Compliance
Australian medical practices must protect patient privacy under the Privacy Act, APPs, and professional codes. MedReception encrypts all calls, secures PHI storage, maintains audit logs, and complies with Australian healthcare data governance.
Patient information is collected, held, and accessed only for direct care purposes. AI transcriptions and recordings are not used for marketing or third-party sale. Your practice demonstrates compliance to AHPRA, RACGP, or other regulators.
Encrypted calls, role-based access controls, and audit logs strengthen your security posture. If a breach occurs, your logs demonstrate reasonable steps to protect PHI. Insurance and legal standing improve.
You choose how long call recordings and transcripts are kept. Automatic deletion after 30, 60, or 90 days means old patient data doesn't accumulate indefinitely. Aligns with privacy best practice and reduces breach surface area.
Patients are informed during the call that an AI is answering and recording. Your practice complies with consent requirements and builds patient trust by being upfront about automation.
End-to-end call encryption
All calls encrypted in transit and at rest; meets Australian Privacy Act standards
Audit logs for every action
Call routing, transcription, EMR writes, and data access logged with timestamp and user
Configurable data retention
Set your own call recording and transcript deletion schedule
Data locality options
Store patient data in Australia or another jurisdiction of your choice
Yes. We apply the Australian Privacy Principles (APPs) to patient data collection, use, and disclosure. Data is held securely, accessed only for direct care, and not sold or shared with third parties. We provide privacy impact assessments and compliance reports on request.
Best practice says yes. Most Australian practices include a brief disclosure: 'This call may be answered by an AI assistant for triage and booking.' This builds trust and meets transparency expectations.
Yes, with de-identification. MedReception can remove or mask patient names and contact details for QA purposes. Your team reviews calls to improve AI performance without exposing sensitive data.
No legal mandate sets a specific period, but 30–90 days is standard for most practices. We recommend aligning with your state's medical records retention rules and your indemnity insurer's requirements. Older recordings are automatically securely deleted.
MedReception notifies you immediately, works with you on containment, and provides a full incident report. Your audit logs and encryption evidence support your regulatory reporting. Most Australian practices have cyber liability insurance that covers notification costs.
No legal requirement restricts data locality in Australia. However, many practices prefer data stored locally for latency and sovereignty. MedReception supports Australian servers as well as US and other jurisdictions.
See how MedReception AI handles after-hours calls, scheduling, intake, and patient communication for medical practices like yours.
Want the numbers first? See plans and pricing
