Privacy and personal information

We will ask for your written/verbal consent if we need to share your information with other service providers or in order for us to refer you to another agency or service.

You have the right to ask us not to share your information with others and to have your personal information kept private.

There are circumstances when Gateway Health is required by law to share information, for example:

• Cases of legal action under a court order
• Reporting of notifiable diseases
• Investigations of child abuse or neglect
• Family violence cases
• Situations where a client is at risk of hurting themselves or another person, or whose current condition reduces their ability to make decisions

You can ask to see your record in accordance with the Freedom of Information Act 1982 and the Health Records Act 2001 (Vic).

If you would like to access your client record please contact the Client Records Officer, 155 High Street Wodonga, Vic 3690 – Phone 02 6022 8888.

Please note – There may be a fee to access your record.

If you have a complaint about privacy at Gateway Health please complete our Feedback form. We will look into the issue and keep you informed of the progress of the investigation.

If your issue is not resolved you can contact the Office of the Australian Information Commissioner on 1300 363 992.

Go to the OAIC – Australian Privacy Principles for more information.

Notification of privacy incident

It has been identified that there was a low-risk data privacy breach within Gateway Health that involved some personal information of a small number of clients.

Based on our investigation, we understand that personal information that has been affected by this incident includes:

• Personal information relating to a limited number of clients who accessed the Community Inclusion program under a National Disability Insurance Scheme (NDIS) package in the years 2018 – 2023.
• Personal information including:

• • • Names
    • Residential and postal addresses
    • Phone numbers
    • NDIS membership numbers and participant information
    • NDIS package details including service types and funds allocated
    • Health and social information including diagnoses and disabilities.

 What have we done in response to the breach?

We have notified the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breach Scheme, as per the Privacy Act 1988 (Cth), and advised the NDIS of package recipients involved. We have also notified all clients who were able to be individually identified as having personal information involved.

We are reviewing policies and security practices concerning the ability of unauthorised external devices to be used on our computers, to reduce the potential for this to happen again.

This breach has been thoroughly assessed and has been deemed low-risk. This is due to the above actions taken and the fact that at no stage has any information been made publicly available.

If you have any concerns about what has happened or would like further information, you can contact: the Privacy Officer by email at inforequest@gatewayhealth.org.au.

If you are not satisfied with how we have handled this, you can contact us to make a complaint at inforequest@gatewayhealth.org.au.

If we cannot resolve your complaint, you can then make a complaint to OAIC. You can find out more about how to make a complaint to OAIC at https://www.oaic.gov.au/privacy/privacy-complaints.

 

Trent Dean
Chief Executive Officer
Gateway Health