may also be subject to state or territory privacy laws.

What does this mean for a telehealth patient?

A provider should explain how it collects, uses, stores and discloses information through its privacy arrangements. Identity checks, clinical records, messages and uploaded documents can all contain sensitive information. Ask which channels are appropriate for sharing records and whether a support person can access them.

Privacy does not mean information can never be shared. Consent, care arrangements and legal exceptions can affect disclosure. A provider should be able to explain the basis for sharing rather than relying on a vague claim that everything is either public or absolutely secret.

For the Australian guidance behind this explanation, see Office of the Australian Information Commissioner: What is a health service provider? - OAIC.

Can I access or correct my information?

Privacy law provides rights concerning access and correction, subject to applicable conditions and exceptions. Ask the provider about its process. A request to correct a factual error is different from asking a clinician to erase a professional opinion from the historical record.

Keep the request specific and use the official channel. You may need to verify identity before records are released. The service can explain any lawful limits, timeframes or charges that apply.

What if I think my information was mishandled?

Raise the concern with the provider where appropriate and keep relevant correspondence. The Office of the Australian Information Commissioner and relevant state bodies explain complaint pathways within their jurisdiction. A privacy complaint is separate from obtaining urgent clinical care.

Read Doccio's privacy policy for its actual practices. This glossary explains general concepts and does not replace that policy or confirm a specific disclosure is lawful. Avoid sending health information to unverified addresses or sharing prescription tokens publicly.

Where to go next

Read privacy information to understand the relevant service. A doctor decides whether a consultation, examination, referral or another pathway is appropriate for your situation.