Personal information
Brenda Whitton Psychology is committed to protecting the privacy and security of personal and health information.
A data breach occurs when personal information held by the practice is subject to unauthorised access, unauthorised disclosure, or loss, and where this is likely to result in serious harm to an individual.

Response to a Data Breach
In the event that any unauthorised access, disclosure, or loss of personal information occurs, Brenda Whitton Psychology will activate its data breach response plan and use all reasonable endeavours to minimise the risk of serious harm to affected individuals.

This response may include:

• Containing the breach and preventing further unauthorised access

• Assessing the nature and extent of the breach

• Identifying the type of information involved and the risk of harm

• Taking steps to reduce or mitigate potential harm

Notification
Where a data breach is assessed as likely to result in serious harm, the practice will:

• Notify affected individuals as soon as practicable, and​

• Notify the Office of the Australian Information Commissioner (OAIC), in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

Notifications will include information about the breach, the types of information involved, recommended steps individuals can take to protect themselves, and actions taken by the practice to manage the breach.

Prevention and Review
Brenda Whitton Psychology takes reasonable steps to prevent data breaches, including the use of secure electronic systems, access controls, staff training, and regular review of privacy and data security practices.
Following any data breach, the practice will review its systems and procedures and take appropriate steps to reduce the risk of future incidents.

Contact
If you have concerns about the security of your personal information or believe a data breach may have occurred, please contact:
Brenda Whitton Psychology
Email: reception@brendawhitton.com.au or phone us on 0483 342 656