(1) An entity mentioned in column 1 of an item of the following table, is authorised to take action of the kind described in column 2 of that item with information of the kind described in column 3 of that item in the circumstances described in column 4 of that item.
Collection, use and disclosure for the purpose of providing healthcare to a healthcare recipient | ||||
Item | Column 1 Entity | Column 2 Permitted action | Column 3 Information | Column 4 Circumstances |
1 | identified healthcare provider | use disclose to the service operator | identifying information of a healthcare recipient
| the use or disclosure is for the purpose of assisting the service operator to disclose the healthcare identifier of the healthcare recipient to the healthcare provider |
2 | service operator | collect from an identified healthcare provider use disclose to an identified healthcare provider | identifying information of a healthcare recipient | the collection, use or disclosure is for the purpose of disclosing the healthcare identifier of the healthcare recipient to the healthcare provider |
3 | service operator | use disclose to an identified healthcare provider | healthcare identifier of a healthcare recipient | the use or disclosure is for the purpose of assisting the healthcare provider to communicate or manage health information, as part of providing healthcare to the healthcare recipient |
4 | identified healthcare provider | collect from the service operator | healthcare identifier of a healthcare recipient | the collection is for the purpose of communicating or managing health information, as part of providing healthcare to the healthcare recipient |
5 | healthcare provider | use disclose to another entity | healthcare identifier of a healthcare recipient | the use or disclosure is for the purpose of communicating or managing health information as part of: (a) the provision of healthcare to the healthcare recipient; or (b) the management (including the investigation or resolution of complaints), funding, monitoring or evaluation of healthcare; or (c) the provision of indemnity cover for a healthcare provider; or (d) the conduct of research that has been approved by a Human Research Ethics Committee |
6 | entity to whom healthcare identifier of a healthcare recipient is disclosed for a purpose mentioned in column 4 of item 5 | collect use disclose | healthcare identifier of a healthcare recipient | the collection, use or disclosure is for the purpose for which the information was disclosed |
(2) This section does not authorise the collection, use or disclosure of the healthcare identifier of a healthcare recipient for the purpose of communicating or managing health information as part of:
(a) underwriting a contract of insurance that covers the healthcare recipient; or
(b) determining whether to enter into a contract of insurance that covers the healthcare recipient (whether alone or as a member of a class); or
(c) determining whether a contract of insurance covers the healthcare recipient in relation to a particular event; or
(d) employing the healthcare recipient.