Vikas Thakur / / 13 min readSection 16C of the Privacy Act makes your clinic accountable for what an overseas vendor does with a patient's data, and APP 8 sets the reasonable steps you must take before that disclosure happens. This guide breaks the rule into the vendor categories a clinic or dental practice actually runs and what each one needs on file to satisfy an exception.
Vikas Thakur / / 7 min readYou do not need to take a vendor's word for it. An embedded booking widget makes network requests you can read in your own browser in about ten minutes, and those requests tell you which countries the data actually reaches.
Vikas Thakur / / 8 min readUnder APP 8 and section 16C, a clinic stays accountable for what an overseas provider does with patient data, even after taking reasonable steps. Most clinics cannot name the country their booking data sits in. Here is how to find out and what to do about it.