Privacy and Information Sharing
East Metropolitan Health Service (EMHS) is committed to protecting your privacy and ensuring that personal information is collected, used, disclosed and stored responsibly.
As part of the Western Australian public health system, EMHS manages personal information in accordance with applicable legislation, including the Privacy and Responsible Information Sharing Act 2024 (WA) (PRIS Act), the Health Services Act 2016 (WA), and other relevant laws.
We collect personal information only where it is necessary to provide healthcare and support services, manage our workforce and volunteers, engage contractors and service providers, meet legal obligations, and operate our services safely and effectively. We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification and disclosure.
This page provides information about how EMHS manages personal information, your rights under privacy legislation, and how you can access, correct or make a complaint about the handling of your personal information.
Collection Notices
The PRIS Act requires public sector agencies to provide individuals with information about the personal information they collect, why it is collected, how it will be used and shared, and the consequences if it is not provided.EMHS Collection Notices provide this information for different groups of people who interact with our services.
Consumers and Patients
Information for patients, consumers, carers, authorised representatives and individuals receiving healthcare services from EMHS.
[EMHS Collection Notice - Consumers and Patients]
Staff, Students and Volunteers
Information for employees, prospective employees, students, trainees, interns and volunteers working within EMHS.
[EMHS Collection Notice - Staff, Students and Volunteers]
Contractors, Service Providers and Collaborating Partners
Information for contractors, suppliers, consultants, service providers and organisations that collaborate with EMHS.[EMHS Collection Notice - Contractors, Service Providers and Collaborating Partners]
Visitors and Guests
Information for visitors attending EMHS hospitals, health services and administrative facilities.
[EMHS Collection Notice - Visitors and Guests]
CCTV and Security Monitoring
Information about personal information collected through CCTV systems, security monitoring systems and other security technologies used to maintain a safe environment for patients, visitors and staff.
[EMHS Collection Notice - CCTV and Security Monitoring]
EMHS Privacy Statement
The EMHS Privacy Statement explains:
- what personal information we collect
- how we collect personal information
- why we collect and use personal information
- how personal information may be disclosed or shared
- how we protect the information we hold
- how long information is retained
- your rights to access and correct personal information
- how to make a privacy complaint.
Accessing or Correcting Your Personal Information
You have the right to request access to personal information held by EMHS and to request correction of information that is inaccurate, incomplete, out-of-date or misleading.
Requests to access health records or other personal information may be made under the Freedom of Information Act 1992 (WA) or other applicable legislation.
For information about accessing your records, submitting an application or obtaining assistance, please visit the EMHS Freedom of Information webpage.
Privacy Complaints
EMHS is committed to managing personal information transparently and responsibly.
If you believe EMHS has not complied with its privacy obligations or has handled your personal information inappropriately, you may make a privacy complaint. When submitting a complaint, please provide as much information as possible, including:
- your contact details
- details of the privacy concern
- relevant dates, locations and services involved
- copies of any relevant supporting documentation.
- EMHS will review and respond to privacy complaints in accordance with the Privacy and Responsible Information Sharing Act 2024 (WA) and applicable WA Health policies and procedures.
Responsible Information Sharing
The PRIS Act establishes a framework that enables authorised information sharing between public sector agencies where it is lawful, necessary and proportionate to improve services and outcomes for the Western Australian community.
EMHS only shares personal information where permitted or required by law and where appropriate privacy, security and governance safeguards are in place.
Information sharing is undertaken in accordance with legislative requirements, approved information sharing arrangements and WA Health policies.
Privacy and Responsible Information Sharing Act 2024
The Privacy and Responsible Information Sharing Act 2024 (WA) establishes a statewide privacy framework for Western Australian public sector agencies.
The Act:
- introduces Information Privacy Principles that govern how personal information is handled
- strengthens transparency and accountability for public sector agencies
- provides individuals with rights relating to their personal information
- supports responsible information sharing in the public interest
- strengthens requirements for the secure management of personal information.
EMHS is committed to implementing and maintaining practices that support compliance with the Act and promote trust in the way personal information is managed.