Understand what happens to the personal information you share as a client of a mental health service provider commissioned by Darling Downs and West Moreton PHN (the PHN).
This FAQ was developed for PHNs and their commissioned service providers to share with clients to explain the Primary Mental Health Care Minimum Data Set (PMHC MDS) and how data are collected, stored and used.
1. Why is my data collected and how is it used?
As part of providing services to you, your mental health service provider will collect some information about you and the services you are accessing. This will be kept by the provider and will be primarily used to keep up-to-date details about your needs. This data also helps your service provider understand how their mental health services are being used, so they can work to improve those services.
Your de-identified personal information will not be shared with anyone apart from you, your service provider, and your Primary Health Network (PHN), which funds your service provider. Your information will not be disclosed to any other person, organisation or agency, unless you consent, or where disclosure is authorised or required under privacy law (such as in the case of a medical emergency). Your service provider stores data to ensure they can provide the best possible services.
If you give consent, your de-identified information will be provided to the Australian Government Department of Health and Aged Care (the department), and state and territory health departments/agencies to help them monitor and evaluate the services that are provided to you. When your data are de-identified, your name, address and Medicare number are removed. See question 11 for a more detailed explanation of de-identification.
The department and state and territory governments may combine the de-identified information provided with other data they hold, but only if this is allowed under privacy and other laws. Your de-identified information may be combined using unique codes. These codes enable information about you from different data sources to be combined without individually identifying you. These bodies will make sure that you cannot be individually identified in any research findings, reports or other outputs from their work.
2. What is a Primary Health Network (PHN)?
PHNs were established by the department to fund health services in your local community, including your mental health service provider. More information about PHNs can be found on the department’s website.
PHNs collect data about the services you receive to help with future planning for health services, and to improve the quality of mental health services in your local area.
3. What happens to my data?
If you have given consent, your data will be provided electronically to the department and state and territory health departments/agencies through the Primary Mental Health Care Minimum Data Set (Data Set). The data are de-identified by removing personally identifying information, such as your name and address, before they are provided.
The department and state and territory governments may combine the de-identified information provided with other data they hold, but only if this is allowed under privacy and other laws. Your de-identified information may be combined using unique codes. These codes enable information about you from different data sources to be combined without individually identifying you. These bodies will make sure that you cannot be individually identified in any research findings, reports or other outputs from their work.
The data are stored securely in Australia by an IT organisation called Logicly, which has been contracted by the department to manage the Data Set securely on its behalf.
Data may also be stored by your service provider and/or your PHN in their client information systems. If you would like more information about how your data is used and stored, please ask your service provider for more details about their data storage and privacy policies. Your service provider can provide details of their privacy policy.
For further details about the de-identification of data, please see question 11.
If you do not consent for your data to be included in the Data Set, certain information about your service will still be collected and used in summarised reports. The department and state and territory health departments/agencies use this information to understand the overall number and types of services being provided. You will not be able to be identified from these reports.
4. Who can access it?
Your data can be accessed by:
- Your mental health service provider – The organisation who is providing your care. They work in partnership with your local Primary Health Network (PHN).
- Your local PHN – This organisation is funded by the Department of Health and Aged Care (the department) to fund mental health services from suitable health service providers in your local area. They are responsible for ensuring services are effective, efficient and meet clients’ needs.
- The department – to understand the overall number and types of services being provided and to help improve the planning and future funding of mental health care services. Trained and authorised analysts at the department use the data by accessing this secure IT system. From time to time, the department may share the data with third parties for the purpose of program evaluation. Where this is the case, additional protections are put in place to ensure your privacy is protected.
- State and territory health departments/agencies – to understand the overall number and types of services being provided and to help improve the planning and future funding of mental health care services.
- Logicly – This organisation manages the secure IT system where your data are stored and protected. Your data is stored securely in Australia.
- The Australian Institute of Health and Welfare (AIHW) – to understand overall number and types of services being provided.
5. Can I change my consent?
Yes. You can choose to change or withdraw your consent for the department and state and territory health departments/agencies to access your data through the Data Set at any time. Please contact your service provider if you wish to change or withdraw your consent and your data will be removed from the Data Set.
6. What data is collected?
When your data are added to the Data Set, the department collects and securely stores information from your service provider about: your service provider organisation, the practitioner who is delivering services to you (not including their name), and the services they provided. This may also include the following information about you:
- Your date of birth
- Your gender
- Your marital status
- Whether or not you identify as Aboriginal and Torres Strait Islander
- Your country of birth and main language spoken at home
- Your postcode and type of residence
- Information about your employment and source of income, including if you receive any pensions or benefits
- Whether you have a health care card, or are participating on the National Disability Insurance Scheme (NDIS)
- Date of your referral and who referred you
- Whether you have a GP Mental Health Treatment Plan (if applicable)
- Your main mental health diagnosis, and any other diagnoses
- Whether or not you are taking certain types of medications for a mental health condition
Your service provider may also provide your results from one (or more) outcome questionnaires, which will help to determine if their services are working for you.
7. Can I refuse to answer any questions?
Yes. Even if you have provided consent for your data to be shared with the department and state and territory health departments/agencies, you do not have to provide any information you don’t feel comfortable with sharing. This includes using a pseudonym (a made-up name), if you wish.
8. Can I still access services if I do not consent to sharing my data?
Yes. You do not have to provide consent to share your data to receive services. If you prefer not to have your data shared, please contact your service provider. Your service provider will continue to provide services to you, even if you choose for your data to not be provided to the department and state and territory health departments/agencies.
9. Where does my data go?
When your data are sent to the Data Set, they are held in a secure data storage system (managed by Logicly) which is housed in Australia. Only authorised people will be able to see your data.
10. What is the role of the Government?
The Government through the Department of Health and Aged Care (the department) and State and Territory health departments fund PHNs to fund health services in your local area. These Governments use data about PHN funded service delivery to monitor and evaluate whether PHNs are achieving their goals, and to assist in improving mental health services in Australia.
11. What does it mean that my data are de-identified? Can I be identified from my data?
When your data are de-identified, this means that information with direct identifiers such as your name, address and Medicare number are excluded, and only information like your date of birth, gender, and the types of services you received records are collected.
Removing this information makes it extremely unlikely that you will be identified, however that does not mean there is no possible way for you to be identified. To provide additional protections, the department has a range of security controls in place to protect its data from unauthorised access such as restricted IT security and only providing access to authorised users for approved purposes. The department puts protections in place to ensure any use of the data does not seek to identify you.
12. Who do I contact if I have any questions?
If you have any questions about the use of your data, please contact your service provider.
13. Can I have my data removed/deleted from the Data Set?
Yes. If you withdraw your consent, no further information will be added to the Data Set. However, as data in the Data Set does not contain information that can be used to identify you, only your service provider can remove or edit your individual data.
14. Can my data be shared with other departments e.g. Centrelink?
The Government may share data reports with other government departments and organisations from time to time. De-identified data may also be linked with other de-identified data as discussed in Q3. However, data are only used for monitoring service performance, and to facilitate research to improve the planning and funding of future mental health services.
15. What is good about agreeing to provide data?
The data that are collected through the Data Set plays an important role – it helps government departments/agencies and PHNs plan services and programs to improve mental health care in Australia. The data are also used to evaluate programs and services, to find out how well they are working and what needs to be done to make them work better.
16. What does ‘informed consent mean’?
In this context, informed consent means that you clearly understand why your information is being collected and how it will be handled. It also means that you agree to your data being provided to the Data Set.
Providing consent for your data to be provided to the department and state and territory health departments/agencies should always be voluntary. It is important that you are given adequate information about the use of your information before you provide consent. If you are under the age of 18, your service provider will be able to determine your capacity to consent. Informed consent for people under the age of 15 must be obtained from a parent or authorised caregiver. Please ask your service provider if you need any further information to make an informed decision.
If you do not consent for your data to be included in the Data Set, certain information about your service will still be collected and used in summarised data reports. These reports help the department and state and territory health departments understand the overall number and types of services provided. You will not be able to be identified from these reports.
17. Where is my data stored?
Your data may be stored in several places, depending on who you consent to sharing your data with, including:
- In a secure client information management system. This is a type of medical/health records system owned either by your PHN or mental health service provider.
- In your PHN’s secure data storage systems
- In Logicly’s secure data storage systems
- In the department’s secure data storage systems (only if you consent).
- In the secure data storage systems of state and territory governments (only if you consent) All data held by the department and Logicly are stored in Australia
View the Privacy policies of
- Darling Downs and West Moreton Primary Health Network
- RHealth, provider of the ReferHealth system used by your service provider