Health Information & Privacy Statement

This statement outlines what health information Karori Medical Centre collects, who may see it, how it is used, and the rights you have. We are required to keep your information accurate, up-to-date and relevant for your treatment and care. Your health information is yours – you can see it, ask us to correct it, and find out how it’s been used.

You directly consent to your health information being collected when you sign an enrolment form to register with Karori Medical Centre. Information is collected when you enrol, when you attend an appointment or when we receive information about you from other health services.

  • Demographic information, name, date of birth, gender, address, ethnicity, citizenship and NHI
    number.
  • Health information, for example, health conditions, medications, allergies, immunisations, test
    results.
  • Information about health care and treatment you have had, are currently having, or have been
    referred for.
  • Information about financial transactions with Karori Medical Centre.

Karori Medical Centre will generally collect information directly from you. If we need to collect information from someone else, for example, a whanaū member supporting you, we will ask you if you consent to this happening. We will explain why we need information, how it will be used and what choices you have.

Karori Medical Centre shares relevant health information with other health providers that are directly involved in your care such as pharmacies, hospitals or private specialists, laboratory or radiology providers. Health information is also shared with organisations involved in the planning, funding and delivery of healthcare. This includes our Primary Health Organisation – Cosine Primary Care Network and Health New Zealand/ Ministry of Health.

Information shared for planning, funding and statistical purposes is not allowed to be published in a
form that could reasonably be expected to identify you.

  • ACC – you consent to this at the time an ACC claim is submitted. For historical information you will
  • be asked separately for consent.
  • Government agencies that check eligibility for publicly funded services.
  • Auditors who check that services and funding claims are correct.
  • Providers of other health care services when you are referred for testing or treatment.
  • Organisations that you request us to share with – e.g. health insurance, medical reports,
    driver’s license medical assessment.
  • Other situations if required by law or if allowed by the Health Information Privacy Code 2020.
  • To assign a National Health Index (NHI) number
  • To check eligibility for publicly funded health services.
  • For support and delivery of PHO or publicly funded programmes such as screening services,
    diabetes care, immunisation
  • To provide you with health care
  • Health service planning, funding and reporting
  • Monitoring and improving service quality
  • Research – health information that does not identify you may be used for research that has
    been approved by an Ethics Committee.

If you are under 18, or have a High User Health Card, or Community Services Card, and you visit a GP who is not your regular doctor, Karori Medical Centre as the practice you are enrolled with for usual care will be informed of the date of that visit. The name of the practice you visited and the reason for the visit will not be disclosed unless you have agreed to this.

Karori Medical Centre contributes to an electronic shared health record. This provides a summary of your health information that can be accessed by other health providers within approved services, only when it is needed to support your health care. You have options to control what information is made available to this record. You can exclude:

  • All health information (called opting off)
  • Health information from a certain practice or provider
  • Specific health information like a health condition or medication

Advise us if you want to limit information or opt off. Opting out may mean clinicians have less information about your health in urgent situations.

Discuss with us if you want to limit use of your information or ask for it not to be used in some ways. Some uses are required by law or needed for safe care, but we will explain your options and any impacts on your care or access to subsidised services.

Karori Medical Centre follows privacy and healthcare laws to decide what information can be shared with parents or caregivers. Clinicians may withhold information if sharing it would put a young person at risk.

You have the right to see the information we hold about you. You don’t need to tell us why you’re asking for your information, but we may need to confirm your identity first. If you ask for another copy of the same information within 12 months, we may charge an administration fee. If this will be more than $30 you will be given a quote before the request is processed.

If you think something is wrong or incomplete, you can ask us to correct it. If we cannot make the change, we will explain why and add a note to your record showing that you asked for a correction.

Health information is stored in our practice management and IT systems. When this is being transmitted from the practice to another location such as the PHO, shared health record or Health New Zealand we use secure transfer protocols to protect your information that meet HISO 10029:2022 Health Information Security Framework.

We keep your information for as long as required by law. In some cases, paper records may be securely destroyed after they have been safely digitised.

If a privacy breach occurs that could affect you, we will let you know and, where required, notify the Office of the Privacy Commissioner.

If you have any questions or worries about how your information is handled, please talk to us. If you are still unhappy with the response you can call the Office of the Privacy Commissioner toll-free on 0800 803 909, as they can investigate this further. The Health Information Privacy Statement may be updated from time to time. The most recent version will be available at the practice and on our website.

For further information Visit www.legislation.govt.nz to access the Privacy Act 2020, Health Act 1956, and the Health (Retention of Health Information) Regulations 1996. The Health Information Privacy Code 2020 is available at www.privacy.org.nz. You can also use the Privacy Commissioner’s Ask Us tool for privacy queries.

Some clinicians at Karori Medical Centre may use AI supported tools to help with tasks such as transcription or summarising clinical notes. These tools do not make decisions about your care. Any information processed by AI is encrypted, kept within secure systems, and reviewed by a clinician before it becomes part of your record. If you do not want AI tools used in your consultation or would like to know which tool is being used, please let your clinician know. Your clinician will ask for your consent to have AI used in a consultation.