Opinion
Criminal activity targeting discarded patient information
GPs are reminded to securely store and dispose of health information, with discarded records linked to cases of fraud, writes the DoHDA.
Improperly discarded prescriptions and health records have been linked to cases of fraud, including identity theft.
The Australian Government is reminding health professionals to securely store and dispose of prescriptions and patient information, following reports of criminal activity targeting discarded documents which contain patient information.
Improperly discarded prescriptions and health records have been linked to cases of fraud, including identity theft.
Identity fraud can result in someone using another individual’s identity to open a bank account, get a credit card, apply for a passport or conduct illegal activity.
Health professionals, including pharmacists and medical practitioners, are encouraged to be vigilant and ensure their privacy and information-handling practices are up to date and compliant with national legislation.
National legal framework
Under the Privacy Act 1988 and the Australian Privacy Principals, health professionals must take reasonable steps to protect personal information from misuse, loss and unauthorised access.
When the information is no longer required, it must be securely destroyed or de-identified.
Pharmacies are also subject to the National Health (Pharmaceutical Benefits) Regulations 2017, which requires Pharmaceutical Benefits Scheme prescriptions be retained for at least two years from the date of supply.
After this period, prescriptions must be disposed of securely, not in general waste or recycling bins.
Best practice for health professionals
To protect patient privacy and maintain trust, health professionals are encouraged to adopt best practices such as:
- storing paper prescriptions securely, for example, locked in cabinets with access restricted to authorised staff
- retaining prescriptions for the required period and ensuring they can be readily retrieved if needed
- disposing of prescriptions securely, such as using a professional document destruction service or on-site shredding
- training staff to understand privacy obligations and reinforcing these policies regularly.
Safeguarding patient privacy extends beyond clinical care.
Proper handling and secure disposal of prescriptions and health records play a crucial role in protecting individuals and maintaining public trust in the healthcare system.
By putting strong privacy practices in place, health professionals can reduce the risk of information misuse and ensure they are meeting their legal and ethical responsibilities.
Log in below to join the conversation.
patient records practice technology privacy security
newsGP weekly poll
Have you, or anyone at your practice, been targeted by scammers attempting to access your Provider Digital Access (PRODA) account?