Privacy and Confidentiality Policy
At Serena Care, we are committed to safeguarding the privacy and confidentiality of our participants, workers, and stakeholders. This Privacy and Confidentiality Policy outlines how we collect, use, store, and protect personal information in compliance with the Privacy Act 1988, NDIS standards, and other relevant regulations.
1. Information We Collect
We collect personal information necessary for providing high-quality care and services. This may include:
- Participant Information: Full name, date of birth, contact details, medical history, personal preferences, support plans, and case/progress notes.
- Worker Information: Contact details, qualifications, employment history, payroll data, background checks, and training records.
- Stakeholder Information: Contact details and any relevant information required for communication and service delivery.
2. Purpose of Information Collection
We collect personal information to:
- Deliver personalised and effective care services.
- Develop, review, and update individual support plans.
- Ensure compliance with legal and regulatory requirements.
- Manage internal operations, including staff management, training, and performance reviews.
3. Consent and Participant Rights
- Informed Consent: We obtain written or verbal consent before collecting, using, or sharing personal information.
- Access and Correction: Participants have the right to access their personal information and request corrections if the information is inaccurate.
- Withdrawing Consent: Participants can withdraw their consent for specific uses of their personal information at any time.
4. Data Storage and Security
We take appropriate measures to protect personal information from unauthorized access, loss, misuse, or disclosure. This includes:
- Electronic Records: Secured with password protection, encryption, and regular system backups.
- Hard Copy Records: Stored in locked cabinets in secure rooms with restricted access.
- Access Control: Only authorized personnel have access to sensitive information, based on their role and responsibilities.
- Annual Audits: Regular audits are conducted to ensure compliance with privacy and confidentiality standards.
5. Confidentiality Obligations
All Serena Care staff are required to:
- Maintain the confidentiality of participants’ and colleagues’ information.
- Sign a confidentiality agreement upon employment.
- Participate in regular training on privacy and confidentiality practices.
Any breach of confidentiality may result in disciplinary action, including termination of employment.
6. Data Breach Response
In the event of a data breach:
- Immediate Action: We will investigate the incident and take corrective measures to mitigate any risks.
- Notification: Affected individuals will be notified if their information is at risk, in accordance with the Notifiable Data Breaches (NDB) Scheme.
- Documentation: All breaches are recorded in the Incident Register, and follow-up actions are taken to prevent recurrence.
7. Third-Party Sharing
We do not share personal information with third parties without prior consent, except when required by law or to meet regulatory obligations. When information is shared, we ensure that third parties adhere to Serena Care’s privacy and confidentiality standards.
8. Your Privacy and Confidentiality Choices
Participants and workers can:
- Request access to their personal information.
- Update or correct inaccuracies in their records.
- Withdraw consent for specific uses of their personal information.
- Raise concerns or complaints about privacy or confidentiality breaches.
9. Complaints and Feedback
If you have any concerns or complaints regarding privacy or confidentiality, you can contact Serena Care’s management. We take all feedback seriously and will work to resolve issues promptly and fairly.