Our Commitment to Your Privacy
CareScan Imaging Group (CSIG) is a group of medical imaging practices committed to providing high-quality healthcare within local communities across Australia. We understand that your personal and health information is sensitive, and we take our privacy obligations seriously.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information, including sensitive health information. It also outlines how you can access or correct your information and how to raise privacy concerns.
CSIG complies with the Privacy Act 1988 (Cth) and all relevant State and Territory health privacy legislation.
Who This Policy Applies To?
This Privacy Policy applies to personal information we collect and hold about:
- Patients and prospective patients
- Referring health professionals and their authorised staff
- Medical specialists and hospital staff
- Other health service providers
- Suppliers and service providers
- Employment applicants
- Other individuals we deal with in the course of our operations
Why We Collect Personal Information?
We collect and hold personal information to:
- Provide safe, accurate, and high-quality medical imaging services
- Assist referring health professionals in patient diagnosis and care
- Communicate effectively with patients and referrers
- Manage billing, compliance, accreditation, and quality assurance
- Support employment and business operations
If you choose not to provide required personal or health information, we may be unable to provide imaging services or related care.
What Information We Collect?
Personal Information
This may include:
- Name
- Address
- Phone number(s)
- Email address
- Date of birth
- Gender
Sensitive (Health) Information
While providing healthcare services, we may collect:
- Imaging results and reports
- Medical and clinical history (including medications and prior investigations)
- Information from referring doctors or specialists
- Information from authorised third parties (e.g. family members, carers, allied health professionals)
- Medicare details, health identifiers, insurance and billing information
- Information required or authorised by law
- Information you provide verbally, in writing, by phone, or via our website
We usually collect information directly from you but may also receive it from your referring health professional or other authorised third parties.
How We Use Your Information
We use personal and health information to:
- Assess your health and perform imaging examinations
- Prepare and provide reports to your referring health professional
- Support your ongoing healthcare
- Manage appointments, reminders, billing, and administration
- Respond to enquiries submitted through our website
- Conduct quality assurance, accreditation, and patient feedback activities
- Undertake education and training using de-identified information
- Handle complaints or medico-legal matters
- Recruit and manage staff
When We Disclose Your Information
We do not sell patient information or disclose it to unrelated third parties. We may disclose information where necessary for your care or as permitted by law, including to:
- Referring doctors and their authorised staff
- Specialists and other health professionals involved in your care
- Hospital medical staff
- Registered users of our secure Referrer Portal
- Insurers (e.g. Medicare, workers’ compensation, TAC, private health funds)
- Legal, auditing, and professional advisers
- Government and regulatory authorities where required
- Contractors providing services to CSIG (under strict confidentiality obligations)
- Your authorised representative (e.g. family member, guardian, legal advisor)
Accuracy of Information
We take reasonable steps to ensure the information we hold is accurate, up to date, and complete. This depends on the information you provide.
Please let us know if:
- Any details we hold are incorrect
- Your personal details change (e.g. address, Medicare number)
Accessing and Correcting Your Information
Imaging results are best discussed with your referring health professional, who can interpret findings in the context of your overall care.
You may request access to, or correction of, the personal information we hold about you. In some cases:
- Fees may apply for copying images or reports
- Access may be restricted for legal reasons under the Privacy Act
We will explain any refusal and outline how you can lodge a complaint if needed.
To protect your privacy, we may require identity verification before releasing information.
Film and Image Collection
If applicable, we offer a confidential film and image delivery service using staff, couriers, post, or taxis. If you prefer to collect items personally or nominate someone else, written authorisation is required.
Data Security and Retention
We take reasonable steps to protect all personal and health information from:
- Loss
- Misuse
- Unauthorised access, disclosure, or modification
Information is securely stored and retained in accordance with legal requirements:
- Adults: at least 7 years from last service
- Children: until age 25
When information is no longer required, it is securely destroyed or de-identified.
Online Access for Health Professionals
CSIG provides a secure, password-protected Referrer Portal allowing authorised health professionals to access images and reports.
Before access is granted:
- Users must accept a User Access Agreement
- Access is limited to patients involved in their care
- All access activity is logged and monitored
With your consent or where legally permitted your information may also be shared with other treating health professionals.
Complaints and Privacy Concerns
If you have concerns about how your information has been handled, please contact the CSIG Operations Manager. We will investigate and respond promptly (usually within 30 days).
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au/privacy/privacy-complaints
Our Ongoing Commitment
CareScan Imaging Group is committed to:
- Respecting your privacy
- Using only necessary information
- Keeping information secure
- Providing clear access and correction processes
- Continually reviewing and improving our privacy practices
Your privacy matters to us.
