Scope

This policy relates to Celeste Clifford, Occupational Therapist, trading as Innate Ability OT and the collection, use and disclosure of information about the people Innate Ability OT support and the people who work with Innate Ability OT. Celeste Clifford  Sole Trader is responsible for this policy and is committed to protecting the privacy of personal information we collect and hold about individuals.

Innate Ability OT collects and stores information so it can provide a safe working environment, high quality services and meet its legal requirements.

Innate Ability OT will need to use and collect personal and sensitive information. Innate Ability  OT relies on participant / clients to provide accurate information. Should participant/clients decide to withhold or provide inaccurate personal or sensitive information, this could impact the ability to provide the service they request or require.

Innate Ability OT manages personal information in accordance with relevant legislation and disposal guidelines as stated in the Privacy Act 1988, other privacy laws that govern how private sector health service providers handle your personal information (including your health information), and Occupational Therapy Australia’s Code of Ethics.

​

Definitions

Personal information: Information that identifies a person e.g name, address, contact details, photographs.

Sensitive information: Is also personal information, however special protection applies to this type of information e.g racial or ethnic origin, medical history, disability or injury, supports and services being received and criminal records.

​

Principles

• Personal information is collected with consent and is used where the information is needed to provide services and meet compliance requirements.

• Information is protected from misuse, loss and unauthorised access.

• Information not needed by Innate Ability OT is destroyed as soon as practicable in a way that complies with all legal and compliance requirements

• Reasonable steps are taken to ensure information is complete, current and accurate.

• Personal information is only ever released if required by law, agreed to through the informed consent of the individual or if a person requests to see their own personal file.

• Personal information will not be disclosed to other parties or used for direct marketing without permission.

• Personal and sensitive information is usually collected directly from the client/participant or their representative; however sometimes this information is collected from a third party (such as a relative or another health service provider).

​

When is your personal information collected?

Innate Ability OT will collect personal information when a participant / client, parent, guardian, or representative books a service, during the course of providing services or when an online form is used and submitted through www.Innateabilityot.com.au Innate Ability OT collects personal information from its web site through receiving online forms and emails. They also use third parties to analyse traffic at that web site, which may involve the use of cookies.

Innate Ability OT may create links to third party websites and is not responsible for the content or privacy practices employed by websites that are linked from  Innate Ability OT website.

​

Who might your personal information be disclosed to?

Innate Ability OT may disclose your personal information when required by law, to legal practitioners, courts, tribunals and regulatory authorities, and anyone else to whom you authorise us to disclose it as per the Privacy section on the service agreement.

Prior to the commencement of services with Innate Ability OT a participant/client or representative is required to complete a service agreement which contains a privacy and consent statement for the participant/client. By signing the service agreement participant/clients and/or their guardians, parents or legal representatives are giving their express consent for Innate Ability  OT to contact the following people to discuss relevant information in relation to services provided as a part of the agreement. It is the responsibility of the participant/client or their representative to inform the provider of any changes to the details of the persons listed below. The people who may be contacted are:

• The treating doctor and other medical practitioners (This may be required in relation to Medicare required discharge summary’s, or may be required to collect or provide information related to your care and services with Innate Ability OT).

• The treating allied health professionals (Your care may be provided by a number of health professionals (for example, speech pathologist, occupational therapist and/or psychologist) working or consulting together. We may disclose your information to these health professionals as part of the process of providing your care and to other health professionals involved in your care).

• The support coordinator (where relevant).

• The plan manager (where relevant).

• The support agency (where relevant).

• Any other person nominated (people nominated by the participant/client including their name, contact details and relationship to the participant). This may include. But is not limited to, a house manager, support worker, teacher/school or family member.

• Where there is a legal guardian, advocate or representative in place, Innate Ability OT may provide personal and sensitive information to this person within the context of your care and support.

Innate Ability  OT may also collect personal information from these organisations and individuals, and will deal with that information in accordance with this Policy.

​

Access to information

Participant/clients may request access to their personal information held by Innate Ability OT by contacting the sole trader, Celeste Clifford. Innate Ability OT will require you to verify your identity and to specify what information you require.

In some circumstances access to personal information may be denied. There may be real concerns that access to certain information could pose a serious threat to the life, health or safety of an individual, or to public health or public safety or have an unreasonable impact on the privacy of other people. Innate Ability  OT will consider all the circumstances and make this decision. Where access to information is not provided, you will be provided with a formal response explaining why access has been denied.

Complaints about perceived or suspected breaches of privacy will be dealt with using the Complaints handling and Reportable Incident Policy.

If you believe that personal information that I hold about you is incorrect, incomplete or inaccurate you may request amendments. I will consider if the information requires amendment and if I do not agree, I will add a note to the personal information stating your disagreement with the information.

​

Data breaches

Innate Ability  OT will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. As per the Privacy Act 1998, Innate Ability OT has an obligation to report privacy breaches. As a result of an amendment to the Privacy Act: Privacy Amendment (Notifiable Data Breaches) Act 2017, notification to the Office of the Australian Information Commissioner (OAIC) will be mandatory when a data breach could give rise to a 'real risk of serious harm' to the affected individuals. (Effective from 22 February 2018).

Further information on this can be found at:

https://www.oaic.gov.au/privacy-law/rights-and-responsibilities

https://www.oaic.gov.au/privacy/privacy-complaints/

Information about the Australian Privacy Principles can be found at: https://www.oaic.gov.au/privacy/australian-privacy-principles/

​

Storage and Protection

Innate Ability OT records of individuals information are kept in electronic form, when not required for clinical care.  Innate Ability OT records is required by law to retain medical records for a period of seven years.  Innate Ability OT, for the purposes of its NDIS Services, adheres to the directive from the National Archives of Australia Notice of Disposal Freeze, meaning all records are archived and not disposed of. Electronic information kept on computers is password protected. Information or hard copy documents that are no longer required are disposed of appropriately using shredding machines into secure bins. Electronic data (where appropriate, with exceptions as aforementioned) is securely deleted so it is no longer accessible.

Related Policies and Plans

· Code of Conduct Policy          

· Complaints handling and Reportable Incident Policy

Innate Ability  OT will, on request provide a copy of the above related policies. 

​

Related legislation and standards

· Carers’ Recognition Act 2004

· Disability Services Act 1993 (WA)

· Equal Opportunity Act 1984 (WA)

· Fair Work Act 2009

· NDIS Act 2013

· National Standards for Disability Services

· NDIS Quality and Safeguarding Practice Standards 2018

· Privacy Act 1988