As part of this project, I-MED shared de-identified data in line with best practice frameworks developed by the CSIRO and the Office of the Australian Information Commissioner (OAIC).

In late 2024, media commentary emerged regarding the use of this data. In response I-MED proactively engaged with the OAIC during their preliminary inquiries into the matter.

We welcome the Commissioner’s report published on 31 July 2025, which confirms “the patient data shared in this instance had been de-identified sufficiently such that it was no longer personal information for the purposes of the Privacy Act.”

The OAIC stated in its review, “this case shows how good governance and planning for privacy at the start of a new initiative can support an organisation to adopt new and innovative data-driven technologies in a way that protects the rights of individuals.” 

At I-MED, patients are at the centre of everything we do, and we are committed to continuous innovation to improve patient outcomes, while ensuring our practices align with evolving legal, governance and community expectations. Our 2020 approach was grounded in sound data governance principles aligned to this objective.

As the regulatory landscape evolves, we remain committed to the highest standards of privacy and compliance, while continuing to innovate in ways that improve patient outcomes and system integrity.  For any questions regarding our commitment to patient privacy, please contact us at privacy@i-med.com.au or visit Your Privacy.

 

Published – 31 July 2025