Telehealth Services
Definition:
Telehealth, or telemedicine, allows healthcare providers to conduct consultations remotely when in-person visits are not needed or cannot be attended due to distance. Services include diagnosis, treatment, follow-up care and prevention. Consultations can be between a clinician and a patient or between clinicians and may involve carers, interpreters and other healthcare professionals that form a multidisciplinary team.
General requirements
Cyber security
The software must demonstrate ability to effectively achieve mitigation strategies in line with ‘Essential 8’.
Privacy
Data collected about an individual by medical software is likely to constitute health information. Due to the sensitive nature of this information, it generally has a higher degree of privacy protection than other personal information, under relevant federal, state and territory legislations.
The software must demonstrate adherence to relevant federal, state or territory privacy legislation for example, the Privacy Act 1988 (Federal) or Health Records and Information Privacy Act 2002 (NSW).
The applicable federal legislation is the Privacy Act 1988.
Details of the relevant state and territory legislations are contained under the State and territory requirements section below.
Core requirements
Standards for identification
If the software integrates with electronic Medical Record, Clinical Information System or Practice Management Software, it must:
- be able to discover and validate Individual Healthcare Identifiers (IHI) via the Healthcare Identifier (HI) Service Business-2-Business web services
- integrate Individual Healthcare Identifiers (IHIs) into the local patient record
- where the EMR stores local directory for Healthcare Providers allow for:
- the storing of Healthcare Provider Identifier-Organisation (HPI-O) in the local system associated with the locally stored healthcare provider organisation details
- the storing of healthcare provider identifier-individual (HPI-I) in the local system associated with the locally stored healthcare provider individuals’ details.
- support data capture and storage of unique device identification of medical devices as defined within AS ISO/IEC 15459.4:2023 Information technology — Automatic identification and data capture techniques — Unique identification, Part 4: Individual products and product packages support adherence to Patient Identification best practices as outlined by the Australia Commission on Safety and Quality in Health Care.
Australian Core Data for Interoperability (AUCDI)
The software should support the use of AUCDI Release 1.
Note: The focus of the AUCDI Release 1 is the representation of the clinical content necessary for each of the data groups identified within the Release 1 scope.
Development is continuing to enhance AUCDI.
Standards for data sharing
The software should:
- support the authoring and consumption of clinical documents in Fast Healthcare Interoperability Resources (FHIR®) formats.
Standards for terminology, code sets and classifications
The system should:
- support person and provider identification in healthcare National Best Practice Data Set
National Safety and Quality Health Service (NSQHS) Standards
Implementation of NSQHS is mandated in all hospitals, day procedure services and public dental services across Australia.
The system must:
- support adherence to best practices related to Informed Consent
- support adherence to all relevant National Safety and Quality Health Service Standards in accordance with the intended scope of the system being procured. These may include, but not limited to the following standards:
- Partnering with Consumers Standard
- Communicating for Safety Standard
- Comprehensive Care Standard
- Blood Management Standard
- Medication Safety Standard
- Clinical Governance Standard
- support adherence to all relevant Clinical Care Standards.
Connections to National Systems
HI Service
If the software is expected to deal with healthcare identifiers (e.g. in a hospital environment) then it must either:
- be able to discover and validate Individual Healthcare Identifiers (IHI) via the Healthcare Identifier (HI) Service, or
Where the enterprise utilises an enterprise-wide system for discover and validation of Individual Healthcare Identifiers (IHI) the software must:
- be able to manage and interface with this middleware in order to enable discovery and validation of Individual Healthcare Identifiers (IHI).
Conformance
The software must:
- have production access to the Health Identifiers Service
- conform with the Electronic Prescribing conformance profile.
State and territory requirements
The following state and territory requirements must be upheld based on location.
State | Theme | Link |
---|---|---|
ACT | Privacy | Health Records (Privacy and Access) Act 1997 (ACT) |
Territory Records Act 2002 (ACT) | ||
Information Privacy Act 2014 | Acts | ||
NSW | Privacy | NSW Privacy Laws |
Requirements for consent | ||
Clinical | Single sign on | |
NT | Privacy | Refer to Federal requirement |
QLD | Privacy | Privacy legislation in Queensland |
Informed Consent | ||
SA | Privacy | Refer to Federal requirement |
TAS | Privacy | Refer to Federal requirement |
VIC | Privacy | Privacy and Data Protection Act 2014 |
WA | Privacy | Refer to Federal requirement |
Consent to treatment policy |