Privacy Act reforms 2024: What every Australian medical practice must fix now

Most healthcare practices assume they are compliant until something tests the system. A patient complaint, a data breach, an AHPRA advertising issue or a buyer's due diligence question. At that point the problem is rarely just the wording of the privacy policy. It is the gap between what the document says and what actually happens in the clinic every day. In this webinar, Sarah Bartholomeusz, Principal of You Legal and author of Growing a Medical Practice, walks practice owners and managers through what the Privacy Act reforms mean for Australian medical, dental and allied health clinics right now. As practices adopt online bookings, telehealth, AI scribes, automated reminders and outsourced marketing, the legal framework has become significantly more complex, and privacy compliance is now current, operational and demonstrable or it is not compliance at all. Sarah breaks it down into three practical pillars: systems, standards and security. WHAT YOU WILL TAKE AWAY ✅ What "reasonable steps" to protect patient information now means, including both technical and organisational measures ✅ How to map the way patient information actually moves through your clinic, from website forms to AI tools and third-party providers ✅ The warning signs your privacy policy no longer describes how your practice operates ✅ Why consent is a process, not a once-off form, and where consent gaps commonly arise ✅ AHPRA advertising rules on testimonials, outcome claims and the 2025 higher-risk cosmetic procedure guidance ✅ TGA advertising traps, including indirect promotion of prescription-only medicines, injectables and weight management products ✅ Why engaging a lawyer early in a data breach can bring your communications under legal professional privilege ✅ How buyers assess privacy and consent frameworks in due diligence, and what that means for practice value The legal frameworks touched on include the Privacy Act 1988 (Cth), the Privacy and Other Legislation Amendment Act 2024, the new statutory tort for serious invasions of privacy which commenced on 10 June 2025, AHPRA advertising requirements and the TGA therapeutic goods advertising framework. THIS SESSION IS FOR YOU IF YOU ARE ▪️ Unsure whether your consent processes are compliant ▪️ Relying on privacy policies or website terms that may be outdated without realising it ▪️ Using or planning to use AI scribes, telehealth, online bookings or automated patient communications ▪️ Offering cosmetic, skin, weight management or injectable services, including in dental practices ▪️ Wanting to reduce risk and strengthen your clinic to build long-term practice value 📞 NEXT STEP Book a complimentary call with Daniela Cecere-Palazzo, Senior Lawyer at You Legal, to discuss what these changes mean for your specific practice: 👉 https://youlegal.com.au/book-a-call-w... 🌐 Learn more: https://youlegal.com.au ✉️ Request a call back: https://youlegal.com.au/request-a-cal... 📖 Read the full article: https://youlegal.com.au/you-legal-blo... ⏱️ CHAPTERS 00:00 Welcome and introduction 01:30 Acknowledgement of country 02:30 Who is Sarah Bartholomeusz and You Legal 04:30 Who this session is for and what you will leave with 06:30 The practice lifecycle and the three pillars: systems, standards, security 08:00 Why now: privacy is an operational issue 09:30 Pillar 1 Systems: the Privacy Act reforms and the new statutory tort 11:00 What "reasonable steps" means in practice 12:30 How patient information moves through your clinic 14:00 Warning signs your privacy policy is outdated 15:30 Your website is part of your compliance environment 16:30 Pillar 2 Standards: consent is a process, not a form 18:00 AI, telehealth and automation 19:00 AHPRA advertising restrictions 20:30 The 2025 cosmetic advertising guidance 21:30 TGA advertising: where clinics get caught 22:30 Privacy policies, website terms and consent forms working together 23:30 Social media and outsourced marketing 24:30 Pillar 3 Security: breach readiness and legal professional privilege 26:00 Governance and assigning ownership 27:00 Due diligence: what buyers look for 28:00 Case study: AI tools in a psychology practice 30:30 Key takeaways and five actions for next week Join our community, You Legal for Doctors:   / you-legal-for-doctors   This video is general guidance only. Legal advice should be obtained in relation to your specific circumstances. #PrivacyAct #HealthcareCompliance #AHPRA #TGA #MedicalPractice #PatientConsent #PrivacyPolicy #DataBreach #AIinHealthcare #Telehealth #AlliedHealth #PracticeManagement #AustralianHealthcare #YouLegal