Privacy & Data Security

Protecting patient privacy is central to how ASPREN operates. We follow strict legal, ethical, and data security standards to ensure that all information collected through the network is handled responsibly and securely.  ASPREN primarily uses de-identified data, meaning information cannot reasonably be used to identify you.

ASPREN is bound by several pieces of legislation as well as human ethics approval, as follows: 

Human Research Ethics

ASPREN operates under approval from the Royal Australian College of General Practitioners (RACGP) National Research and Evaluation Ethics Committee (NREEC) (Approval No. NREEC 18-003 – Surveillance of influenza and influenza-like illness through the Australian Sentinel Practices Research Network (ASPREN).

This means that:

  • All ASPREN activities are independently reviewed to ensure they meet national human research ethics standards
  • The rights, safety, and wellbeing of patients are protected
  • Participation is voluntary, and patients can choose not to take part in surveillance activities and this will not affect their usual standard of care

Ethics approval ensures that ASPREN’s work is conducted in a way that is respectful, transparent, and in the public interest.

National Health Security Act

ASPREN contributes to Australia’s national public health influenza surveillance system and operates in alignment with the National Health Security Act 2007.

This legislation allows for the sharing of health information to:

  • Monitor and respond to communicable diseases
  • Detect and manage public health threats
  • Support coordinated responses across states and territories

For patients, this means:

  • In rare cases of significant public health concern (such as serious infectious disease outbreaks), health authorities may be able to link laboratory results back to a healthcare provider
  • This process is tightly controlled and only occurs when necessary to protect public health

Australian Centre for Disease Control Act 2025

ASPREN supports national surveillance efforts aligned with the Australian CDC under the Australian Centre for Disease Control Act 2025.

This legislation strengthens Australia’s ability to:

  • Detect emerging health threats earlier
  • Coordinate national responses to infectious diseases
  • Use high-quality surveillance data to inform public health decisions

For patients, this means:

  • Data collected through ASPREN contributes to a broader national system designed to keep communities safe
  • Information is used in a secure and controlled way to guide responses such as vaccination programs, outbreak management, and health policy

Privacy Act 1988

ASPREN complies with the Australian Privacy Principles, which are part of the Privacy Act 1988. These principles regulate how personal and sensitive information is collected, used, stored, and shared.

For patients, this means:

  • Your personal information is only collected when necessary for public health surveillance
  • Sensitive health information (such as symptoms, vaccination history, and test results) is handled with strict confidentiality
  • Wherever possible, identifying details are removed before data are shared with ASPREN
  • Data are stored securely and protected against misuse, loss, or unauthorised access.

How Your Data Is Protected

ASPREN applies multiple layers of protection to ensure data security:

  • Removal of identifying details before data are analysed
  • Secure data transfer systems between GP practices, laboratories, and ASPREN
  • Restricted access to authorised personnel only
  • Compliance with national data security standards

The Australian Sentinel Practices Research Network (ASPREN), based at the Adelaide University, is committed to protecting your privacy and handling your personal information responsibly.

Information We Collect

When you express interest in participating in ASPREN, we collect professional information that may include:

  • Your name
  • Professional role (e.g. General Practitioner, Nurse Practitioner, Primary Care Nurse or Practice Manager)
  • Practice or organisation name
  • Work address
  • Work email address
  • Work telephone number
  • Other information you choose to provide in your enquiry or registration.

Why We Collect Your Information

We collect this information to:

  • Assess your eligibility to participate in ASPREN.
  • Contact you about participation, onboarding and training.
  • Administer ASPREN surveillance activities, including reporting requirements and remuneration where applicable.
  • Provide relevant information about ASPREN, infectious disease surveillance and public health updates.
  • Respond to your enquiries and provide ongoing support.

We only collect information that is reasonably necessary for these purposes.

How Your Information Is Stored and Protected

Your personal information is stored securely by the Adelaide University and is accessible only to authorised ASPREN staff who require access to perform their duties.
ASPREN uses appropriate administrative, technical and physical safeguards to protect personal information against unauthorised access, loss, misuse, or disclosure.

De-identified Surveillance Data

Once a practice participates in ASPREN, clinical surveillance data submitted to the program is de-identified before it is used for surveillance and research purposes.
De-identified surveillance data is securely managed by the Quality Use of Medicines and Pharmacy Research Centre (QUMPRC) at the Adelaide University, which has extensive experience in the secure management of health research data. The data is stored in secure facilities with appropriate physical and electronic access controls and is managed in accordance with applicable Australian security and research governance standards.
ASPREN provides aggregated, de-identified surveillance data to support infectious disease monitoring and public health activities. No information that could reasonably identify individual patients or participating health professionals is included in these reports.

Sharing Your Information

We do not sell, rent or trade your personal information.
Your professional contact details will not be disclosed to third parties without your consent unless:

  • required or authorised by law
  • necessary to administer your participation in ASPREN

Your Choices

You may request access to, or correction of, your personal information at any time.
If you no longer wish to receive ASPREN communications, please reply ‘unsubscribe’ to our emails or contact us directly.

Contact Us

If you have any questions about this Privacy Collection Notice or how your information is handled, please contact us at aspren@adelaide.edu.au