The evidence
28In support of her case, the applicant tendered into evidence a copy of the documents she had been provided, by the respondent, in response to a number of access requests she had made in October and November 2012.
29The respondent tendered into evidence a statement of Ms Elaine Pan, an employee of the respondent. Ms Pan is employed as the acting Performance Analysis and Decision Support Officer, Performance Monitoring, Casemix and Innovation Unit. Ms Pan had responded to requests made by the applicant's husband, on 1 November 2012, and is familiar with RPAH's medical records electronic storage system and the process used by the Hospital in responding to a subpoena and other forms of access requests.
30Ms Pan also gave oral evidence and was cross examined at the hearing.
31In summary, on the evidence before the Tribunal, the sequence of events is as follows:
(a) On 5 May 2011, the applicant's solicitor wrote to Medical Records Officer of RPAH, seeking copies of the entire medical records of the applicant that it held, including the medical records from the 'Pain Management Centre and any additional records held by [RPAH] or under [its] control.'
(b) On 16 June 2011, Ms Pan, the then Medico-Legal Manager of RPAH, wrote to the applicant's solicitor enclosing copies of the requested medical records. These copies did not include any medical record of the applicant's treatment at the AC&R Clinic.
In her letter, Ms Pan advised that, pursuant to the HRIP Act, some information had been removed from those records, as the information affected the personal affairs of a person other than the applicant.
In her letter Ms Pan also said:
'Please note that additional information (such as correspondence and documents from other agencies) may exist but is not released as a matter of routine unless you specifically request such information.'
(c) Sometime in 2012, and prior to 24 May 2012, the applicant commenced proceedings, in the District Court, in regard to her occupier's liability claim.
(d) As I have already mentioned, on 24 May 2012, the District Court issued the subpoena, as requested by the defendant to the applicant's occupier's liability claim. The subpoena, addressed to the Medical Superintendent of RPAH and returnable on 2 July 2012, ordered the production of the following records:
'All records relating to the abovenamed plaintiff and, without limiting the generality of the foregoing all clinical notes, nurse's reports, operation reports, x-ray films, x-ray reports, discharge summaries, out-patient records and any other document or thing relating to any tests or procedures whether surgical or otherwise carried out in relation to the said plaintiff [name of the applicant and her date of birth].'
(e) The subpoena was served on RPAH and, in accordance with the procedures of the hospital it was forwarded to the Medical Records Department (MR Department) to action.
(f) The MR Department produced documents (including those relating to the applicant's treatment at the AC&R Clinic) to the District Court. Subsequently, the District Court made orders in regard to access to the documents that had been produced to the Court.
The Court ordered that the applicant (i.e. the plaintiff in those proceedings), be granted first access to the documents, from 3 July to 9 July 2012. The applicant, nor her solicitor, viewed the produced documents during this time.
The defendant obtained access to the produced documents (including those of the Camperdown AC&R Clinic), on 12 July 2012.
(g) On 26 July 2012, the District Court, at the request of the defendant in the applicant's occupier's liability claim, issued a further subpoena addressed to the Medical Records Officer, Royal Prince Alfred Pain Management Centre, ordering production of 'all records held relating to all consultations, examinations and treatment had with or administered to the [applicant], ...'
The subpoena was sent to the MR Department to action. The Department subsequently produced, to the District Court, the relevant records of the applicant held by the Pain Management Centre.
(h) On 1 November 2012, on behalf of the applicant, the applicant's husband telephoned RPAH to complain about RPAH having produced, to the District Court, documents about the applicant, which should not have been produced. He spoke to Ms Pan and identified the documents of concern being those of the AC&R Clinic.
(i) After having made inquiries with the staff in the MR Department, Ms Pan ascertained that the AC&R Clinic documents were produced in response to the subpoena issued on 24 May 2012.
(j) Ms Pan, believing that the AC&R Clinic documents had been inadvertently produced, asked the District Court to return all the documents produced in response to the May subpoena. The Court returned the documents. Ms Pan removed the AC&R Clinic documents and returned the remaining documents to the Court.
(k) On 19 November 2012, Ms Pan had a conversation with the applicant's husband. She informed him of the actions she had taken and she also agreed that the AC&R Clinic documents had been inadvertently produced to the District Court. Ms Pan also provided the applicant's husband with advice on how to make a privacy complaint and obtain copies of the applicant's AC&R Clinic records.
32The applicant did not provide any details as to when her claim in the District Court was settled. I have assumed it was after 26 July and before 1 November 2012, when the applicant's husband contacted Ms Pan. Even if my assumption is incorrect, this has no bearing on the matters in issue regarding liability of the respondent under the HRIP Act.
33In her evidence, Ms Pan explained that RPAH has an electronic patient administration system (the eMR system), which contains the medical records of patients. The system, she explained is indexed in accordance with a specific identification number (i.e. Medical Record Number) that is given to each patient.
34Ms Pan went on to explain that some time ago a decision was made to integrate the AC&R Clinic patient medical records with that of RPAH. Hence, every patient of the AC&R Clinic is also given a specific identification number, and where the Hospital has already given the patient a specific identification number, the same number is used. Accordingly, a search on the eMR system for the medical records of a particular patient will identify any medical records of that patient, from the Hospital and/or the AC&R Clinic, held on that system.
35Ms Pan explained that the MR Department actions all applications for access to patient medical records and any Court subpoena served on RPAH. She said, where an access application or subpoena is to be actioned, an officer of the MR Department conducts an initial search on RPAH's electronic patient administration system (eMR system). That system, she explained, also enables the officer to electronically access the actual medical records of the patient which have been recorded on the system, or are otherwise connected to the system. However, where a record has not been recorded on the system and it is not otherwise connected to that system, the officer is required to make a copy from the actual physical document held by the Hospital or the AC&R Clinic.
36Ms Pan's evidence was that in responding to the May 2012 subpoena, the relevant officer of the MR Department had produced, to the District Court, copies of the applicant's medical records, as indexed under her specific Medical Record Number, in the eMR system, at that time. This included those records of the applicant from the AC&R Clinic.
37In regard to her actions in retrieving the produced documents from the District Court and then extracting the AC&R Clinic documents, Ms Pan said she believed, at that time, that the documents had been inadvertently produced. That is, at the time she believed they were documents that should not have been produced in response to the subpoena. She said it was on the basis of this belief that she agreed with the proposition of the applicant's husband, on 19 November 2012, that these documents had been produced in error. Ms Pan went on to say that she also informed the applicant's husband that the AC&R Clinic and the Hospital used the same patient Medical Record Number for the applicant when creating a medical record for the applicant.
38It was the evidence of Ms Pan that it was not until she was spoken to by the respondent's internal reviewer, of the applicant's privacy application, that she realised that her belief, as expressed to the applicant's husband, was incorrect. In this regard, Ms Pan said the respondent's internal reviewer, informed her as follows:
'a) At the time the AC&R eMR system was being implemented, a decision was made to integrate the AC&R Camperdown records with those of RPAH, and to use the same Medical Record Number (which indicates the patient to which the records relate). The policy reason behind this decision was to enable continuity of care between the AC&R unit and the Hospital where the patients were receiving treatment.
b) Administratively, all of the patient records generated by the Camperdown AC&R unit are considered to be part of the RPAH's medical record, and can be accessed in appropriate circumstances (that is, for the purpose of providing medical services to patients). Documents created by the AC&R unit within the eMR system are stored centrally with the rest of the RPAH's records. They are considered to be integrated as part of the patient record. Staff in the Medical Records Department, by virtue of their role, necessarily have access to these records.
c) All patients who receive treatment at Camperdown AC&R ... are required to complete a "AC&R Consent for Assessment and Information Sharing" form. This form ... requires that a person who signs the form has read and understood the Local health District's brochure entitled "Privacy Information for Patient/Clients".
d) The "Privacy Information" brochure ... informs patients of the creation of a Medical Record Number for each patient and also informs them that authorised users throughout the Local Health District will be able to access health records which are linked to that Medical Record Number. ...'
39Ms Pan's evidence was that the applicant had been provided with the abovementioned 'Privacy Information' brochure when she became a patient of the Hospital.