MediTracker

Can patients update their own medical record?

No. MediTracker extracts a view-only medical summary, in the same way as a My Health Record or a GP would give their patient a printed summary. It does not extract GP notes or any information marked as confidential.

The main purpose of MediTracker is as a convenient means to provide information to other care providers, in emergency or out of hours, or on travel, rather than for the patient’s own use.

Where is the data hosted and who can access this data?

Data is hosted in Australia in an ISO27001:2013 certified facility (the internationally recognised standard for secure storage of electronic data). Only persons or organisations on the patient’s care team, as agreed by the patient and their GP, can access this data. In certain circumstances, Precedence Health Care staff may need to access this data. The only reason allowed for accessing patient data is for technical support or debugging, or to meet Precedence legal obligations, and only when necessary to do so.

At what stage is a patient's medical record uploaded to the MediTracker service?

No records are uploaded when MediTracker is installed at the practice. Medical records are created on patient demand: the patient has to install MediTracker on their device and request their record through MediTracker.

If the patient doesn’t request their record, the record is not created and no data is uploaded or stored by Precedence Health Care.

Does sharing information to MediTracker breach the Privacy Act or consent?

Patient records with identified information are only created within MediTracker after patient consent has been obtained and recorded. Until the patient has consented to their data being uploaded and the practice has consented to the use of MediTracker, no identified patient data is uploaded from the practice to the MediTracker or cdmNet cloud storage.

If the patient doesn’t request their record, it isn’t created. Precedence Health Care does not hold records for which there is no patient consent.

What policies are in place to protect my patient's data?

MediTracker, as a portal to the cdmNet platform, has privacy and security policies as well as architecture and processes that meet strict security requirements:

https://precedencehealthcare.com/docs/cdmnet/help/privacy/Privacy%20Policy.pdf

Precedence Health Care complies with the Privacy Act and the Medical Records Act. Precedence uses industry best practice for secure record storage, security audits, and disaster recovery, and ISO-standard private cloud storage, access logs, and staff training and support.

Precedence Health Care complies with the following policies and legislation which have been reviewed by the Privacy Commissioner:

• Health Records Act 2001(Victoria)
• Privacy and Data Protection Act 2014 (Victoria)
• My Health Records Act 2012 (Commonwealth)
• Healthcare Identifiers Act 2010 (Commonwealth)
• Privacy Act 1988 (Commonwealth)

Does MediTracker show sensitive pathology results?

MediTracker only displays non-sensitive test results and observations. The test results displayed in MediTracker have been compiled in consultation with GPs.

Measurements are added to MediTracker as they are added to the patient’s file (that is, only after the GP has viewed the results and added them to the patient record).

Only non-sensitive results are displayed. The complete list is:

• Blood Pressure (mmHg)
• Hip Circumference (cm)
• Waist Circumference (cm)
• Weight (kg)
• Height (cm)
• *BMI (kg/m²)
• Serum Creatinine (µmol/L)
• HbA1c (mmol/mol)
• Microalbumin (Spot Albumin : Creatinine Ratio) (mg/mmol)
• Proteinuria (mg/24 hours)
• Blood Glucose Level (mmol/L)
• *Estimated GFR (eGFR)
• HDL (mmol/L)
• LDL (mmol/L)
• Total Cholesterol (mmol/L)
• Triglycerides (mmol/L)
• *Absolute CVD Risk (%)

Those marked with a * are calculated based on other measurements.

Is providing test results to patients dangerous?

The display of non-sensitive test results is in accordance with current world best practice. There is no evidence that providing the above non-sensitive results to the patient is dangerous. A review of the use by patients of clinical data can be found here:

https://www.pulseitmagazine.com.au/component/content/article?id=2143:patient-acces_2

Again, it is important to note that the main purpose of MediTracker is to make patient information available to other providers, not for patient use.

Can I see what MediTracker looks like?

The MediTracker FAQ page here contains test credentials. Download the app to a device and use the test credentials to sign in and view MediTracker.