Glossary

"Cybersecurity incident" means any unauthorised hacking of the computer or computer system to gain unauthorised access to or control, any installation or execution of unauthorised software or computer code of a malicious nature, any unauthorised interception of communication, or any unauthorised act that adversely affects the availability or operability of the entity's computer or computer system.

“Data breach” means any unauthorised access, collection, use, disclosure, copying, modification, disposal of health information, or loss of any storage medium or device on which health information is stored.

“Data intermediary”, also known as “third-party vendors”, means an organisation that processes health information on behalf of an entity, but does not include an employee of that entity, for purposes prescribed under the HIB.

“Health information” means clinical data and administrative data.

“NEHR” means the National Electronic Health Record and is the national repository that manages your summary health records.

“Patient care” means the provision of a healthcare service to the individual, and includes the following:

1. Clinical care

2. Any administrative matters directly related to the provision of the healthcare service to the individual, such as the following:

                  i. the individual’s admission to, and discharge from, the care of a person providing the healthcare service to the individual;

                  ii. the scheduling of the individual’s appointments with the person providing the healthcare service to the individual;

                  iii. the transfer or referral of the individual by the person providing the healthcare service to another person who provides or may provide any healthcare service to the individual.