Confidentiality
I am required under Medicare to provide your referring doctor with a brief letter detailing diagnosis and your treatment plan. In this correspondence I inform your G.P. or psychiatrist about history that is relevant to your treatment.
You are welcome to view correspondence during sessions. If you would prefer information not be conveyed to your G.P. please speak with me.
If you do not wish for any correspondence with your G.P. you may be best reassured by attending privately rather than under Medicare.
Otherwise, all personal information gathered by me during the provision of assessment and treatment will remain confidential and secure except when:
- It is subpoenaed by a court or tribunal. This includes: Family Court, Health Care Complaints Investigations and Insurance companies.
- The disclosure is necessary for the enforcement of criminal law or is required by law.
- Failure to disclose information would place you or another person at risk of SERIOUS HARM.
- Your approval has been obtained to:
- Discuss information with another person, e.g. partner
- Provide a written report to another professional or agency e.g. specialist.
Should these circumstances arise, your personal information will only be released in accordance with the requirements of the Privacy Act 1988 (Cth).
If you have been referred by Australian Defence Force, I am required to feed back to your referring doctor about treatment. It is possible that attending ongoing sessions that relate to your fitness for duty may compromise your ability to be deployed or your medical status. If this is a concern, please speak with me about this.
https://help.cliniko.com/en/articles/4274054-how-cliniko-helps-you-comply-with-the-australian-privacy-principles
TELEHEALTH-Cliniko
I use Clinko Telehealth software which is encrypted end-to-end utilising Datagram Transport Layer Security/Secure Real-time Transport Protocol (DTLS/SRTP), which is used to transfer video, audio and text chat in session Peer-to-Peer (P2P).
P2P service, means the communications between the participants on the telehealth session is direct, without any third party mediator—in plainer terms, this means that the conversation is not being accessed by anyone other than the participants on the session. Cliniko do not have access to the content of the telehealth session.
CLINIKO COMPLIANCE
For General Data Protection Regulation (GDPR), Australian Privacy Principles (APP), Health Insurance Portability and Accountability Act (HIPAA), and Personal Information Protection and Electronic Documents Act (PIPEDA) compliance, we have ensured that:
Personal Health Information (PHI) or Personal Identifiable Information (PII) will not be transmitted anywhere for the telehealth session:
-The P2P connection is as secure as possible;
-Any logs that are created will not contain any PHI or PII;
-The service we are using has implemented the ISO 27001, Privacy Shield, Cloud Security Alliance, and SOC 2 security best practices to ensure that their systems are secure.
ACCREDITATION AND CERTIFICATION
Cliniko’s hosting partner, Amazon Web Services (AWS), has achieved the following accreditations and certifications:
-PCI DSS Level 1 (Payment Card Industry Data Security Standard)
-ISO 27001 (Information Security Management System)
-FIPS 140-2 (United States Federal Information Processing Standard)
