Episoft Privacy Statement
EpiSoft is committed to protecting your personal and health information.
EpiSoft appreciates that this information is sensitive and assures you that
your personal and health information will be kept secure and will not be
used for any improper purpose.
The National Privacy Principles, as outlined in the Privacy Amendment
(Private Sector) Act 2000, are adopted by EpiSoft. EpiSoft abides by these
Principles.
EpiSoft further abides by the principles outlined in various state and
federal health records legislation and codes of practice for the responsible
handling of personal and health information.
- What do we collect?
If you are a registered user of EpiSoft (healthcare professional) and you enter our website and access the EpiSoft program, the following is the
type of personal information that may be collected from you:
- Name;
- Address and/or email address;
- Clinical areas of interest;
- And other personal information that may identify you.
- What is the consent process?
EpiSoft provides technology and research services to healthcare professionals and other clinical researchers.
If you are the patient of a healthcare professional who uses EpiSoft for their health record collection purposes, your healthcare professional will have already
obtained your consent for the collection of your personal and health information and will have informed you of how your personal and health information may be
used or disclosed.
- Sharing information
As a patient, your personal and health information is stored on the EpiSoft program by your healthcare professional and will be accessed by them. EpiSoft will store this
information for use by your healthcare professional.
EpiSoft will not rent or sell your personal and health information to any other third party.
Healthcare professionals and other researchers may, however, for analysis purposes, be able to view de-identified and aggregated information that is stored in the EpiSoft
system. This type of information does not identify who you are.
- Security
EpiSoft has in place significant security measures to protect personal and health information stored on the EpiSoft program, such as:
- Encryption of all data in the database that could identify or re-identify a person;
- Encryption of link between the database and the application;
- Full audit trail of any changes made to personal and health information on the EpiSoft system including a complete copy of a record prior to change;
- Industry standard methods for secure password creation and forgotten password retrieval;
- Use of additional token (passcode) for secure signing of documents as required by some EpiSoft clinical communities;
- Government certifed (Juniper) hardware firewalls, anti-spam and anti-virus filters;
- EpiSoft hardware located within a purpose-built secure data centre compliant with AS/NZS 7799 security standard.
- Accessing your personal information
Healthcare professionals can access their personal information held by EpiSoft by sending
an email to help@episoft.com.au
or by contacting us on 1300 799 904. We may charge you a reasonable administrative fee if you
require copies of your personal information that we have collected from you.
Patients should direct all enquiries for access to their personal or health information to
their healthcare professional.
