Free Resources

Take this 1-minute quiz to find your compliance level.

Not 100%, now what? ...

There are 8 categories for data privacy and security.

Review each category below and the corresponding free resources.

Feeling overwhelmed and unsure?

Let's connect and see how I can help you.

8 Compliance Categories

Review the categories below and the free resources to support you.

Understanding your Obligations

I understand my obligations regarding the Australian Privacy Principles.

I have a privacy policy in place and I provide it to my clients when requested.

I obtain explicit consent before collecting, storing, or using sensitive client information.

Data Handling & Storage

My clients information is stored securely using encrypted digital storage or locked filing cabinets.

My practice uses role-based access control (RBAC) so only authorised staff can access sensitive data.

I regularly review and update data retention policies to remove unnecessary data.

Password Control

I use strong passwords with a mix of letters, numbers, and symbols for all accounts.

I have implemented Multi-Factor Authentication (MFA) for emails, booking systems, and cloud storage.

I regularly update passwords and do not reuse old ones.

Cybersecurity & Network Protection

I update all software (including operating systems, antivirus, and apps) to the latest versions.

I have an Incident Response Plan.

My practice backs up data regularly and uses encrypted backups.

Data Breach Response

I have a data breach response plan in place.

I know how to identify a data breach (e.g., hacking, phishing, lost devices).

I conduct regular security audits to check for vulnerabilities.

Client Communication

My appointment booking system is APP-compliant with security protections.

I do not include personal health details in emails or text messages.

I obtain opt-in consent before sending marketing emails (compliant with the Spam Act 2003).

Training & Awareness

My staff receive regular training on data privacy and security best practices.

My team understands phishing attacks and how to identify fraudulent emails.

I have clear procedures for handling client data securely.

Risk Management

I have cyber liability insurance to protect my practice against data breaches.

I conduct regular risk assessments to identify potential security threats.

I keep up to date with new privacy laws and cybersecurity threats.

Unsure? Overwhelmed?

Reach out for assistance with data privacy and security resources. We have many options to suit all needs and budgets.

Our mission is to support all Natural Therapists with their data privacy & security.

Contact us today and see how we can help you

Resource Links

Understanding your Obligations

Privacy Act 1988

https://www.legislation.gov.au/C2004A03712/latest/text

Australian Privacy Principles

https://www.oaic.gov.au/privacy/australian-privacy-principles

Privacy Policy (OAIC)

https://www.oaic.gov.au/privacy/your-privacy-rights/your-personal-information/what-is-a-privacy-policy

Data Collection Consent

https://www.oaic.gov.au/privacy/your-privacy-rights/your-personal-information/consent-to-the-handling-of-personal-information

Handling Health Data (OAIC)

https://www.oaic.gov.au/privacy/your-privacy-rights/health-information

Data Handling & Storage

Cloud Storage

https://www.digitalhealth.gov.au/sites/default/files/2020-11/Cloud_services-Considerations_for_healthcare_organisations.pdf

https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/health-service-providers/guide-to-health-privacy

Role Based Access Control

https://blueprint.asd.gov.au/design/shared-services/microsoft-365/rbac

https://www.cyber.gov.au/protect-yourself/securing-your-devices/how-secure-your-device/secure-your-user-account

Data Retention

https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/more-guidance/self-assessment-checklist-privacy-obligations-under-the-data-retention-scheme

Password & Access Control

Strong Passwords

https://www.cyber.gov.au/learn-basics/explore-basics/passphrases?ref=search

Multi-Factor Authentication (MFA)

https://www.cyber.gov.au/learn-basics/explore-basics/mfa

Update Passwords

https://www.oaic.gov.au/engage-with-us/consultations/personal-information/guide-to-securing-personal-information-update

https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-11-app-11-security-of-personal-information

Cybersecurity & Network Protection

Updating & Patching

https://www.cyber.gov.au/learn-basics/explore-basics/update-your-devices

Cybersecurity Incident Response Plan

https://www.cyber.gov.au/resources-business-and-government/governance-and-user-education/incident-response/cybersecurity-incident-response-planning-practitioner-guidance?ref=search

Back up & Recovery

https://www.cyber.gov.au/learn-basics/explore-basics/set-and-perform-regular-backups

Data Breach Response

Data Breach Response Plan

https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/preventing-preparing-for-and-responding-to-data-breaches/data-breach-preparation-and-response/part-2-preparing-a-data-breach-response-plan

https://www.oaic.gov.au/privacy/notifiable-data-breaches

Signs of a Data Breach

https://www.cyber.gov.au/report-and-recover/have-you-been-hacked

Security Audits

https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/small-business-cyber-security

https://www.institutedata.com/us/blog/how-to-conduct-a-cyber-security-audit/

Secure Client Communication & Marketing

APP-Compliant System

https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/privacy-impact-assessments/guide-to-undertaking-privacy-impact-assessments

PII + HI not in Emails

https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/small-business-cyber-security/securing-customer-personal-data

Opt-in & Unsubscribe

https://www.legislation.gov.au/C2004A01214/latest/text

Training & Awareness

Free Training

https://www.cyber.gov.au/resources-business-and-government/exercise-in-a-box

Phishing Emails

https://www.cyber.gov.au/learn-basics/explore-basics/recognise-and-report-scams?ss=true

Procedures for Data handling

https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act/health-and-and-medical-research

Risk Management

Cyber Insurance

https://insurancecouncil.com.au/campaigns/defend-critical-infrastructure/cyber-risk/

Risk Assessment

https://www.cyber.gov.au/resources-business-and-government/essential-cybersecurity/essential-eight/essential-eight-assessment-process-guide?ref=search

Staying up to date

https://www.cyber.gov.au/about-us/view-all-content/publications

Unsure? Overwhelmed?

Reach out for assistance with data privacy and security resources. We have many options to suit all needs and budgets.

Our mission is to support all Natural Therapists with their data privacy & security.

Contact us today and see how we can help you.