Walker Street Doctors Privacy Policy

Introduction

This privacy policy provides information to you, our patient, on how your personal information (which includes your health information) is collected, stored, protected, and used within our practice—including our use of AI-assisted clinical documentation—and the limited circumstances in which we may share it with third parties.

Our practice complies with the Australian Privacy Principles (APPs), the Privacy Act 1988 (Cth), and the recent Privacy and Other Legislation Amendment Act 2024 (Cth). Details of the APPs can be found here:
https://www.oaic.gov.au/privacy/australian-privacy-principles

Why and when your consent is necessary

When you register as a patient of our practice, you are necessarily providing consent for our current GPs and practice nurses to access and use your personal information, purely for the purpose of providing you with the best possible healthcare. Only staff who need to see your personal information will have access to it. All of our receptionists are well versed in the concept of confidentiality and have signed confidentiality agreements.

Why do we collect, use, hold and share your personal information?

Our practice collects and handles your personal information solely to provide comprehensive and complete care for your health and wellbeing. We also use your Medicare card number to assist you with Medicare claims, with your consent.

What personal information do we collect?

We may collect the following:

• Name, date of birth, address, contact details, and next of kin
• Medical history, medications, allergies, immunisations, social and family history, risk factors
• Medicare number (for identification, claiming, and eScript purposes)
• Healthcare identifiers (for eHealth record uploads, if needed for after-hours or emergency care)

Dealing with us anonymously

You have the right to deal anonymously or under a pseudonym in some circumstances. However, it is impractical in a healthcare setting, particularly for prescribing (APP 2).

How do we collect your personal information?

We collect personal information:

• During registration (via HotDoc or in person)
• During consultations and clinical services
• Through eScripts, My Health Record, pathology or radiology requests
• Via email, phone, or online bookings
• From third parties (e.g. specialists, hospitals, community services, Medicare/DVA)

Use of AI Technology in Consultations

We use AI-assisted technology to help with clinical documentation. This digital scribing tool is used only with your explicit consent, operates securely within Australia, and is overseen by your treating GP.

When, why, and with whom do we share your personal information?

We may share your personal information:

• With other healthcare providers for continuity of care
• Via HotDoc (appointment booking/reminders)
• If required by law (e.g. subpoena or statutory reporting)
• To prevent serious threats to public safety
• With the Public Health Unit for notifiable diseases
• Via eScripts or My Health Record (with your consent)

We do not share your information outside Australia. Our cloud services and IT providers are based in Australia and fully compliant with Australian privacy laws.

We never use your personal information for marketing purposes.

How do we store and protect your personal information?

Your records are stored electronically using password-protected systems with secure backups. Security measures include:

• Quarterly password updates
• Secure, encrypted backups
• Up-to-date operating systems and patching
• Secure remote access via WSD-managed laptops
• Industrial-grade shredding for hard copy data disposal
• Data minimisation protocols during email communication
• Use of secure eScripts and PIN-protected results where possible

Reasonable Steps to Secure Data (Amended for POLA 2024)

Walker Street Doctors takes reasonable steps—as now defined under the Privacy and Other Legislation Amendment Act 2024—to protect personal information. These include:

• Technical measures: encryption, access controls, secure remote logins, and vulnerability patching
• Organisational measures: regular staff training on data protection, signed confidentiality agreements, clear internal data handling protocols, and third-party compliance audits

We have a strong culture of cybersecurity, including proactive assessments (e.g., Paraflare audit in 2020) and a standing commitment to exceed industry best practice. All staff and GPs have signed cybersecurity protocols.

Criminalisation of Doxxing (New)

We are committed to protecting your identity and personal information. Under new federal law, doxxing—the intentional publication of personal data to cause harm—is now a criminal offence. Walker Street Doctors enforces a zero-tolerance policy for any such misuse of information.

Data Breach Response Plan (New)

We maintain a formal Data Breach Response Plan to ensure immediate and effective action in the event of a breach. The plan includes:

• Containment and investigation
• Notification to affected individuals and regulators (if required)
• A full review and improvement cycle
  Staff receive regular training and simulations to remain prepared.

Your Rights Under Updated Privacy Law (New Section)

As a patient, you have enhanced rights under the 2024 amendments to Australian privacy law:

• The right to access the personal information we hold about you
• The right to request correction of any inaccurate or outdated information
• The right to transparency in how your data is collected, used, and stored
• The right to pursue legal action for serious invasion of privacy, including misuse or unauthorised access

We are committed to upholding these rights in line with both the Privacy Act and the amended legislation.

How can you access and correct your personal information?

You may request access or correction in writing to your doctor or the Practice Principal. We will respond within a reasonable timeframe and may charge a reasonable fee for access provision.

You’ll also be invited to confirm the accuracy of your information during plan updates and care reviews.

How can you lodge a privacy-related complaint?

Please email us at reception@walkerstreetdoctors.com.au or write to:

Practice Principal
Walker Street Doctors
Shop 4, 111 Pacific Highway
North Sydney, NSW 2060

You may also contact the OAIC:
www.oaic.gov.au | 1300 363 992

Policy Review Statement

This privacy policy is reviewed regularly, including whenever relevant privacy laws change or new technologies are adopted within our practice.