OceanCare – User Data Collection Notice

Version: 1.2

Last updated: 30 November 2018

OceanCare operates as a collaborative community-based care planning solution and a clinical information repository that can be accessed by Healthcare Providers, Healthcare Provider Employees and Healthcare Consumers. OceanCare facilitates information sharing, messaging between Users, customisable problem templates, clinical summaries and referral features.

At Ocean Health Systems, we respect your privacy and seek to manage your Personal Information in an open, secure and transparent way. As a healthcare software provider, we are committed to handling your Personal Information in accordance with our privacy obligations under all applicable data protection laws, such as the Australian Privacy Principles contained in Schedule 1 to the Privacy Act 1988 (Cth) (the “Privacy Act”) and the Health Privacy Principles contained in Schedule 1 to the Health Records and Information Privacy Act 2002 (NSW) (“HRAIPA”) (collectively, “applicable laws”). As a User of OceanCare, it is your responsibility to comply with your obligations under all applicable laws in connection with your lawful use of OceanCare.

Users can collect, upload, access and share a wide variety of Personal Information on OceanCare including sensitive Health Information.

Terms used in this document that start with a capital letter have the meaning given to them in our Privacy Policy located at www.oceancare.com.au/terms/PrivacyPolicy.htm (“Privacy Policy”). We strongly recommend that you read our Privacy Policy.

Our Privacy Policy contains information about our data security, processing and management practices. Please view our Privacy Policy to read about the types of Personal Information that we collect from you, who we disclose your Personal Information to, our lawful basis for processing your Personal Information and your rights to withdraw your consent to our processing of your Personal Information or to request for us to access, correct or erase your Personal Information, make a privacy-related complaint and our complaint handling process.

This Data Collection Notice (“Collection Notice”) is a collection notice for the purposes of Australian Privacy Principle (“APP”) 5.

Category Information
Who are we and how can you contact us? We are Ocean Informatics Pty Ltd (ABN 14 081 649 470) of Level 5 West, 50 Grenfell Street, Adelaide, South Australia 5000 (“we”, “us”, “Ocean Health” or “our”). You can contact us at the following address if you have any questions about this Collection Notice:

Privacy Officer
Level 5 West, 50 Grenfell Street
Adelaide, SA, 5000
privacy.officer@oceanhealthsystems.com

The facts and circumstances of the Personal Information that we collect We collect Personal Information from users of OceanCare (Healthcare Providers, their Healthcare Provider Employees and Healthcare Consumers) (including sensitive information such as Health Information contained in clinical records) when they register on OceanCare, through their use and access of OceanCare and/or when our Users uploads or transfers it to us from third party databases (such as Medical Director, BestPractice, ZedMed and other practice management software, Pen CS Pty Ltd’s TopBar LinkedEHR App software and the My Health Record system).
Why do we collect Personal Information? We only collect your Personal Information for the lawful purpose of managing Health Information to assist Healthcare Providers provide improved Healthcare Consumer care. Our policy is to minimise the amount of Personal Information we collect and otherwise process. Accordingly, we only collect Personal Information that is adequate, relevant and limited to what is necessary for the purpose for which it is to be processed and only where we are entitled by law to collect it. We may also use collected Personal Information for other related, directly related or compatible lawful purposes (if and where permitted by applicable law). Personal Information collected on OceanCare and linked to other portals may include clinical history and other personal, health and sensitive information. We only collect that information to the extent it is entered into OceanCare by Healthcare Providers (and their employees) and Healthcare Consumers (including when they obtain it from third party databases connected to OceanCare) and only so that we can operate and administer OceanCare.
The consequences for the individual if Personal Information is not collected If we do not collect Personal Information about you, you cannot become a User on OceanCare and you cannot use or access OceanCare. You may however withdraw your consent for certain processing activities that we conduct with respect to your Personal Information. For example, if you are a Healthcare Consumer, you may withdraw your consent to our disclosure of your Personal Information or restrict access by other Users to your Personal Information at any time. If you withdraw your consent for the processing of your Personal Information entirely, OceanCare may not be accessible. If you are a Healthcare Consumer, it is impractical to remain anonymous during your use of OceanCare.
Other APP entities, bodies or persons to which the Personal Information is usually disclosed Once the Personal Information of a Healthcare Consumer is collected, we will disclose the Personal Information to their Healthcare Providers and their Healthcare Provider Employees. In certain circumstances, we may also disclose Personal Information where required to comply with applicable law, including where a permitted health situation exists under the Privacy Act 1988 (Cth) but only for the purposes permitted by that legislation.
Information about access and correction in the APP entity’s APP Privacy Policy Our Privacy Policy contains information about how  individuals may access the Personal Information about the individual that is held by us and seek the correction of such information.

OceanCare includes privacy tools that you can use to control the Personal Information that we hold about you. Users can access these privacy tools at the following URL: www.oceancare.com.au/myLinkedEHR.

Detailed description of the functionality of OceanCare Please view a more detailed description of OceanCare and its features at the following URL: www.oceancare.com.au
Complaints Our Privacy Policy contains information about how you may complaint about a breach of the Australian Privacy Principles, and how we will deal with such a complaint.

 


OceanCare – Consent Notice

Thank you for using OceanCare. To get started, please tick each applicable box below:

For all Healthcare Consumers and Healthcare Provider Employees:

If you do not provide your consent in accordance with this Consent Notice (with respect to any of the following items), you may not use OceanCare.

I consent to registering as, and becoming a user of the OceanCare Platform (“OceanCare”).
I am over the age of 15 and have read, understood and agree to the OceanCare Collection Notice, the OceanCare Privacy Policy, the OceanCare Terms of Use and the OceanCare Acceptable Use Policy.

For Healthcare Consumers:

If you are Healthcare Consumer and you do not provide your consent in accordance with this Consent Notice (with respect to any of the following applicable items), your Healthcare Provider (and their Healthcare Provider Employees) must not register any Healthcare Consumer Record on your behalf in OceanCare.

I am a Healthcare Consumer and I consent to my Health Information and other sensitive information being collected, held and disclosed by Ocean Informatics Pty Ltd (“Ocean Health”) for Ocean Health to operate OceanCare in the manner described at oceancare.com.au and otherwise in accordance with the OceanCare Collection Notice, the OceanCare Privacy Policy and the OceanCare Terms of Use.
I consent to my Healthcare Providers and their Healthcare Provider Employees collecting, using and disclosing my Personal Information and Health Information from and to other Healthcare Providers and Healthcare Provider Employees via OceanCare as deemed necessary by them to provide me with health services.
I understand that I can restrict the Health Providers and Healthcare Provider Employees who can access my Personal Information and Health Information on OceanCare via my OceanCare account.
I consent to my Health Information and other sensitive information being stored by Ocean Health at any data centre in Australia at which Ocean Health locates its computer servers.
I consent to Ocean Health using health records linkage systems to collect and process my Personal Information and Health Information on OceanCare – including Pen CS Pty Ltd’s TopBar LinkedEHR App software, My Health Record and other third party systems described at oceancare.com.au.