3. Collection and use of personal information
3.1 Types of personal information collected by the DEC
The DEC will only collect information which is necessary to facilitate the provision to you of health care services DEC or to appropriately manage, conduct and oversee the DEC’s business. This may include (as applicable):
(a) Patients/residents/clients/research participants
The DEC collects information from you to facilitate the provision of health care services to you or to enable you to participate in research studies. This includes collecting personal information such as your name, address, your health history, family history, past and current treatments lifestyle factors, and any other information which is necessary to assist the health care team in providing appropriate care, or our research team in conducting its research.
(b) VMOs, students, contractors and volunteers
The DEC collects information from you which is necessary to properly conduct, manage and oversee the DEC’s business. This includes collecting personal information such as your name, address, professional experience, qualifications and past employers, and any other information which may be necessary to appropriately conduct, manage and oversee the DEC’s business.
3.2 How we collect personal information
We will usually collect your personal information directly from you, however sometimes we may need to collect information about you from third parties, such as:
(a) another health service provider;
(b) related entities (being those listed in the annexure).
We will only collect information from third parties where:
(c) you have consented to such collection;
(d) such collection is necessary to enable us to facilitate the provision of appropriate health care services;
(e) such collection is reasonably necessary to enable us to appropriately manage, conduct and oversee the DEC’s business; or
(f) it is legally permissible for us to do.
3.3 How the DEC uses your personal information
The DEC only uses your personal information for the purpose for which it was collected by the DEC (primary purpose), unless:
(a) there is another purpose (secondary purpose) and that secondary purpose is directly related to the primary purpose, and you would reasonably expect, or the DEC has informed you, that your information will be used for that secondary purpose;
(b) you have given your consent for your personal information to be used for a secondary purpose; or
(c) The DEC is required or authorised by law to use your personal information for a secondary purpose (including for research and quality improvements within DEC).
For example, the DEC may use your personal information to:
(d) facilitate the provision of health care services to you;
(e) facilitate the provision of any ongoing health related services to you;
(f) appropriately manage, conduct and oversee the DEC’s business, such as assessing insurance requirements, conducting audits, and undertaking accreditation processes;
(g) assist the DEC to manage, conduct and oversee the DEC’s business, including quality assurance programs, billing, improving its services, implementing appropriate security measures, conducting research and training personnel;
(h) where required, effectively communicate with third parties, including Medicare Australia, private health insurers and Department of Veterans’ Affairs; and
(i) carry out fundraising activities (where you have consented).
3.4 Complete and accurate details
Where possible and practicable, you will have the option to deal with the DEC on an anonymous basis or by using a pseudonym. However, if the personal information you provide us is incomplete or inaccurate, or you withhold personal information, we may not be able to provide the assistance or support you are seeking, or deal with you effectively.