Australian privacy

Miraa is built for Australian clinicians and handles health information, which is sensitive information under Australian privacy law. This page is a practical orientation — not legal advice.

The general expectations

Australian clinics handling health information are generally expected to:

• Collect personal and health information fairly and for a clear purpose.
• Obtain consent appropriate to the situation. See Patient consent.
• Keep information secure. See Data security.
• Use and disclose information only for appropriate purposes.
• Retain and dispose of records per legal requirements. See Data retention.
• Let patients access their own information as required.

Miraa supports these practices; it does not replace your clinic’s privacy obligations or policies.

Using Miraa in line with your obligations

• Minimise. Keep patient-identifying detail to what’s clinically necessary, especially in communications and referrals.
• Right recipient. Send referrals and messages only to the intended recipient. See Referrals.
• Right channel. Don’t disclose sensitive clinical detail over an insecure channel; a recall reminder should say enough to bring the patient in, not reveal a diagnosis. See Recalls.
• Least access. Only view records you’re entitled to; access is logged. See Audit trail.

What these docs don’t claim

Where to get authoritative guidance

For authoritative privacy guidance, refer to your clinic’s privacy officer or policy, your professional college or association, and official Australian privacy resources. For anything uncertain, seek qualified advice.

Related pages

• Patient consent
• Data security
• Data retention