Mandatory data breach notification requirements for medical practice

Privacy breaches and electronic communication: Lessons for practitioners and researchers

“…This includes those regarding mandatory data breach requirements that have come into effect since the unauthorised disclosure made in 'SD' and 'SE' and Northside Clinic. 6 Failing to implement reasonable measures to protect information held and used by practices will itself constitute a further breach of privacy law and is a violation of Good medical practice (the code), where the high standards of professional conduct include 'protecting patients' privacy and right to confidentiality' and recognition that 'patients have a right to expect that doctors and their staff will hold information about them in confidence'. 7 In the same vein, the code outlines professional obligations that apply when ending a doctor-patient relationship when it becomes ineffective or compromised.…”