Primacy Care is committed to providing quality services and respecting your rights. Your right to privacy and confidentiality will be recognized, respected, and protected in all aspects of your contact with us. This statement outlines our ongoing obligations to you in respect to how we manage your Personal Information.

Primacy Care complies with the requirements of the Privacy Act 1988 (Cth) as well as: Privacy and Personal Information Protection Act 1998 (NSW), Health Records and Information Privacy Act 2002 (NSW), Privacy Committee of South Australia Information, Privacy Principles – PC012 Information Privacy Principles Instruction (SA), Privacy and Data Protection Act 2014 (Vic), Health Records Act 2001 (Vic), Information Privacy Act 2009 (Qld).

What is Personal Information and why do we collect it?

Personal Information is information or an opinion that identifies an individual. Personal Information includes Health Information, which is information about the physical or mental health or disability of an individual.

Examples of Personal Information we collect includes but is not limited to:

• Contact details for participants and their representatives
• Details for emergency contacts and people authorized to act on behalf of participants
• Participants’ health status and medical records
• Medication records
• Service delivery intake, assessment monitoring and review information
• Assessments, reviews, and service delivery records
• External agency information
• Feedback and complaints
• Incident reports
• Consent to photograph for marketing purposes
• Consent forms

We collect your personal Information in many ways, which are including but not limited to: interviews, correspondence, by telephone, by email, via our website, from other publicly available sources and from third parties.

Primacy Care will only request and retain Personal Information that is necessary to:

• assess your eligibility for support
• provide safe and responsive support
• monitor the supports provided and
• fulfil contractual and other requirements to provide non-identifying data and statistical information to government agencies

When we collect Personal Information, we will explain to you why we are collecting the information and how we plan to use it.

Third Parties

Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties (such as other disability services). In such cases we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.

Disclosure of Personal Information

Your Personal Information will only be disclosed:

• to prevent or lessen a serious and imminent threat to the life or health of you or another person
• to outside agencies with your or your representative’s permission
• with written consent from a person with lawful authority or
• when required by law, or to fulfil legislative obligations such as mandatory reporting

Security and Destruction of Personal Information

Your Personal and Health Information will be stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure.

When your Personal and Health Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify it.

We will retain and dispose of your Personal and Health Information in accordance with our Privacy and Confidentiality Policy and Procedure [or equivalent].

Access to your Personal Information

You may access the Personal or Health Information we hold about you, including to update or correct it, subject to certain exceptions. If you wish to access your Personal or Health Information, please speak to a staff member.

In order to protect your Personal or Health Information we may require identification from you before releasing the requested information.

You have the right to:

• request access to personal information we hold about you
• access this information and
• make corrections if you consider the information is not accurate, complete, or up to date

However, access may be denied in part or in total where:

• the request is frivolous or vexatious
• providing access would have an unreasonable impact on the privacy of other individuals
• providing access would be likely to prejudice an investigation of possible unlawful activity
• providing access would pose a serious and imminent threat to the life or health of any individual and
• denying access is required or authorised by or under law.

We aim to address all requests to access or correct information within 5 working days. We will not charge any fee for your access request but may charge an administrative fee for providing a copy of your information.

Maintaining the Quality of your Personal Information

It is an important to us that your information is up to date. We will take all reasonable steps to make sure that your Personal Information is accurate and complete. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.

Complaints and Enquiries

If you have any queries or complaints about this Privacy Statement, please lodge them:

• directly with a staff member, either verbally or by providing a completed Feedback, Compliments and Complaints Form
• by email to: info@primacycare.com.au
• by phone on: 1800 774 622
• in writing to: 105/1060 Thompsons Road, Cranbourne West, 3977, VIC

Supporting Documents

Documents relevant to this policy:

• Participant Rights and Responsibilities Policy and Procedure
• Records and Information Management Policy and Procedure
• Privacy and Confidentiality Policy and Procedure
• Feedback and Complaints Policy and Procedure

Monitoring and Review

This Privacy Statement, along with Primacy Care’s Privacy and Confidentiality and Records and Information Management policies and procedures will be formally reviewed at least annually by the Management Team. Formal reviews will include participant, staff, and other stakeholder feedback.