Australia · Privacy
An AI agent on the practice phone touches health information every day. That responsibility is designed against the Privacy Act 1988 — not bolted on later. Full product: Arbol in Australia.
Under the Privacy Act 1988 and the Australian Privacy Principles, health information carries the highest handling standard: collected for a stated purpose, with consent where required, and protected accordingly. Each practice gets a dedicated database; data is encrypted in transit and at rest.
Source: Privacy Act 1988 (Cth) and the Australian Privacy Principles
The Notifiable Data Breaches scheme means an eligible breach has to be assessed and notified. Our incident process, retention settings and export tooling are built so your practice can meet that obligation instead of improvising it.
Source: Notifiable Data Breaches scheme, OAIC
The agent states that it is a virtual assistant for your practice, in your practice's name, before personal details are collected. It also states that the call is recorded. That behaviour is not configurable.
Every conversation is recorded and exportable. You decide retention. The agent never gives clinical advice — it books, confirms and escalates with context.
Full security dossier: Trust Center. None of this is legal advice.