← VCE Data Analytics U3O2

HPP 4: data security and retention of health information

Health Privacy Principle 4: health information must be kept secure from misuse and loss, and not kept longer than needed. Destroy or de-identify it safely when the retention period ends.

Part of: VCE Data Analytics - U3O2 - Analysis and Design — Module 99

Understanding HPP 4: data security and retention of health information in VCE Data Analytics U3O2

What it does: HPP 4 requires reasonable steps to keep health information secure. Passwords and restricted access are safeguards against misuse and loss. HPP 4 says health information must not be kept longer than needed, so it should be destroyed (or de-identified) safely at the end of the retention period. Safe destruction means the information cannot be read or recovered. Whole pages in a bin can be picked up and read by others. HPP 4 is the Health Records Act 2001 (Vic) principle on data security and retention, so the code names the principle and the meaning states its two requirements.

Common mistakes: HPP 4 says health information must not be kept longer than needed. The retention period must be a fixed number of years, such as 7, not 'forever'. HPP 4 requires reasonable security safeguards against misuse and loss. Health data stored as plain text can be read by anyone who gets the file, so storage should be encrypted.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add HPP 4: data security and retention of health information to a class →

This module's key terms are also in a printable crossword (Modules 76–146) and word search (Modules 3–146).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

A clinic stores patient files in a database. Which action best meets the security part of HPP 4?

Leave the files open so any staff member can browse themUse passwords and restrict access to staff who need the records

Matches

Keep every patient record forever, just in case it is useful later

↓

HPP 4 says health information must not be kept longer than needed. Keeping it forever breaks the retention rule. It should be destroyed or de-identified when the retention period ends.

Applying

Meanings

Term

HPP 4

Meaning

Health Privacy Principle 4: health information must be kept secure from misuse and loss, and not kept longer than needed. Destroy or de-identify it safely when the retention period ends.

Practice

// HPP 4: secure health information

Testing

Gaps

FROM records WHERE ageyears > 7;

Check Answer

Spots

1SET retention_years TO forever

2SET record_age TO 9

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. A clinic stores patient files in a database. Which action best meets the security part of HPP 4?

A. Leave the files open so any staff member can browse them

B. Use passwords and restrict access to staff who need the records ✓

HPP 4 requires reasonable security safeguards against misuse, loss and unauthorised access. Access controls and passwords are examples.

2. Which statement about HPP 4 is correct?

A. Health information must be protected from misuse and loss ✓

B. Health information must be collected only with a signed form

Protecting information from misuse and loss is HPP 4. Rules about collecting information belong to a different principle, HPP 1.

3. A physio's laptop with patient records is stolen. It had no password or encryption. What does this show?

A. The security safeguards were not reasonable, so HPP 4 was likely breached ✓

B. HPP 4 does not apply because the laptop was stolen

HPP 4 requires reasonable steps to protect against loss and unauthorised access. Encryption and a password would have been reasonable safeguards.

4. Under HPP 4, what should happen once health information is no longer needed and its retention period has ended?

A. Keep it forever in case it is useful one day

B. Destroy it safely or permanently de-identify it ✓

HPP 4 says health information must not be kept longer than needed. When the retention period ends, it should be destroyed or de-identified.

5. Which is a safe destruction method for old paper health records?

A. Shred them or use a secure document destruction service ✓

B. Put them in the general recycling bin whole

Safe destruction means the information cannot be read or recovered. Whole pages in a bin can be picked up and read by others.

Match the Pairs

HPP 4 → Health Privacy Principle 4: health information must be kept secure from misuse and loss, and not kept longer than needed

retention period → The length of time health information must be kept before it can be destroyed or de-identified

A security safeguard that protects health information from misuse and loss → Password-protect the patient file and restrict access to authorised staff

Safe destruction once the retention period ends → Securely delete the file and shred the printed copies

Keep every patient record forever, just in case it is useful later → HPP 4 says health information must not be kept longer than needed. Keeping it forever breaks the retention rule. It should be destroyed or de-identified when the retention period ends.

Store health records in an open shared folder anyone in the office can view → No security safeguards are in place, so the records could be misused or lost. Access should be restricted and the records protected, for example with passwords and encryption.

Key Term

HPP 4

Health Privacy Principle 4: health information must be kept secure from misuse and loss, and not kept longer than needed. Destroy or de-identify it safely when the retention period ends.

Fill in the Blanks

1. DELETE FROM records WHERE age_years > 7;

Hint: Type the SQL command that permanently removes rows once the retention period has ended.

2. DELETE FROM logs WHERE expiry < '2025-06-30'

Hint: Type the comparison operator that finds records whose retention end date has already passed.

3. REVOKE ALL ON records FROM visitor;

Hint: Type the SQL command that takes away access permissions, a security safeguard against misuse of health information.

4. UPDATE logs SET name = NULL WHERE id = 5;

Hint: Type the SQL value that represents no data, so the record is de-identified instead of keeping a name.

5. IF today > expiry THEN destroy(record)

Hint: Type the action name that safely disposes of a record once it has been kept longer than needed.

Spot the Error

Question 1

A SET retention_years TO forever

B SET record_age TO 9

C IF record_age > retention_years

D destroy(record)

E END IF

Line A — HPP 4 says health information must not be kept longer than needed. The retention period must be a fixed number of years, such as 7, not 'forever'.

Question 2

A SET storage TO plain_text

B SET password TO required

C SET access_log TO on

Line A — HPP 4 requires reasonable security safeguards against misuse and loss. Health data stored as plain text can be read by anyone who gets the file, so storage should be encrypted.

Question 3

A FOR each staff member

B IF role = clinician

C allow_access(record)

D ELSE allow_access(record)

E END FOR

Line D — Giving access to staff who do not need it risks misuse of health information, which breaks HPP 4. Staff without a clinical role should be denied access: deny_access(record).

Question 4

A SET retention_years TO 7

B IF age < retention_years

C destroy(record)

D END IF

Line B — The record should only be destroyed once it is older than the retention period. Using < would destroy records that are still needed. It should be IF age > retention_years.

Question 5

A IF age > retention_years

B shred(paper_copies)

C move_to_recycle_bin(file)

D END IF

Line C — Safe destruction means the data cannot be recovered. A recycle bin still holds the file, so digital copies must be securely wiped: wipe(digital_copies).

Student with a class code? Join your class →