Privacy

Pacific Transcription takes a number of measures to ensure the privacy of our clients is protected. We are committed to providing and maintaining industry-leading confidentiality and security standards.

Pacific Transcription is compliant with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth), as well as the Guidelines on Privacy in the Private Health Sector issued by the Federal Privacy Commissioner under the National Health Act 1953 (Cth). These are available to view at: www.privacy.gov.au.

All employees of and contractors to Pacific Transcription sign confidentiality agreements before the commencement of work, and this agreement is in compliance with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth).

We can also provide a separate confidentiality agreement if your organisation has specific requirements.

Pacific Transcription utilises Microsoft Azure’s Australia-based cloud infrastructure, to ensure that data remains within Australia. This infrastructure is approved by, and complies with, the Australian Federal Government’s strict data sovereignty standards.

Features of Pacific Transcription’s Microsoft Azure’s Australian-based cloud infrastructure include:

• A primary protection layer, which includes deployment of a high-specification Fortigate Firewall appliance, fully optimised with IPS/IDS,
• A secondary layer of protection with the existence of a demilitarised zone (DMZ) which separates all file servers from public access points via deployment of a reverse proxy server,
• Utilisation of Microsoft Entra ID cloud-based identity and access management solution, as well as protection by Microsoft Defender for Business, and
• Configuration of the environment to include encryption of all files at rest, with a high-level AE256 encryption algorithm.

Additional to these features are cloud-to-cloud, real-time backups which mean that Pacific Transcription has disaster protection and recovery plans for its operating environment that has World-class metrics for Recovery Point Objective (RPO – or time interval during which data is potentially exposed to loss), and Recovery Time Objective (RTO – or how quickly full operational systems can be restored).

Access to the client portal is auditable via IP number. All client accounts are password protected and clients can set their passwords, which are stored in a secure encrypted format.

Pacific Transcription regularly commissions independent penetration testing of its systems with credentialled client account access.

Pacific Transcription continues to hold ISO 27001 Information Security Management Systems certification, a leading international standard focused on information security. This standard was developed to help organisations of any size in any industry, to keep their information and the information of clients, safe and secure.

The Information Security Management System (ISMS) standard is a framework of policies and procedures that includes all legal, physical, and technical controls involved in an organisation’s information risk management processes.

Medical records require additional safeguards to protect the sensitive and personal nature of the information they contain. Pacific Transcription recognises the importance of privacy to medical clients and has implemented a number of streamlined processes to ensure the utmost security of information for these clients. Privacy is considered a key element of Pacific Transcriptions’ service delivery, and as such is monitored closely by the Managing Director.

As a specialised medical transcription company, Pacific Transcription is dedicated to maintaining open communication with clients and typists to ensure all privacy requirements are met. We comply with the Health Records and Information Privacy Act 2002 and allow full client access to operating systems to demonstrate the strength and integrity of security and privacy procedures.

Central to this is Pacific Transcription’s dedicated medical transcription team. This team includes experienced typists and quality managers, who are familiar with the Pacific Transcription privacy policy and relevant statute and individual client requirements.