Policy
We provide a patient portal service through ManageMyHealth that meets the HISO 10029:2022 Health Information Security Framework (HISF).
All staff, including locums, are trained to ensure they understand how the portal works, especially those who may need to demonstrate its use to patients. Clinicians are also trained in the importance of clinical accuracy and clarity.
All notes written on the patient’s record and available through the patient portal should be clear, correct, and in plain language as much as possible.
See also Practice Training and Certification Requirements.
Security and confidentiality
Staff also receive training on security protocols involved with the patient portal to ensure patient health information is kept confidential.
See also IT Security.
Health information privacy
See also Safeguarding Patient Information.
Patient information provided via a patient portal follows the same restrictions and guidelines outlined in the Health Information Privacy Code 2020 to ensure the information remains private and confidential.
Practice staff caution patients who wish to share access to their patient portal records with family members/caregivers of the potential consequences of doing so.
Parents of children under 16 years old may request access to their child’s health information:
Important! Any patients in suspected abusive relationships should be strongly cautioned against sharing their portal access information.
Patient portals for children/young people
The RNZCGP document Child and Adolescent Health: Patient Portals, Health Information and Disclosure gives guidance on what to consider if a young person (under 16 years) requests their own portal, or when setting up shared access to a portal for a young person.
Audit/review process
The practice regularly reviews the process for patient portal registration to maintain privacy and confidentiality.
All access to Medtech is traceable and only authorised staff can access patient health information.