Privacy Management In order to minimise the privacy concerns and risks to individuals, BloodSTAR will include the following processes and functions. User terms and conditions User authentication Activity logging and auditing at the user level, including searches and views Privacy Statement and Notice Patient consent to the collection, use and disclosure of their personal and sensitive information. The NBA’s expectation is that the provision of personal and sensitive information in order to obtain access to a high cost publically funded biopharmaceutical product will be regarded as unremarkable by the vast majority of patients. This type of requirement is commonplace for access to many high cost medications and medical services, whether funded publically or by private health insurance, in Australia and in most comparable countries globally. Access to immunoglobulin is available under multiple funding and supply pathways in Australia. While a decision making process may be involved in each case, these alternatives do provide an avenue for the health system to meet the needs of a patient who may be concerned about the provision of personal and sensitive information. Recommendations Recommendation Cross reference to relevant document Provide Privacy Statement and Notice for the Attachment A Privacy Statement – and Notice information of individuals of interest to BloodSTAR and make it available to the general public on NBAs website. Develop a privacy consent form for recording explicit Attachment B Privacy consent form – written or oral consent and make available to the general public on NBAs website. Ensure consent is obtained from the individuals of System control. interest to BloodSTAR, and record their consent status in the system. Develop and publish NBA Privacy Policy. Develop information for patients to explain why Attachment A Privacy Statement – and Notice pseudonymous and anonymous options are impracticable. The search requirements when searching nationally or System control. beyond a user’s usual search scope will include at least two points of identification for an individual i.e. name and date of birth or hospital identifier, to
Privacy Management In order to minimise the privacy concerns and risks to individuals, BloodSTAR will include the following processes and functions. User terms and conditions User authentication Activity logging and auditing at the user level, including searches and views Privacy Statement and Notice Patient consent to the collection, use and disclosure of their personal and sensitive information. The NBA’s expectation is that the provision of personal and sensitive information in order to obtain access to a high cost publically funded biopharmaceutical product will be regarded as unremarkable by the vast majority of patients. This type of requirement is commonplace for access to many high cost medications and medical services, whether funded publically or by private health insurance, in Australia and in most comparable countries globally. Access to immunoglobulin is available under multiple funding and supply pathways in Australia. While a decision making process may be involved in each case, these alternatives do provide an avenue for the health system to meet the needs of a patient who may be concerned about the provision of personal and sensitive information. Recommendations Recommendation Cross reference to relevant document Provide Privacy Statement and Notice for the information of individuals of interest to BloodSTAR and make it available to the general public on NBAs website. Attachment A – Privacy Statement and Notice Develop a privacy consent form for recording explicit written or oral consent and make available to the general public on NBAs website. Attachment B – Privacy consent form Ensure consent is obtained from the individuals of interest to BloodSTAR, and record their consent status in the system. System control. Develop and publish NBA Privacy Policy. Develop information for patients to explain why pseudonymous and anonymous options are impracticable. Attachment A – Privacy Statement and Notice The search requirements when searching nationally or beyond a user’s usual search scope will include at least two points of identification for an individual i.e. name and date of birth or hospital identifier, to System control.
ig-gov-and-system-privacy-impact-assesmt-rprt.DOCX