Digital health & cyber security Presented by Chelsea Gordon - - PowerPoint PPT Presentation

▶

Oct 23, 2022 36 likes •186 views

Digital health & cyber security Presented by Chelsea Gordon Wednesday 1 August 2018 2 3 My Health Record 4 MyHealth Record Patients can see My Health Record can who has looked only be accessed at or updated by the patient, carers and

SLIDE 1

Digital health & cyber security

Presented by Chelsea Gordon Wednesday 1 August 2018

SLIDE 2

SLIDE 3

SLIDE 4

My Health Record

SLIDE 5

MyHealth Record

My Health Record can

nly be accessed

by the patient, carers and people involved in their healthcare There are tough privacy and

security rules

Patients can

control who can

see their My Health Record Patients can see who has looked

at or updated

their My Health Record

SLIDE 6

Regulation

Privacy law
Criminal law
Corporate law

SLIDE 7

Privacy Law in Australia

The Privacy Act 1988 (Cth) regulates how personal information

is handled in Australia

The Privacy Act applies to private businesses that:

– have a greater annual turnover than $3 million (note exceptions); – provide health services and hold health information; or – are contracted service providers for a Commonwealth contract (whether or not a party to the contract)

SLIDE 8

Privacy Principles

Open and transparent
Anonymity and pseudonymity
Collection and management
Use or disclosure
Direct marketing
Cross-border disclosure
Quality & security
Access & correction

SLIDE 9

Types of information

Privacy Act

Personal

Sensitive

Health

Financial

SLIDE 10

Security of personal information

Take reasonable steps to protect the information:

– from misuse, interference and loss; and – from unauthorised access, modification or disclosure.

If the information is no longer required and there is no law requiring its retention, the entity must take reasonable steps to destroy the information or to ensure that the information is de- identified.

APP 11

SLIDE 11

Notifiable data breach

SLIDE 12

Current Position

Unauthorised access

r disclosure of

information OR Information lost and disclosure likely Reasonable person conclude breach likely to result in ‘risk

f serious harm’ and

unable to prevent harm Must notify OAIC and individuals affected

SLIDE 13

Practical reflections

Have an up to date:

– Privacy policy – Cyber security policy – Data breach response plan

Consider cybersecurity insurance
Confirm whether any international regulations apply

SLIDE 14

Team Contacts

Karen Keogh Partner P +61 2 9334 8884 E kkeogh@hwle.com.au Chelsea Gordon Associate P +61 2 9334 8987 E clgordon@hwle.com.au

SLIDE 15