Template for practices: patient health information privacy statement
Published: 5 November 2026
From 1 May 2026, new privacy requirements took effect under IPP3A, relating to personal information collected indirectly. Pinnacle provided an updated patient health information privacy statement on 23 April 2026.
To support practices, we've created an editable “patient health information privacy statement” Word template that you can tailor for your practice. With this version we suggest you:
review the common data sets listed – we've included the most common data sets collected indirectly. Simply keep the ones relevant to your practice.
make it your own – every practice is different, so take the time to adjust the statement so it reflects what you collect and how you use it. This includes using your branding.
run it past your privacy officer – your nominated privacy officer should review the final version and be happy with it before it goes live.
If you would like a copy of the template or if you have any questions, please contact Pinnacle network improvement manager, Michelle Bayley.
For further information, visit our enrolment page. The Office of the Privacy Commissioner has also put together some helpful resources, including a video specifically for the health sector.