Epidemiological Studies (Confidentiality) Regulations 2018

Overview

The Epidemiological Studies (Confidentiality) Act 1981 was enacted to safeguard the confidentiality of personal information gathered during epidemiological studies. This Act addresses the problem of ensuring that sensitive personal information collected during these studies is protected from unauthorised disclosure, thus maintaining the trust of study participants. The Act was enacted by the Australian Parliament, aiming to uphold the privacy rights of individuals participating in epidemiological research. The accompanying Epidemiological Studies (Confidentiality) Regulations 2018 were introduced to replace the 1982 Regulations, which were set to sunset, ensuring the continuity of the legal protections for the sensitive data collected in these studies. This legislative framework ensures that personal information remains confidential and is used solely for the purposes intended by the studies, thereby promoting public health research while protecting individual privacy rights.

Scope and Application

The Epidemiological Studies (Confidentiality) Act 1981 and its accompanying Regulations serve to safeguard the confidentiality of personal information collected during specific epidemiological studies within Australia. The Act applies to Commonwealth epidemiological studies that involve sensitive information about individuals who participated in these studies. These studies are deemed to be of such nature that their findings could potentially infringe upon the privacy of participants if not adequately protected. The Regulations, which were remade in 2018 to replace the 1982 Regulations that were set to expire, specify twelve studies that are subject to the confidentiality provisions of the Act. This legislative framework ensures that personal and statistical information obtained during these studies remains protected, thereby upholding the right to privacy and the enjoyment of the highest attainable standard of physical and mental health. The Regulations are applicable nationally, given the Commonwealth jurisdiction of the Act, and they are compatible with human rights as they promote the protection of privacy and public health.

Key Provisions

The Epidemiological Studies (Confidentiality) Regulations 2018 (Regulations) provide the framework for the continued confidentiality of certain epidemiological studies under the Epidemiological Studies (Confidentiality) Act 1981 (Act). The Regulations are essentially a remaking of the Epidemiological Studies (Confidentiality) Regulations 1982 (1982 Regulations), which are due to sunset on 1 April 2018. The purpose of the Regulations is to maintain the confidentiality of sensitive personal information collected during epidemiological studies conducted by the Commonwealth. Section 6 of the Regulations lists twelve specific studies that are declared to be protected studies under the Act. This means that any personal information collected during these studies is subject to strict confidentiality requirements, ensuring that participants' privacy is protected. Under the Regulations, parties involved in the conduct or analysis of these epidemiological studies have specific obligations to ensure the confidentiality of the information collected. This includes researchers, health professionals, and any other individuals or entities who have access to the personal data gathered during the studies. The Regulations impose a duty on these parties to take all reasonable measures to prevent the unauthorised disclosure of personal information. This means implementing appropriate security measures, restricting access to the data to authorised personnel only, and ensuring that any data shared for research purposes is done so in a way that protects the identity of the participants. Breaches of the confidentiality provisions outlined in the Regulations can result in both civil and criminal consequences. Under section 18 of the Act, any person who contravenes the confidentiality provisions can be guilty of an offence. The maximum penalty for an individual is 120 penalty units or a fine of up to $22,200, while for a body corporate, the maximum penalty is 600 penalty units or a fine of up to $111,000. Additionally, civil penalties may also apply under section 19 of the Act, where a person can be liable for damages in a civil proceeding if they have breached the confidentiality provisions. These penalties underscore the seriousness with which the law treats the protection of personal information in epidemiological studies. The Regulations also address the compatibility of the legislative instrument with human rights, as required under the Human Rights (Parliamentary Scrutiny) Act 2011. The Regulations promote the right to privacy by ensuring that personal information collected during epidemiological studies is protected from unauthorised disclosure. This aligns with the right to the protection of the law against arbitrary or unlawful interference with a person’s privacy, family, home or correspondence. Furthermore, the Regulations support the right to the enjoyment of the highest attainable standard of physical and mental health by facilitating research that can lead to better public health outcomes, while still protecting the privacy of study participants. Overall, the Regulations are designed to balance the need for public health research with the protection of individual privacy rights.