Information transferred overseas

Information transferred overseas

It is important to consider the privacy implications of transferring health information outside Australia, as some countries have inadequate privacy standards. Once this personal information is disclosed in an unregulated way, it is very difficult to regain control over it.

The need for protection extends to the use of overseas data storage as well as the processing of patient information, such as using transcription and reporting services.

It is recommended to seek patient consent before transferring health information outside Australia (noting that alerting patients to this possibility is a requirement of privacy policies; refer to the module on Privacy policies). However, consent is not strictly necessary in circumstances where reasonable steps have been taken to ensure the overseas recipient does not breach the privacy of that individual, or where the practice believes the overseas recipient is subject to a privacy scheme or law protecting the information in a manner similar to Australia.