Privacy and security of Canberra Script
Information collected in Canberra Script is a health record and is protected by law under the Health Records (Access and Privacy) Act 1997.
The Medicines, Poisons and Therapeutic Goods Act 2008 outlines acceptable use and offences related to this information.
Strict penalties apply for anyone found to be inappropriately accessing or using Canberra Script information.
Protection of patient information
Each time a record is viewed in Canberra Script, a log is created and this is monitored by ACT Health.
If we detect unauthorised use, you may face penalties as outlined in the Medicines, Poisons and Therapeutic Goods Act 2008.
A Privacy Impact Assessment has been undertaken to ensure the implementation of Canberra Script is compliant with privacy laws.
Canberra Script is based on the National Data exchange (NDE) which collects information, including personal information, from prescribing and dispensing software, and a range of other external data sources, to produce real-time detection and alerting information for regulators, prescribers and dispensers. The Commonwealth does not have access to personal information in the NDE.
Go to the Australian Government Department of Health and Aged Care to find out more about how personal information is protected in the NDE.
Information in Canberra Script
A prescriber or pharmacist can look up information in Canberra Script for any patient in the ACT. Information displayed includes:
- patient details
- monitored medicine prescribing and dispensing history
- ACT CHO approvals to prescribe a controlled medicine.
Information appears in Canberra Script for any monitored medicines prescribed or dispensed from an ACT practice or pharmacy, regardless of a person’s address. Information also appears for monitored medicines that have been prescribed or dispensed interstate for ACT residents.
Who has access to patient records
A prescriber or pharmacist is permitted to view a patient record in Canberra Script in the following circumstances:
- when prescribing or supplying a monitored medicine to the patient
- when reviewing the patient’s monitored medicine history as part of a patient consultation
- when discussing the patient’s monitored medicine history with other registered health professionals who are involved in that patient’s care
- when applying for Chief Health Officer approval
- a purpose prescribed by regulation
You should talk to a patient about what information you will access and how the information is used in decisions about their treatment.
ACT Health staff authorised by the Chief Health Officer can also access Canberra Script as part of their regulatory role in ensuring the safe supply of medicines in the community.
Entering accurate data
Pharmacists and pharmacy staff must enter accurate and complete data into dispensary systems.
Dispensing information displayed in Canberra Script is sourced from pharmacy dispensing software and transmitted via the Prescription Exchange Service and the National Data Exchange (NDE).
Canberra Script helps clinicians identify patients at risk of harm. It does not prevent clinicians from prescribing or dispensing a medicine you believe is clinically necessary.
How Canberra Script keeps information secure
Data transmitted between medical practice prescribing systems, pharmacy dispensing systems and the Canberra Script database is encrypted at all times and occurs through a secure, encrypted internet connection. Data stored in the Canberra Script database is encrypted.
Transmission happens through a secure, encrypted internet connection. Data stored in the Canberra Script database is also encrypted.
Canberra Script uses other security measures to safeguard data against unauthorised access. Health professionals are required to use multi-factor authentication to access the system. The security of the system is regularly tested and reviewed to make sure data stored in Canberra Script is protected.
How patients can access their information in Canberra Script
Information collected in Canberra Script is a health record and is protected by law under the Health Records (Privacy and Access) Act 1997.
A patient can ask you for information about their Canberra Script record. You can discuss this information with them.
If a patient believes their information in Canberra Script is incorrect, they can ask you to correct it. The error or omission may be due to an error in your clinical system.
When a change is made in your clinical system, the change will automatically be updated in Canberra Script.
Email canberrascript@act.gov.au for more information about:
- asking for changes in Canberra Script
- patients requesting access to their health information.
How to make a privacy complaint
If a health professional or patient is concerned about their privacy, they can make a complaint to ACT Health.
Email the ACT Chief Pharmacist at hps@act.gov.au
Get more help
Visit the Canberra Script website for more information about the terms of use and patient privacy.
To learn more about how personal information is protected under the national real-time prescription monitoring system, go to the Australian Government Department of Health and Aged Care website.