Privacy Policy

Protecting your personal information and maintaining confidentiality

Last updated: 23 December 2025

Introduction

This practice is committed to protecting the privacy and confidentiality of personal information in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (Ireland), and applicable privacy legislation in all jurisdictions where services are provided, including Australia and the United Kingdom.

This Privacy Policy outlines how personal information is collected, used, disclosed, and safeguarded in the provision of forensic psychiatric services and medicolegal assessments.

Collection of Personal Information

Information Collected

Personal information is collected as necessary for the provision of Forensic Psychiatric services and medicolegal assessments, including:

  • Personal details (name, date of birth, address, contact information)
  • Medical and psychiatric history
  • Legal and forensic assessment information
  • Information from referral sources (legal representatives, courts, insurers)
  • Clinical observations and assessment findings
  • Correspondence and communication records

Methods of Collection

Information is collected through:

  • Direct consultation and clinical interviews
  • Referral documentation from legal representatives
  • Medical records and reports from treating practitioners
  • Court documents and legal proceedings materials
  • Psychological testing and assessment tools
  • Collateral information from relevant sources

Use and Disclosure of Personal Information

Primary Uses

Personal information is used for:

  • Conducting comprehensive Forensic Psychiatric assessments
  • Preparing medicolegal reports for court proceedings
  • Providing expert opinion on psychiatric matters
  • Communicating with legal representatives and relevant parties
  • Maintaining professional records and documentation
  • Meeting legal and professional obligations

Disclosure to Third Parties

Personal information may be disclosed to:

  • Legal representatives who commissioned the assessment
  • Courts and tribunals as required by legal proceedings
  • Other medical practitioners involved in care (with appropriate consent)
  • Professional indemnity insurers when necessary
  • Regulatory bodies (AHPRA, Medical Board) when required
  • Other parties as required by law or court order

Confidentiality and Data Security

Professional Confidentiality

This practice maintains strict professional confidentiality in accordance with:

  • Irish Medical Council's Guide to Professional Conduct and Ethics
  • Medical regulatory body guidelines in all jurisdictions of practice
  • GDPR, Data Protection Act 2018, and applicable health privacy legislation
  • Professional indemnity and ethical obligations

Security Measures

Personal information is protected through:

  • Secure storage of physical records in locked facilities
  • Encrypted digital storage and transmission systems
  • Access controls limiting information to authorised personnel
  • Regular security assessments and updates
  • Staff training on privacy and confidentiality obligations
  • Secure destruction of records when no longer required

Your Rights Under Data Protection Law

Under GDPR and applicable data protection legislation, individuals have the right to:

  • Request access to their personal information (Subject Access Request)
  • Request correction of inaccurate or incomplete information (Right to Rectification)
  • Request erasure of personal data in certain circumstances (Right to Erasure)
  • Request restriction of processing of personal data
  • Data portability where applicable
  • Object to processing of personal data
  • Lodge complaints with the relevant supervisory authority

Access requests should be made in writing and will be processed in accordance with privacy legislation. Some limitations may apply where disclosure could:

  • Compromise ongoing legal proceedings
  • Affect the safety or wellbeing of individuals
  • Breach professional or legal obligations
  • Interfere with law enforcement activities

Record Retention and Disposal

Personal information and medical records are retained in accordance with:

  • Medical regulatory body guidelines in each jurisdiction of practice
  • Legal and professional requirements for forensic records
  • Potential future legal proceedings and appeals
  • Professional indemnity insurance requirements
  • GDPR data retention principles (data kept only as long as necessary)

Records are securely destroyed when no longer required, ensuring complete confidentiality and compliance with data protection obligations.

International Information Transfers

This practice operates across multiple jurisdictions. Personal information may be transferred internationally for:

  • Cross-jurisdictional legal proceedings
  • Professional consultation and collaboration
  • Regulatory compliance in multiple jurisdictions
  • Secure data storage and backup systems

All international transfers comply with GDPR requirements for cross-border data transfers, including appropriate safeguards such as Standard Contractual Clauses where required. Data transfers to countries outside the EEA will only occur where adequate protections are in place.

Privacy Complaints

Privacy concerns or complaints should be directed to this practice in the first instance. We are committed to resolving privacy matters promptly and fairly.

If you are not satisfied with the response, you may lodge a complaint with the relevant supervisory authority:

You may also contact the relevant medical regulatory body in your jurisdiction for concerns relating to professional conduct.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in practice procedures, legal requirements, or professional standards. Updated versions will be made available and the revision date will be clearly indicated.

Data Controller Contact Information

For privacy inquiries, Subject Access Requests, or complaints, please contact:

Dr. Alan Gallogly

Forensic Psychiatrist

Registered with AHPRA (Australian Health Practitioner Regulation Agency) and the Irish Medical Council

Email: Available through contact form

Subject Access Requests and privacy inquiries will be responded to within one month in accordance with GDPR requirements. Registration details available upon request.

Questions About Privacy?

Contact the practice for privacy inquiries or data protection requests.

Enquire Now