QLD Hospital medical record confidentiality

Australia's #1 for Law
Join 150,000 Australians every month. Ask a question, respond to a question and better understand the law today!
FREE - Join Now

CarlillvsCarbolic

Active Member
27 April 2023
6
0
31
Many years ago, in 2013, a friend of mine was subjected to a malicious Justice Examination Order (JEO) which saw him escorted by the police, with no warning whatsoever, to the mental health section of a well known QLD public hospital where he was subsequently held for weeks until the first obligatory mental health review tribunal (MHRT) where he won back his freedom. This forced detention was justified under the now defunct mental health act (2000) which was after much needed agitation by both ex-patients and advocacy groups, reformed to improve patient rights in 2016. Now judges such as the one that signed off on my friends JEO can only do so AFTER consultation with a medical practitioner to ensure such life changing decisions aren't just made by someone like a magistrate court judge with little actual understand of mental health.

Notwithstanding the destructive impact this experience had on his confidence, and familial relationships (the father lodged the JEO in the first place with collateral supplied by the mother), he didn't let it get him down, and after returning to his degree related employment for the next few years, decided eventually to pursue his calling in a health related field. To ensure his reputation and future ability to practice in this calling wouldn't be compromised by what was an unjustly created medical record, he changed his legal name before embarking on the new field of study. This saw him return to study in this area as a mature aged student before finally moving interstate to NSW where he has now successfully graduated and is qualified to pursue his calling in that health related field.

He'd always felt confident that although damning, his medical records at that public hospital were sufficiently confidential by virtue of his name change and move interstate, for him to not have to take any further action. Indeed the retention and disposal schedules for these public hospitals indicate that records are destroyed after 10 years which just passed recently. However, the privacy and confidentiality landscape has changed enormously since 2013. In 2018 an Electronic Medical Records (EMR) online database was rolled out federally meaning that even interstate practitioners can look up any patients records, and apparently this system is separate from the official My Health Record (MHR) that my friend opted out of at the earliest opportunity in late 2018.

Furthermore, on liaising with the relevant hospital to inquire about how his records may have been disclosed or accessed over the preceding 10 years, he learnt that 10 years is just the minimum retention time for medical records, and that this particular hospital retains electronic records indefinitely and continues to hold paper records (his) since 2001 with no plans to destroy anything in the near future. Realising that his record wasn't going to be deleted anytime soon, he then inquired about what he could do to ensure the confidentiality of that record to ensure that no random doctor or third party could access his records. In a series of evasive responses the hospital's director of info services seemed to indicate that a patient can't actually prevent practitioners from accessing his record if the record request is justified under certain grounds such as to aid in the ongoing care of their patient, or in the case of third party requests: legal proceedings / court subpoena's. They referred to confidentiality of their records as being governed by the Hospital and Health Boards Act (2011). On checking this act for the relevant sections he was shocked to discover that not only can practitioners access his record with little obstruction, but even carers, friends and parents can make enquiries on that record should they have an ongoing interest in the "welfare" of that patient...

Realising that his ability to keep his damning medical record confidential was a lost cause given the pathetic protections afforded by the governing legislations which were probably written before the advent of these interstate medical record systems, he inquired about having his record deleted outright noting that its now over 10 years, and as far as he's aware, it doesn't fall into any of the special exemption categories such as a hospital stay mandated by forensic orders. However even on this there's some uncertainty given the police involvement and the fact his detention was instigated by a magistrate court Justice Examination Order - Are these deemed as forensic orders??? My check of the Mental Health Act (2000) seems to indicate that an involuntary treatment order is not technically a forensic order, but perhaps there are those here with experience of the system that can confirm for sure?

This is where the evasive replies from the hospitals director of info services may have become downright misleading. In response to my friends query about record deletion they seemed to indicate that it is indeed possible if the record is 10+ years, but that it would need to be justified with consideration of the Health Sector (Clinical) records retention and disposal schedule, Qld State Archives Disposal Schedule, and only then with the approval of the relevant health service districts Chief Officer! A subsequent check of the veracity of this advice with a broad internet search seems to indicate that whilst possible, hospitals rarely delete records in case it leaves them vulnerable to some medical negligence claims down the track, and that the best one can hope for is to request the records be amended on the grounds that the record is either out of date (yes), incorrect (yes), or misleading (yes) for any future practitioners that might view it.

To complicate matters further, he rightly wants to get a log of how his record may have been disclosed or accessed before the record gets deleted. They responded to this saying that he can ask for that record by specifying who he things may have looked up his record illegally, but without knowing who might have looked it up, he asked can he not just ask generically for a list of all persons that may have accessed it given his rights to inquire generically as to his medical record privacy and confidentiality. They admitted that they can run reports that would show any/all persons that accessed the record, but gave little else. So there's now an added concern that a request for this access log could be deemed by the hospital a "legal" inquiry that might reset the 10 year retention timeframe for his medical record! I think he might be viewing this all a bit cynically but given their avoidant and evasive responses to date, its understandable. On the advice of others it does indeed seem plausible, however, with one of the better arguments being that: because his original inquiry wasn't responded to within the mandated timeframes, and then being escalated to the clinical director of the info services unit, it would have certainly involved the involvement of their legal department given the depth of ongoing inquiries that the director has then responded to.

So as you can see, my friend has a medical record that if continued to stand in its frankly unprotected state, will lead to reputation and credibility risk as he tries to make good on his new health qualification. What can he do to ideally learn who may have accessed the record together with then getting his record deleted, or at the very least, deletion of the record in case the request for access history may indeed reset the 10 year retention time frame...
 

CarlillvsCarbolic

Active Member
27 April 2023
6
0
31
Surely there are members of this community that have knowledge or even experience dealing with privacy and confidentiality of QLD hospital medical records? If so, please stand up and make yourself heard as this issue is basically preventing my friend from living a normally life and follow his calling..
If anyone has any QLD based lawyers who they know to specialise in this field of medical record privacy and its close relative: medical negligence, then please also give your recommendations..
 

Rod

Lawyer
LawConnect (LawTap) Verified
27 May 2014
7,733
1,056
2,894
www.hutchinsonlegal.com.au
Sorry - not ignoring you, just can't help with this query.
 

Tim W

Lawyer
LawConnect (LawTap) Verified
28 April 2014
4,939
820
2,894
Sydney
Sorry - not ignoring you, just can't help with this query.
Nor can I.
Except to suggest that his attempt to conceal his history
has probably done him more harm than the history itself would have done
if he he had admitted it.
 

CarlillvsCarbolic

Active Member
27 April 2023
6
0
31
Surely there are members of this community that have knowledge or even experience dealing with privacy and confidentiality of QLD hospital medical records? If so, please stand up and make yourself heard as this issue is basically preventing my friend from living a normally life and follow his calling..
If anyone has any QLD based lawyers who they know to specialise in this field of medical record privacy and its close relative: medical negligence, then please also give your recommendations..
and neither can one of the leading law firms that specialises in medical negligence apparently... My friend called them yesterday and they said they only handle instances of actual medical negligence and not the privacy/confidentiality aspect... It's absolutely remarkable how little legal help there is out there for this issue. My friend can't be alone in having been put in this compromising situation by virtue of the malicious JEO. There must be many people from many different backgrounds who've had this mental health stigma forced upon them and found some justice through legal means...
 

CarlillvsCarbolic

Active Member
27 April 2023
6
0
31
Nor can I.
Except to suggest that his attempt to conceal his history
has probably done him more harm than the history itself would have done
if he he had admitted it.
I understand my original post was quite long, but I suggest you re-read it before revealing your prejudice. His being held at that hospital was the result of a malicious JEO - one of the many reasons the QLD Mental health act (2000) was reformed into the 2016 version... To minimise this kind of injustice from repeating.

Sometimes it helps to put yourself in the position of another. Would you admit that you had an incorrectly diagnosed mental disorder that destroyed any credibility you might have in, for example, giving legal advice to people that probably makes up your livelihood?
 

Ajason

Active Member
24 April 2021
11
0
31
and neither can one of the leading law firms that specialises in medical negligence apparently... My friend called them yesterday and they said they only handle instances of actual medical negligence and not the privacy/confidentiality aspect... It's absolutely remarkable how little legal help there is out there for this issue.
Did this get anywhere? I'm asking as in the same situation and encountered similar responses from dozens of law firms over the years. I've made some headway in that the hospital recently admitted the records are incorrect but still refuse to do anything about it. The issue is compounded that those incorrect records are now referenced on the internet and relied upon by anyone and everyone with a grievance against me.
 

CarlillvsCarbolic

Active Member
27 April 2023
6
0
31
Hi All,

In the many months that have now passed since originally starting this thread my friend has finally got the hospital to agree to the deletion of his medical records, but with one important proviso: that he provides a statutory declaration confirming that he has no legal proceedings afoot that might rely on the medical records in question. Prior to this stat dec mandate they said that deletion would proceed so long as he provided a witnessed identity document, which he did, but then upon review by the CEO of the relevant health service district, and with the input of the QLD health legal dept (why they even got involved we may never know), they then said the stat dec was required. To be frank they've probably looked up his current (new) name, and knowing how privacy conscious he is, have demanded the stat dec hoping to deter him from following through with the request lest the records be updated with his new name. They even had the audacity to claim that this was the first request of this type that they'd received..

In any event he looked at the potential counter arguments to providing the stat dec that he could provide having informed himself of the IP Act (2009) which has National Privacy Principles contained within. NPP 8, in particular, protects the rights of individuals to transact as anonymously as lawfully practicable with health agencies. After flagging this with the OIC they suggested that instead of supplying a typical statutory declaration, my friend could make the attestation regarding the non reliance of his med records on any legal proceedings in front of a JP, together with presenting his change of name certificate, and then that JP could write a brief statement confirming that the individual (original name) has provided a sworn confirmation of same.. They didn't however provide the official term for this kind of statutory declaration, and so my friend doesn't know what he needs to be asking for when he approaches a JP to draw this statement up. The OIC also mentioned the possibility of a video link attestation where the witnessing JP would then produce a statement confirming same, and thus avoiding the need for him to provide a traditional stat dec that as far as we know, must be in the current legal name of the person making it...

If there are any JP qualified solicitors here that can confirm what the options are here given his goal of providing the stat dec, but avoiding giving away his new name, and what exactly the term is for this JP statement written on behalf of the person making the statement, it would be a great help. Bonus points for any genuine arguments that might be able to be made to avoid needing to provide the stat dec in the first place...

Thanks in advance,
 

Ajason

Active Member
24 April 2021
11
0
31
That's interesting and a good step as the responses I get from health department in NSW is that it's illegal to delete medical records. Of course these are just generalised and sweeping replies by staff who have no idea or are unwilling to understand. They think that whatever is inserted in your medical file is a "medical record", must be accurate, and is untouchable.

I think the request for a stat dec is reasonable in that the hospital wants to be sure that it is not deleting something needed for legal proceedings and aside from making inquiries with every single court and tribunal jursidiction, getting a stat dec is an acceptable alternative. I do agree its incredibly frustrating compounded by the need for anonymity simply to prevent being held hostage by the original malicious act. A criminal conviction is spent but a false and incorrect mental health record follows you for the rest of your life. Deny it and a diagnosis of delusional is added to the file.

Tools I've used in NSW are the NSW Privacy & Personal Information Protection Act 1998 and the Health Records and Information Privacy Act 2002, as well as the NSW Government Information Public Access (GIPA) Act 2009.