Vikas Thakur / / 8 min readYour obligations to patients under the Australian Privacy Principles do not transfer to a vendor because the vendor holds the database. If you cannot export, you cannot meet an access request. Test the export before you need it, not during the migration.
Vikas Thakur / / 9 min readThe TGA's Advertising Code consultation confirms Section 24's paid testimonial ban stays, with a sunscreen influencer exception explicitly declined, while new SaMD/AI disclosure and ARTG display proposals target the exact software clinics run on their websites.
Vikas Thakur / / 9 min readIn late 2023 Smartraveller's website told Australians that over 15,000 people travel for medical tourism a year. After ABC News asked how many go overseas specifically for dental work, the line disappeared. No federal agency, including the ABS, holds that number.
Vikas Thakur / / 12 min readA live Instagram or Facebook feed widget on a clinic website pulls in captions, tagged photos and comment threads automatically, and any of those can carry a patient's clinical statement. Section 133 of the National Law bans testimonials in advertising a regulated health service, and AHPRA's cosmetic guidelines treat that republished content the same as a testimonial the clinic wrote.
Vikas Thakur / / 7 min readYou do not need to take a vendor's word for it. An embedded booking widget makes network requests you can read in your own browser in about ten minutes, and those requests tell you which countries the data actually reaches.
Vikas Thakur / / 9 min readFrom 10 December 2026, the OAIC requires any organisation using personal information in automated decision-making to disclose it in their privacy policy. A clinic's auto-accepting booking widget, suitability quiz, or triage chatbot can fall inside that definition.