privacy policy.
We are committed to ensuring the privacy of our patient’s sensitive health information. We expect all staff to meet their obligations to collect, hold, use, and disclose health information in accordance with the:
- Health Information Privacy Code 2020.
- Health (Retention of Information) Regulations 1996.
- Privacy Act 2020.
We have systems in place to maintain patient privacy and confidentiality:
- A robust IT security policy keeps information secure.
- Health information is stored within a secure and purpose-built practice management system.
- Records being transferred reach the correct person.
- Patient information is disclosed with consent and in accordance with legislation.
- Our physical environment is set up so health information can’t be seen or overheard.
- Health information is collected, used, and stored in accordance with legislation.
- Significant privacy breaches are reported to the Privacy Commissioner | Te Mana Mātāpono Matatapu and the affected parties.
- All new staff receive training about confidentiality, the Privacy Act 2020 and their corresponding obligations at the practice during their induction.
Privacy officer.
We have designated privacy officers to oversee all privacy-related matters and concerns.
The privacy officers:
- Ensure we comply with the Privacy Act 2020, e.g. by making sure that staff receive privacy training and understand and comply with their obligations and responsibilities to patients.
- Deal with requests for personal information.
- Authorise release of patient information to third parties.
- Advises team members on privacy-related issues.
- Manage any complaints about privacy breaches.
- Ensure staff with access to patient information have signed confidentiality agreements.
- Ensure contractors and other visitors complete a confidentiality form.