Introduction
This practice is committed to protecting the privacy and confidentiality of personal information in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (Ireland), and applicable privacy legislation in all jurisdictions where services are provided, including Australia and the United Kingdom.
This Privacy Policy outlines how personal information is collected, used, disclosed, and safeguarded in the provision of forensic psychiatric services and medicolegal assessments.
Collection of Personal Information
Information Collected
Personal information is collected as necessary for the provision of Forensic Psychiatric services and medicolegal assessments, including:
- Personal details (name, date of birth, address, contact information)
- Medical and psychiatric history
- Legal and forensic assessment information
- Information from referral sources (legal representatives, courts, insurers)
- Clinical observations and assessment findings
- Correspondence and communication records
Methods of Collection
Information is collected through:
- Direct consultation and clinical interviews
- Referral documentation from legal representatives
- Medical records and reports from treating practitioners
- Court documents and legal proceedings materials
- Psychological testing and assessment tools
- Collateral information from relevant sources
Use and Disclosure of Personal Information
Primary Uses
Personal information is used for:
- Conducting comprehensive Forensic Psychiatric assessments
- Preparing medicolegal reports for court proceedings
- Providing expert opinion on psychiatric matters
- Communicating with legal representatives and relevant parties
- Maintaining professional records and documentation
- Meeting legal and professional obligations
Disclosure to Third Parties
Personal information may be disclosed to:
- Legal representatives who commissioned the assessment
- Courts and tribunals as required by legal proceedings
- Other medical practitioners involved in care (with appropriate consent)
- Professional indemnity insurers when necessary
- Regulatory bodies (AHPRA, Medical Board) when required
- Other parties as required by law or court order
Confidentiality and Data Security
Professional Confidentiality
This practice maintains strict professional confidentiality in accordance with:
- Irish Medical Council's Guide to Professional Conduct and Ethics
- Medical regulatory body guidelines in all jurisdictions of practice
- GDPR, Data Protection Act 2018, and applicable health privacy legislation
- Professional indemnity and ethical obligations
Security Measures
Personal information is protected through:
- Secure storage of physical records in locked facilities
- Encrypted digital storage and transmission systems
- Access controls limiting information to authorised personnel
- Regular security assessments and updates
- Staff training on privacy and confidentiality obligations
- Secure destruction of records when no longer required
Your Rights Under Data Protection Law
Under GDPR and applicable data protection legislation, individuals have the right to:
- Request access to their personal information (Subject Access Request)
- Request correction of inaccurate or incomplete information (Right to Rectification)
- Request erasure of personal data in certain circumstances (Right to Erasure)
- Request restriction of processing of personal data
- Data portability where applicable
- Object to processing of personal data
- Lodge complaints with the relevant supervisory authority
Access requests should be made in writing and will be processed in accordance with privacy legislation. Some limitations may apply where disclosure could:
- Compromise ongoing legal proceedings
- Affect the safety or wellbeing of individuals
- Breach professional or legal obligations
- Interfere with law enforcement activities
Record Retention and Disposal
Personal information and medical records are retained in accordance with:
- Medical regulatory body guidelines in each jurisdiction of practice
- Legal and professional requirements for forensic records
- Potential future legal proceedings and appeals
- Professional indemnity insurance requirements
- GDPR data retention principles (data kept only as long as necessary)
Records are securely destroyed when no longer required, ensuring complete confidentiality and compliance with data protection obligations.
International Information Transfers
This practice operates across multiple jurisdictions. Personal information may be transferred internationally for:
- Cross-jurisdictional legal proceedings
- Professional consultation and collaboration
- Regulatory compliance in multiple jurisdictions
- Secure data storage and backup systems
All international transfers comply with GDPR requirements for cross-border data transfers, including appropriate safeguards such as Standard Contractual Clauses where required. Data transfers to countries outside the EEA will only occur where adequate protections are in place.
Privacy Complaints
Privacy concerns or complaints should be directed to this practice in the first instance. We are committed to resolving privacy matters promptly and fairly.
If you are not satisfied with the response, you may lodge a complaint with the relevant supervisory authority:
- Ireland: Data Protection Commission - www.dataprotection.ie
- United Kingdom: Information Commissioner's Office (ICO) - ico.org.uk
- Australia: Office of the Australian Information Commissioner (OAIC) - www.oaic.gov.au
You may also contact the relevant medical regulatory body in your jurisdiction for concerns relating to professional conduct.
Policy Updates
This Privacy Policy may be updated periodically to reflect changes in practice procedures, legal requirements, or professional standards. Updated versions will be made available and the revision date will be clearly indicated.
Data Controller Contact Information
For privacy inquiries, Subject Access Requests, or complaints, please contact:
Dr. Alan Gallogly
Forensic Psychiatrist
Registered with AHPRA (Australian Health Practitioner Regulation Agency) and the Irish Medical Council
Email: Available through contact form
Subject Access Requests and privacy inquiries will be responded to within one month in accordance with GDPR requirements. Registration details available upon request.