"Data breach"

Unfortunately I have relied heavily on the public health system in WA for the last few years. My care and support has been great but I am concerned with the ongoing (and historic) supply of my medically sensitive claims data to Medibank Private while being treated at a public hospital as a private patient. Being admitted as a private patient is a beneficial arrangement for both parties. I am always told at the time of signing the documents that to use my private insurance will come at no expense to myself.

I feel that there is a reasonable expectation that any data (financial or medical) generated in the public sector is governed by a similar standard when submitted to a third party (be that for financial or research purposes). I am also concerned about the lack of informed consent around how my data will be subsequently manage.

This breach has now come at a great expense to me- something that I recall was not highlighted during the signing of my admission paperwork. Paperwork that you sign when you are acutely unwell.

No one seems to be taking this breach seriously and I feel very uneasy about my identifiable claim data being leaked. The lack of communication and action to resolve this issue from Medibank, the State Government, and the Federal Government, I feel has been especially problematic.

Based on my experience, it would be nice to see the data governance policies/guidelines that apply to the sharing of claim data to a third parties in WA.