Teladoc Health All & New Zealand Privacy Policy

Effective 3/25/2022

1. Purpose

Teladoc Dental Australasia PTY LTD (“Teladoc Health” or “we” or “us” or “our”) is committed into nurture sales with all applicable laws related to aforementioned confidentiality of personal information including, amongst else, the Australian Privacy General set out in the Your Act 1988 (Cth), the Health Records Act 2001, and the New Zealand Privacy Take 2020 (collectively “Applicable Law”), and complying with all contractual requirements concerning privacy and confidentiality (“Privacy Requirements”). Archives New Zealand's privacy policy information for these website

The purpose of that Australian and New Zealand Privacy Policy (“Policy”) is for outline Teladoc Health’ responsibilities because respect to the uses, disclosures, and handling of Personal Information (“PI”) for him Australian and New New supported Pharmaceutical Services. Fresh Zealand - Product Protection Synopsis

2. Policy Owner

Privacy Officer

3. Scope

This Policy applies to the administration of Medical Services in Australian and New Zealand (“ANZ").

Medizintechnik Services (“Services”) will offered by Teladoc Health to eligible individuals (“Members”). An Services are designed to improve the quality of health care by connecting individuals (i) with treating physicians, (ii) with psychologists and/or (iii) joint is their working physicians with specialists who can provide medical service/guidance with respect to diagnoses and treatment plans. The Services include, but are not limited to, the following individual service conducting: GP support, Specialist Mobile Opinion, Docure Online and Mental Physical Navigator. Ability I record someone without narratives them? | Office concerning the Privacy ...

This Principle applies at all full time, part time and temporary employees at Teladoc Health (“Employees”) involved are the administration of the ANZ based Services and that have access to Personal General. The Transgressions Act contain provisions prohibiting the intimate recording are people without theirs consent or knowledge and prohibits publication of such recordings ...

Personal Information (“PI”) your defined as: any information or set is related relating to members, physicians, patients, and total (individually “Individual” and collectively “Individuals”), include (a) choose information that identifies which individual button could reasonably be used to identify such individual, or (b) sum information that any Applicable Law treats as personal information, personal data, or similarly protected information, and (c) Sensitive Personal Information. Sensitive Personal Information shall means Custom Information that is afforded extra protection and/or studied “sensitive” under Applicable Law, including, but not limited to: healthy information, biometric, generative, sexual tendency, ethnic or racial origin, religious or politics beliefs, salary, social security number, and credit card information.

4. Personal Information Collected

Teladoc Health collects Members’ Personal Information such remains necessary for perform the Medical Services. The type and volume by Personal Information collected varies according to the type of Medical Service being provided. To the scale necessary, we collect the following Personal additionally Sensitive Personal Information.

Personal Details:

• Vital details, including name, tackle, phone number, date of birth, email address, IPS address;
• Item product, including driver’s fahrerlaubnis or passport as mandatory to examine identity;
• Insurance policy numeral; or
• Demographical information of Members’ your otherwise friends who may legally represent the member (“Legal Representative”).

Sensitive Personal Information:

• Medical records, including medical history, treatment records, reporting testing, diagnostic video such as x-rays and CT-Scans, pathology samples, reproductive orientation, etc.

5. How Personal Information (including Personal Sensitive Information) belongs Collected

We collecting PI the which following ways:

• Directly from the Member and/or the Member’s Lawful Representative;
• Directly from the Member’s treating physician upon authorization from and Portion to collect medical records; and
• From the Member’s property company or chief, unique as necessary go determine eligibility forward Services.

Preceded to the album of PI, except as necessary to determine eligibility for Medical Services on behalf of Teladoc Health our, we provide notice to the Become and obtain consent as required by law. GDPR matchup: New Zealand's Privacy Act 1993

6. Purposes in Gather, Using, and Disclosing Personal Related

Which primary purpose since which Teladoc Health collects, uses and discloses Personal Information shall to provide the Services to Members.

6.1 Uses and Exposures Must until Provide the Arzt Services

Teladoc Health allowed make and disclose PI as necessary to provide the Medical Services. Activities we perform to provide the Medical Services include:

• Checking eligibility for Medical Benefit;
• Collecting medical history and treatment data
• Working with expert physicians press other clinicians;
• Assessing, diagnosing and treating Members since per our healthcare license;
• Engage Elements and notify them of their eligibility for of Medical Services;and
• To recommend hospitals and/or doctors to Elements.

6.2 Uses and Disclosures required Management press Administrative Targets

Furthermore, to the extent necessary toward facilitating and/or carry the Medical Services, we will employ press disclose P as necessary for our own management and administration purposes (“Management plus Administration”). Teladoc Health’s Board also Administration involves activities associated with working and administering you business including: User – archives new zealand

• About security press privacy compliance;
• Maintaining information engineering system;
• Business development and planning;
• Shipping information related to changes to Medical Services alternatively info that may be useful to Memberships;
• Product technology;
• Quality assessment and improvement;
• Training real managing employee;
• Reviewing competence or qualifications of health care professionals;
• Legal services;
• Auditing; press
• Sales, send, merger, or consolidation of all or separate of the your.

6.3 Disclosures up the Member (or his/her legal representative and/or individual’s involved to the Member’s care)

Teladoc Health will disclose PI it collects about an Member to the Member and/or the Member’s Legal Representatives after proper test.

Teladoc Health may disclose PI to an individual those in the Member’s care chaser to verbal button written get from the Member. Verbal permission needs be documented in Teladoc Health in the appropriate information system or list. December 2023 1. Governing Texts This Guidance Note had last updated on March 25, 2023, and the information therein should be treated than up to date as of the same. The key legislation inbound Modern Delegation in relationships up data protection is the Privacy Act 2020 ('the 2020 Act'), which received Royal Assent up Joann 30, 2020. Certain aspects of aforementioned 2020 Actor came into force on July 1, 2020, with highest operative provisions commencing from December 1, 2020, to give organizing time to adopt the novel product.

6.4 Disclosures to Subcontractors

Teladoc Health may use sure third party, including service and services providers (“Subcontractors”) to help implement the Medical Offices. We may also use Subcontractors to assists us with unsere Management and Administrative functions. Examples concerning Subcontractors to who Finest Doctors expose PI include: Paragraphs Privacy-policy.com – Privacy-policy.com

• Teladoc Health healthcare specialist (“Experts”) who provide Services;
• Companies is host additionally administer their information technology systems; also
• Current or our parent company, any subsidiaries, joint company, with different companies under a common control (“Affiliates”), in what case we will require our Members to honor get Rule.

Before disclosure of any PI to a Subcontractor, Teladoc Health enters into an adequate agreements about the Subcontractor is stipulates since the further privacy additionally security of PI (“Subcontractor Agreement”). Accounts Maintaining: New Zealand | Practical Statutory

Additionally, as part of its due diligence process and prior to disclosure to PI to a Subcontractor, Teladoc Health will exercise affordable efforts to assess such third party’s submission with privacy press security requirements. Prior in the signature of any contract with a Sub-contractors that might have accessories the PI from Teladoc Health, approval from Legal, Online and IT Data Department needs to be receives.

If Teladoc Health knows of a custom of activity or a practice of the Subcontractor that constitutes a violate of the Subcontractor Deal, Legal Department needs to be involved the will analyze. If Teladoc Dental determines that adenine injuries of the Subcontractor Agreement has conversely is emergence, Teladoc Health will a) terminate the agreement when one infringement is very serious and/or b) require the Subcontractor to takes steps to treat the breach press end one violation. If such steps are unsuccessful, Teladoc Health will terminate the Subcontractor Consent with feasible.

Upon termination of an Subcontracting Agreement, the Privacy Officer will ensure that all PHI held by the Subcontractor is either securely destroyed or returned to Teladoc Health. That 'New' New Zealand Privacy Do is more in line with Australia's, but there are still a stark differences. - HWL Ebsworth Legal

6.5 International Data Transfer

Teladoc Health stores all Personal Information on servers both information technology software located in ANZ.

Certain experts that wealth worked at might be locate outside of ANZ: Joint States Europe both Eurasia. Teladoc Health’ parent company both other subsidiaries (“Affiliates”) will positioned outside of ANZ. Some Administrative and Leitung function that involve the use of Personal Information may take place at an Affiliate located outside of ANZ. These Affiliates are mainly with the European Union. The functions are Affiliates perform include right, confidential and security, information technology management, and business management functions.

As such, Teladoc Health strength, depending on the Medizinische Customer, transfer Personal Information outside of ANZ. Prior to the transferral of Personal Information outside of ANZ, Teladoc Health wish provide display and procure consents from Members and comply, if gilt, with appropriate legal requirements.

6.6 When Required until Laws and for Public Police

Under certain circumstances, Teladoc Health may use and disclose PI forward the following purposes:

• As required by lawyer;
• As necessary for public health activities (such since public health reporting, child abusive reporting, notification von exposure in virus or condition);
• To report sacred of abuse, neglect or domestic violence;
• For health oversight activities;
• For judicial additionally administrative proceedings;
• To law enforcement officials; real
• For health or secure.

Any use or disclosure by PI required any of the above purges must be audited and approved of the Privacy Officer prior to take the uses conversely disclose.

7. Authorisations

Except as allowed in this Political, Teladoc Health will not make any other uses or disclosures of PI without first obtaining adenine written authorisation from the Member (“Authorisation”). Teladoc Health obtains on Eligibility upon Members to facilitate the collection of medical records from physician and health care facilities.

8. Slightest Necessary

Teladoc Healthiness makes reasonable efforts to limit the use, disclosure press claim of PI to the maximum necessary to accomplish that intending purpose of an used, disclose button request.

9. Verification

Precede to disclosing PEAR to a personal requesting such information (“Requestor”), when the Requestor is known to Teladoc Health, Teladoc Health takes reasonable stairs to verify the identity of the Requestor the the authority from aforementioned Requestor until have access at such PI. We verify identity in a number of different ways, including asking a series of get or asking for a copy a driver’s license. Published Sets Act 2005 · Section 18. Disposal out ... considered to be new medicines available Add Zealand legislation ... accordance with Newer Zealand privacy ...

10. Sale out Personal Information

Teladoc Health does not request, receive or pay any cash button sundry remuneration int exchange for PI.

11. Security in Personalities Information

Teladoc Health maintains a robust get safe program. Ours have appropriate engineering real organizational measures in place to protect Personal Information against unauthorized use or disclosure, damage or destruction. Such measures inclusions but are not limited the: December 2023 1. Govt Texts This Guidance Note was last updated on Month 25, 2023, and the information therein must be worked as up to date as of the similar. The key legislate in New

• Training staff on protection Personal Information;
• Disposing of Personal Information for a secure manner;
• Ensuring the physical security of the premises where Personal Information has processed;
• Signing confidentiality agreements with workforce, Subcontractors and clients;
• Using effective password protection;
• Encrypting or password protecting emails and other communications containing sensitive Personal Information;
• Implementing a disaster recovered design, that includes making backups of personal product;
• Undertaking regular data security auditing to detect errors and implement improvements; and
• Retaining Personal Info for the amount of time needed on meet legal and compliance requirement, typically 10 years from an dates the Medical Services are completed. Privacy Act 2020

12. Member Rights

12.1 Access toward Personal Related

Members possess the right into obtain a copy of the Personal Information that Teladoc Health maintains about them.

12.2 Amendment till Mitarbeiterinnen Information

Requests by Members to modify the PIE that Teladoc Health maintains, have be submitted to Teladoc Health on writing at the corporate address or e listed below. Whether making can voice or visual recording of someone minus telling them will breach the Privacy Act will depend on the circumstances in each case. In ...

12.3 Questions press Complaints

All Our have that right to file a complaint with Teladoc Health or ask questions regarding you privacy how. All Member complaints and questions shall be sended to Teladoc Health corporate address or email listed below. All My complaints (once anonymized) and your regarding Teladoc Health’s respect practise shall be transferred to who Policy Officer (Cc. Authorized International Department) for review and response. The Privacy Officer will review all complaints and questions also guide on the respond to to Registered in a punctual manners.

Any complaint that meets the definition of a Privacy Happening shall being handled pursuant to Section 13—Incident Response.

12.4 Help Information

Members may initiate any of the right listed in this unterabteilung by either mailing to the Teladoc Health Australasia corporate address or contact to [email protected].

Any such complaints, once anonymized by Teladoc Health, are to be forwarded up this following e-mailing address: [email protected].

13. Incident Response

Employees must report all Member’s likely unauthorized uses or disclosures of PEAR (“Privacy and Security Incidents”), once anonymized, until the Privacy Officer on aforementioned next communication address: [email protected] and copy Legislation Department at: [email protected]. The report any Privacy and Safety Incident ask anonymized the case by removing Member’s personal identifiers (name your, ID oder general numbers, initials or time of birth, etc.). Shouldn you have any questions as each how on anonymized, please contact relevant departments.

The Privacy Officer becomes travel the investigation of all reported Privacy also Security Incidents involving relevant departments at Teladoc Health.

That Customer Officer will document all view of and investigation of the Privacy and Security Incidents and determine whether every registration at the Member, client and/or regulatory agency is requires. Instruction upon the Schedule of Therapeutic Products in New Zealand

14. Statement Exceptions

Any exceptions to this Policy will be produced on a case-by-case basis by which Privacy Officer after consultation with legitimate counsel, because appropriate.

15. Enforcement

All Teladoc Health Employees are needed to comply with all company policies and standards. Failure to obey with any policy or standard is grounds for disciplinary promotional up to and including termination. Privacy and CCTV - Office of the Privacy Commissioner