NEED TO SEE A DOCTOR? TO BOOK AN APPOINTMENT CALL 03 442 0144

Privacy & Confidentiality

Our Commitment to Health Information Privacy

At Arrowtown Medical & Health (AMH), we’re committed to protecting your health information and respecting your privacy. All staff are expected to meet their responsibilities when collecting, storing, using, or sharing health information, in line with: 

Health Information Privacy Code 2020

Health (Retention of Information) Regulations 1996

Privacy Act 2020

We strive to ensure that:

  • Robust IT security systems and clear policies around Generative AI are in place and maintained to protect your electronic health records
  • Patient records are transferred using secure, trusted methods  
  • Health information is shared only with your consent, or as required by law  
  • All health information is collected, used, and stored in accordance with legislation

Any privacy breaches are managed appropriately and reported to those affected. We are obligated to notify the Office of the Privacy Commissioner | Te Mana Mātāpono Matatapu of any breach of privacy that has caused, or is likely to cause, serious harm to anyone.

If you have any questions, concerns, or would like to talk about how your information may be shared, please feel free to speak with your Doctor, Nurse, or our Practice Manager.

Patient Access to Records

Patients are entitled to access their personal information. Parents or guardians of patients under 16 are also entitled to request the patient’s information unless there are good reasons to withhold it.

Whenever you request your information, we’ll make sure to document your request and keep track of any details we provide. Occasionally, there may be a small charge to cover the cost of gathering and organising your records, but we’ll let you know in advance and are happy to answer any questions you may have.

Disclosing Patient Information

Your privacy matters to us, and we are committed to treating your health information with the utmost respect and care. Whenever we share your information with third parties, we carefully follow the guidelines set out in: The Privacy Act 2020: The Health Information Privacy Code 2020: and Other relevant legislation. 

We will never disclose your personal health details without your permission, unless we are required to do so by law.

We only collaborate with third-party service providers if we are confident that their privacy protections and policies meet our strict standards, and your information will only be used for the specific purpose it was collected for. Every request and disclosure is thoroughly documented to ensure transparency and accountability.

When your information is shared, we include only what is essential for the specific request, safeguarding your privacy at every step. Our goal is to respond to any access requests as quickly as we can and always within 20 working days.

Third-Party Requests for Access to Your Records

Requests for your health information from external parties are handled with strict privacy. We comply fully with laws when sharing personal data – whether to government agencies, families of deceased patients, or organisations outside New Zealand – and ensure all disclosures meet legal requirements.

Proactive Disclosure of Patient Information

In certain situations, we are legally required to proactively share patient information with external agencies.

For more information, see:

  • Ministry of Health: Information Sharing Provisions for Health Professionals 
  • Mandatory and Discretionary Reporting – guidance on when health practitioners may need to disclose information

Physical Privacy

We take all practicable steps to maintain a physical environment that protects your personal and health information. This includes being mindful of privacy when collecting information in spaces where others may overhear or see what’s being shared.

Photos, Filming, and Recording

All photography, filming, or audio recording within our facility must comply with: The Privacy Act 2020, and The Harmful Digital Communications Act 2015  

Clinicians taking photos or recordings for clinical reasons must also comply with the Health Information Privacy Code 2020.

Patients must obtain the clinician’s consent before recording or photographing a consultation.  

Recording or photographing another person or their private information without consent is a breach of the Privacy Act 2020.  

Recording or photography is not permitted in public areas of the building, such as the reception area.

Clinicians Taking Clinical Photos or Recordings

When your clinician needs to take a photo, video, or audio recording for medical reasons, they will always:

  • Ask for your permission before making any recording
  • Clearly explain why the recording is needed and how it will be used in your care
  • Only use the recording for the purpose discussed with you
  • Not share your recording with anyone else unless you have agreed to this
  • Make sure your recording is handled, stored, and eventually deleted in accordance with the Health Information Privacy Code 2020

You are entitled to request a copy of any photo, video, or audio recording taken during your care, as these form part of your health record.

Clinicians may request permission to use your recording device – such as a smartphone to capture photographs when you are attending a clinic at AMH, or they may ask you or a reliable individual to document health-related images at home for phone or telehealth consultations and forward them to our service. You retain the right to specify if this information should be deleted.

Support People, Chaperones, and Observers

Everyone should feel safe, respected, and comfortable in a consultation. Either the clinician or patient may request that other people are present (in-person or remotely) to ensure their safety, privacy, and dignity. This may include:

  • Support person or people: Patients have the right to bring one or more support people, e.g. family/whānau or friends.
  • Chaperone: A trained person requested by either patient or clinician to support safety and comfort, e.g. during intimate examinations.
  • Observers: Someone attending the consultation for training or professional development (CPD).
  • Students: Someone training to be a healthcare professional.

In situations where there are concerns about safety or misunderstandings, Arrowtown Medical & Health may require another clinical staff member to be present in all consultations with a patient.

Use of Generative Artificial Intelligence (AI)

At Arrowtown Medical & Health, we may sometimes use generative AI tools to help with clinical note-taking and administrative tasks like writing reports. These tools are used to support (not replace) our clinical judgement. We do not use AI to make clinical decisions.

If AI is used during your consultation, your clinician will ask for verbal consent at the start. You’re welcome to say no, and you can change your mind at any time.

Before introducing any AI tools, we carefully assess risks to ensure your privacy and safety are protected. We follow New Zealand laws, including the Privacy Act 2020 and its Information Privacy Principles.

We know this technology is evolving quickly, and we regularly review our processes to stay safe, transparent, and patient-focused.

For more information, see the Privacy Commissioner’s guidance: Artificial Intelligence and the Information Privacy Principles.

HealthOne

Please note that this practice is contributing to, and accessing healthcare information from HealthOne –  

What is HealthOne?

HealthOne is a secure electronic record that allows registered health care professionals directly involved in your healthcare, to quickly access information such as your test results, allergies, medications, GP summaries and hospital information. HealthOne adheres to the principles of the Privacy Act 2020 as well as the Rules set out in the Health Information Privacy Code 2020.  Access is only possible via an approved highly secure healthcare information network which is regularly audited and tested.  Privacy auditing is used to check that only those directly involved in your care are accessing your information.

To find out more about HealthOne please visit https://healthone.org.nz/

Please note that you are entitled to restrict the sharing of your healthcare records by contacting 0508 837 872 or emailing privacy@healthone.health.nz

Questions, Feedback, Complaints

If you have questions, feedback, or concerns about privacy related to your experience at Arrowtown Medical & Health, please reach out to us.

Phone: 03 442 0144

Email: admin@arrowmedhlth.nz

For matters where you feel a breach to privacy has caused, or is likely to cause, serious harm to anyone, you may wish to contact the Privacy Commissioner | Te Mana Mātāpono Matatapu, rights/making a complaint to the Commissioner.  Phone: 0800 803 909.