BVS v Sydney Local Health District [2015] NSWCATAD 171

BVS v Sydney Local Health District [2015] NSWCATAD 171

The Sydney Local Health District breached Health Privacy Principle 11 by disclosing the applicant's health information to the NSW Police without lawful authority, as the disclosure was not necessary to prevent or lessen a serious and imminent threat to another's life, health, or safety and could have been achieved...

Source-derived case information.

Parties
Applicant: BVS; Respondent: Sydney Local Health District
Jurisdiction
Australia
Judgment Date
18 August 2015
Procedural Posture
Administrative Review / Decision of Tribunal After External Review Hearing
Outcome
Breach of health privacy found; orders made for written apology and procedural changes, no financial compensation awarded.
Legal Topics
Health Information Privacy, Disclosure of Health Information, Security of Health Records, Review of Agency Conduct, Psychological Harm
Privacy Law Health Law Administrative Law Health Information Privacy Disclosure of Health Information Security of Health Records Review of Agency Conduct Psychological Harm

Source-derived case record

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 4 Authorities cited 10 Party arguments 2
Sign in to unlock

Parties

BVS

Applicant

Sydney Local Health District

Respondent

Procedural Posture

Administrative Review / Decision of Tribunal After External Review Hearing

  1. 1 Whether the Sydney Local Health District breached Health Privacy Principle 11 by disclosing the applicant's health information to NSW Police without lawful authority
  2. 2 Whether there was a breach of Health Privacy Principle 5 by way of unlawful access to or insufficient security of the applicant's health information
  3. 3 Whether discussions between the respondent's staff amounted to an unlawful use or disclosure under Health Privacy Principles 10 and 11

Ratio Decidendi

The Sydney Local Health District breached Health Privacy Principle 11 by disclosing the applicant's health information to the NSW Police without lawful authority, as the disclosure was not necessary to prevent or lessen a serious and imminent threat to another's life, health, or safety and could have been achieved without such disclosure. No breaches of HPP 5 or HPP 10 were established. No evidence was provided to support a claim for financial compensation, so no compensation was ordered, but an apology and administrative steps to prevent future breach were warranted.

Court Disposition

Breach of health privacy found; orders made for written apology and procedural changes, no financial compensation awarded.

Orders

  • The Sydney Local Health District is, within 30 days of the publication of these reasons, to render a written apology to the applicant for disclosing health information about the applicant to a third person without lawful authority.
  • The Sydney Local Health District is to advise the applicant of the steps to be taken by the agency to minimise the possibility of a similar breach in future.