As a Health Service Provider, your practice must be compliant with the Privacy Act 1988. The essentials of having a Privacy Framework in place demonstrates that your business cares about privacy and can minimise the risk of matters escalating to the Information Commissioner!