Skip to main content
Home

Parliamentary Questions

Question Without Notice No. 976 asked in the Legislative Council on 7 December 2017 by Hon Michael Mischin

Minister responding: Hon R.H. Cook
Parliament: 40 Session: 1
Answered on

PATHWEST — CONFIDENTIAL PERSONAL INFORMATION — DISCLOSURE
      976. Hon MICHAEL MISCHIN to the parliamentary secretary representing the Minister for Health:
I refer to the minister's answer yesterday about the Public Sector Commissioner's report titled ''PathWest's management of a complaint about disclosure of confidential personal information'', which stated —
      The report found that none of the patient data systems used by either PathWest or the Department of Health keep an audit log of when a user logs into the system or when a user views a patient record.
(1) Where precisely in the report does that finding appear?
      (2) Given page 44 of the report states, ''The allegations that the Respondent may have engaged in unauthorised access of information were never fully explored'', what actions have since been taken to explore those possibilities and what has been the outcome?
      (3) If the system used by PathWest and the Department of Health did not at the material time keep an audit log, what action has since been taken to remedy the position?
Hon SAMANTHA ROWE replied:
On behalf of the parliamentary secretary representing the Minister for Health, I thank the honourable member for some notice of the question. I am advised of the following.
      (1) I wish to make a correction to the statement provided yesterday. This finding is not in the Public Sector Commissioner's report titled ''PathWest's management of a complaint about disclosure of confidential personal information''. Information on audit logs for data systems has been the subject of a separate examination by the North Metropolitan Health Service and is referred to in answer (2).
      (2) The NMHS is conducting a separate investigation concerning claims of unauthorised access to confidential patient information.
      (3) PathWest is in the process of replacing its laboratory information system. The new LIS will incorporate tracking and audit functions to meet contemporary public expectations and business needs.