The creation of a national cancer screening registry is a step closer after a senate committeeĀ backed key enabling legislation with a call for tighter rules on privacy and data breaches.
The Community Affairs Legislation Committee recommended parliament pass the enabling legislation while calling on the government to closely consider amending the National Cancer Screening Register Bill 2016 to strengthen privacy provisions.
It said the bill should be revised in line with advice from the Office of the Australian Information Commission (OAIC) to strike out the use of patient information for āincidentalā purposes.
In other words, the information should be used only for reasons related directly to the purpose of the new register.
āAuthorising the information to be handled for any purpose that is āincidentalāĀ to the other purposes may be too broad and presents a risk that information may be used or disclosed for more expansive purposed than originally intended,ā the OAIC said in a submission to the committee.
The OAIC also noted ambiguous wording related to MedicareĀ claims information, recommending the bill be amended to specify that the register should only contain information about whether an individual had undergone, or should undergo, screening.
On the reporting of data breaches, it recommended mandating disclosure of breaches to the individuals affected, consistent with requirements under the legislation for electronic health records.
The Health Department has said it was āactively consideringā all recommendations from the OAIC.
The AMA and the RACGP, among others, have voiced strong reservations about Telstra Health being awarded the $220 million contract to run the new registry for five years.
The AMA said there had been a ālack of transparencyā around the contract and it would prefer the register remained in the hands of government, a tertiary institution or non-profit body owing to the potential commercial value and sensitive nature of patient information.
āThe awarding of such a contract to an entity that has hitherto had no direct role in establishing or operating a register of this kind sets a challenging and potentially troublesome precedent,ā it said.
Labor members of the bipartisan committee said they were not satisfied the report adequately reflected the breadth concern over the $220 million contract.
In additional comments attached to the report, ALP senators Sam Dastiyari and Murray Watt demanded the government release the final version of its contract with Telstra Health.
The Labor senators also said the report did not reflect significant community concern over the $21,600Ā penalty for unauthorised collection, use or disclosure of patient data.
They noted the concerns that while the penalty might be enough to deter small, not-for-profit organisations, it would not deter a large, for-profit corporationĀ such asĀ Telstra Health.