Requesting a Copy of the Prescription Summary

Key Takeaways

• Patients have the right to request their Prescription Summary under the Privacy Act.
• Prescription summaries contain key prescription details but exclude clinical diagnoses and sensitive notes.
• Carers can assist with requesting summaries if they have the patient's consent.
• Doctors may decline requests for summaries in certain situations (e.g., due to safety concerns or legal restrictions).
• Prescription summaries can be received securely via patient portals, encrypted email, or My Health Record.

Patients in Australia will have the right to request access to their health information under the Privacy Act 1988 and the Australian Privacy Principles (APPs), which require healthcare providers to provide individuals with access to their personal health information. This means you have the right to request access to the Prescription Summary, a secure document that records the medicines prescribed to you by your AHPRA-registered prescriber.

At Prime Medic, we recognise and uphold your right to information and data portability. This article outlines how to obtain a summary of your eScripts via the eScript & Prescription Access Hub to ensure your data security.

What Is a Prescription Summary?

A Prescription Summary is a patient-friendly explanation of the medications prescribed to you during your consultation. It serves as a comprehensive personal medication record, especially when you are consulting multiple specialists or travelling.

Key Information Included

• Prescriber Details: The full name and AHPRA registration number of the medical practitioner who issued the prescription.
• Issuance Metadata: The date and time the prescription was signed and the date and time it was registered with the National Prescription Delivery Service (NPDS).
• Token Identifiers: The unique token IDs or reference numbers of your current prescriptions and their repeats.
• Medication Logistics: Details such as the total quantity that is permitted and how many repeat authorisations are left.
• Privacy Safeguards: In line with the privacy rules for prescription data, a summary generally contains only factual details about the prescription and does not include sensitive clinical diagnoses or consultation notes.

Identity Verification for Access

Prescriptions generally contain highly personal health identifiers. Therefore, a summary can only be provided after an identity check to ensure the information is disclosed only to the patient or their legal representative. This mirrors the process used for medical certificate validation rules.

The Verification Process

Before you can ask for a summary, you need to complete the same Identity Verification, before eScript checks are carried out during a consultation:

• Direct Request: The request should be made by the patient or the authorised carer.
• Identifier Match: The patient must disclose their full legal name, date of birth, and Medicare or Individual Healthcare Identifier to the requester.
• Visual Confirmation: In some cases, if the request is made outside a consultation, a short telehealth "identity sight" may be required.

Secure Ways to Receive the Summary

Once your identity is satisfactorily confirmed, the summary must be issued through secure and compliant channels. Australian digital health rules forbid sending sensitive health records via insecure means, such as social media.

Delivery Methods

• Secure Patient Portal: Typically, a summary gets uploaded to the patient's password-protected Prime Medic account.
• Encrypted Email: A password-protected PDF copy of the summary can be sent to your verified email address.
• My Health Record: You can also view an overview of your dispensed medicines by signing in to your My Health Record portal.

For more on safe digital habits, see our guide to handling escript tokens safely.

When Prescribers May Decline Requests

Although the right to access one's medical file is generally broad, there are specific circumstances, as prescribed by law, under which a doctor may refuse to issue a prescription summary.

Refusal Grounds under the Privacy Act

• Threat to Safety: If disclosing the record could endanger the patient's or others' life, health, or safety.
• Privacy of Others: If the record contains sensitive information about other people that cannot be removed, it should be marked accordingly.
• Unresolved Identity Mismatch: The prescriber has not been convinced that the requester is either the patient or an authorised delegate.
• Legal Restrictions: If granting access is illegal or would harm the legal proceedings.

If a doctor refuses a request, they must provide the requester with a written statement of reasons and instructions on how to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Consent Rules for Carers or Delegates

If you are managing a family member's or older adult's healthcare and have legal permission, you can request a prescription summary for that person.

Carer Guidelines

• Written Consent: Adult patients with capacity usually must sign a consent form or provide clear verbal consent in the presence of the prescriber.
• Legal Authority: Patients without capacity require evidence of their carer's legal status, such as a Power of Attorney or a Legal Guardianship document.
• Child Access: Generally, parents have the right to obtain prescription summaries for their children, but as the child approaches age 14, their privacy rights and competence become more important.

Explore more in our accessibility options for seniors and carers. For more on managing your health information, visit My Health Record.