The personal and sensitive information we collect about you
The types of personal and sensitive information that we collect and hold about you are:
- your name, contact details, sex, gender, date of birth;
- medical images of you, your clinical history (such as medication taken, previous test results), correspondence to and from healthcare providers, records of our past engagement with you and other relevant circumstances, such as your family, medical or employment history; and
- relevant government and insurance identifiers (such as your Medicare number or private health insurance details), when necessary for billing or other administrative purposes.
Why and how we collect and hold your personal and sensitive information
We collect personal and sensitive information about you from:
- you, when you attend our clinics, book an appointment, contact us by phone, email or through our websites;
- your request or referral form from your Referrer which includes information about your past clinical history;
- people or entities that ask us to provide you with our services, for example a hospital where you are a patient, a government department, an allied health professional, your employer, or a trial company where you are a participant in a clinical trial;
- associated I-MED entities;
- the results of any tests or procedures from other medical service providers, such as pathology and other diagnostic testing providers; or
- someone who is responsible for you, for example your guardian, carer or translator.
When we collect your personal and sensitive information from someone else, we do so on the basis that they have your consent to provide the information to us or are otherwise required or authorised by law to provide it to us.
In the course of providing you with our services, including when we use digital radiology technology and programs, we may generate personal and sensitive information that relates to you (e.g. scans and diagnostic reports).
Why we need your personal and sensitive information and how we use it
The main reason we collect, hold, use and disclose your personal and sensitive information is to provide our services to you and to carry out patient-related services.
We use your personal and sensitive information to:
- provide our services to you, including to provide a medical diagnosis or opinion and assess your health status;
- obtain or provide copies of past medical images of you, reports or other clinical information to your Referrer and their staff, other healthcare providers and their staff, and other relevant service providers and their staff (e.g. insurers);
- respond to your enquiries, provide you with a copy of your records and verify your identity;
- upload information to your MyHealth Record in accordance with your account permissions;
- carry out administrative and internal business services (e.g. billing, payment matching, complaint handling, risk management and practice accreditation);
- carry out statistical analysis, quality assurance and internal investigations;
- send out reminders for appointments;
- provide information to your employer or a government department, if the services were requested by them for you;
- notify relevant organisations (e.g. medical insurers and/or legal advisors) of an incident;
- comply with laws and assist government or law enforcement agencies where we are required or authorised to do so;
- manage our information and systems security and risks such as supporting the management of our information security and network procedures to prevent cyber-attacks, unauthorised access and other criminal or malicious activities;
- facilitate clinical or medical research where permitted by law;
- improve the use and operation of technology tools (including artificial intelligence (AI)) in the delivery of healthcare services;
- design and improve our services through system training and technical enhancements (including AI) in order to improve patient and Referrer services, health outcomes and other business activities;
- prepare case reports for discussion at clinical meetings and clinician education.
We may also use your personal and sensitive information by de-identifying it, in order for I-MED to:
- undertake certain de-identified data projects that are described at Data Projects at I-MED Radiology Network from time to time; and
- prepare online medical education, external clinical case conferences and seminars, and for preparation of medical publications.
We use technology tools (including AI) in the delivery of our services to you. These tools use your personal and sensitive information to support the booking of your service; generate medical images of you; support in clinical decision making; and dictate your radiology report via speech recognition, which also continuously trains the tool, to improve the accuracy of your reports and other patients' reports.
Information will be considered to be de-identified where it has undergone a process of de-identification such that it no longer falls within the definition of personal information under the Privacy Act.
Sharing your personal and sensitive information
We share your personal and sensitive information outside of I-MED for medical, insurance, legal, management, business improvement and administrative reasons, including with:
- healthcare providers and their administrative staff (for patient-related services), including those that:
~ are or become involved in your healthcare;
~ tell us of a serious threat to your health or safety, or other medical reason which are for your benefit;
~ have access to I-MED’s health records portal, which includes your health information. Health professionals are granted access to I-MED’s health records portal if they register an account with us and are subject to our terms of access and use of the I-MED health records portal, which includes confidentiality and privacy obligations;
- your authorised representatives;
- insurers (including Medicare) for the purpose of benefits payable or other third parties for billing/ accounts purposes;
- our staff and members of our group, and our professional advisors (e.g. auditors and legal advisors) and medical insurers;
- our third party suppliers and contractors that help us deliver our services and business operations;
- government and regulatory authorities, law enforcement and other organisations, where required or authorised by or under Australian law;
- clinics, research bodies or other healthcare providers for the purpose of engaging in clinical or medical research where permitted by law; and
- our authorised technology partners for the purpose of de-identifying personal and sensitive information to enable I-MED to then use that de-identified information for data projects that are described at Data Projects at I-MED Radiology Network from time to time.
Except as outlined above, we don't share your sensitive information with unrelated third parties without your consent or unless we are authorised or required to do so by law.

