Social Media Policy

The use of social media is expanding rapidly. Individuals and organisations are embracing user-generated content, such as social networking, personal websites, discussion forums and message boards, blogs and microblogs.

Whether an online activity is able to be viewed by the public or is limited to a specific group of people, health professionals need to maintain professional standards and be aware of the implications of their actions, as in all professional circumstances. Health professionals need to be aware that information circulated on social media may end up in the public domain, and remain there, irrespective of the intent at the time of posting

Obligations for Medical Practitioners using social media:

In using social media, just as with all aspects of professional behaviour, health practitioners should be aware of their obligations under the National Law, their Board’s Code of conduct, the Advertising guidelines and other relevant legislation, such as privacy legislation.

Professional obligations

The Code of conduct contains guidance about the required standards of professional behaviour, which apply to registered health practitioners whether they are interacting in person or online. The Code of conduct also articulates standards of professional conduct in relation to privacy and confidentiality of patient information, including when using social media. For example, posting unauthorised photographs of patients in any medium is a breach of the patient’s privacy and confidentiality, including on a personal Facebook site or group even if the privacy settings are set at the highest setting (such as for a closed, ‘invisible’ group).

Obligations in relation to advertising

Section 133 of the National Law imposes limits on how health services delivered by registered health practitioners can be advertised. These limits apply to all forms of advertising, including through social media and on the internet. For example, the National Law prohibits the use of testimonials in advertising. The Advertising guidelines provide guidance about how the legal restrictions on advertising under the National Law and other relevant legislation apply to social media.

Email Policy

We adhere to the Australian Privacy Principles and the Privacy Act 1988 when communicating with patients electronically (email or SMS)

This practice does communicate with patients using electronic means, such as email or SMS but we do not send any patient health/sensitive information including results in this way.

Email can be used by a practice to transmit information outside the practice. We do not send any patient health/sensitive information including results via email.

Ideally communication should be via secure messaging or encryption, but this is generally not possible when emailing patients.

The practice has an obligation to take reasonable steps to protect the privacy and security of information it holds including when it is transmitted or disclosed outside the organisation.

The practice follows the RACGP recommendations to reduce the risk of interception of data and sending emails to incorrect addresses, including:

• use of passwords for sensitive information
• verification of the patient's email address
• obtaining patient consent
• use of secure messaging facilities between practices where available

Patients are informed of potential risks to their privacy and consent must be obtained where health information is sent electronically. We have procedures in place to verify email addresses and other contact information prior to sending.

We obtain and document patient consent in the electronic health record before any health information is communicated by email. We cross check a patient’s identification (using three approved patient identifiers) and verify the patient’s contact details before any information is sent. For email we strive to achieve at a minimum, low- medium risk as based on the RACGP privacy and security matrix- using email in general practice.

Ongoing education and training on confidentiality is provided to all staff and is included in the new staff induction program

The practice website is enabled to allow patients to email the practice.