Health Privacy Principle 1: collection

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A GP clinic asks a new patient for their health history because it is needed to treat them. Does this follow HPP 1?

A Yes, the collection is necessary for the service

B No, clinics must never collect health history

2. A gym asks every new member for their full medical records 'just in case we want them later'. Which is correct?

A This follows HPP 1 because more data is always better

B This breaks HPP 1 because the collection is not necessary

3. Which method of collecting health information fits the 'lawful and fair' part of HPP 1?

A Asking the patient directly on an intake form

B Secretly reading a patient's private messages to find health details

4. A clinic collects a patient's health details but never says why. What is the problem?

A The person was not told why the information is collected

B The clinic collected the data from the patient themselves

5. True or false: under HPP 1, an organisation must tell the person why their health information is being collected.

A False

B True

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1HPP 1		AIntake form: 'We collect your health details to book your treatment. Contact: Privacy Officer'
2Necessary collection		BA clinic asks the patient directly and does not secretly check their records
3Lawful and fair collection: health information must not be obtained by deception, pressure or illegal means		COnly ask for health information the organisation needs to provide its service or carry out its function
4Telling the person: at collection the individual must be told who is collecting the data and why		DHealth Privacy Principle 1: health information may only be collected when necessary, lawfully, fairly and with the person told why
5A gym asks new members for their full medical history, genetic test results and mental health notes just to book a class		ECollection is not necessary. The gym only needs health details relevant to safe participation, so this breaches HPP 1.
6A clinic collects a patient's health details through a hidden form and never says why the data is wanted		FThe collection is neither fair nor open. The person was not told why their health information was collected.

Definitions

HPP 1

Fill in the Blanks

Complete each line of code by filling in the missing parts.

HPP 1: collect only if it is _________

HPP 1: collect by lawful and ____ means

HPP 1: tell the person ___ it is collected

IF necessary ___ lawful AND fair: collect

IF collecting THEN tell(person, _______)

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A IF info needed for the service

B THEN collect the health info

C Hide the reason from them

D ELSE do not collect it

Question 2

A SET purpose TO 'treatment'

B IF health info needed for it

C THEN collect it lawfully

D AND keep the purpose secret

Question 3

A needed = info may help later

B IF needed THEN

C collect health info

D tell person why

Question 4

A patient = new patient

B reason = 'book a check-up'

C collect by trick or pressure

D tell patient the reason

Question 5

A IF info is wanted by staff

B collect it lawfully

C tell person the reason

D ENDIF

Answer Key

Health Privacy Principle 1: collection

Section A: Quick Questions

A — Yes, the collection is necessary for the service

B — This breaks HPP 1 because the collection is not necessary

A — Asking the patient directly on an intake form

A — The person was not told why the information is collected

B — True

Section B: Match the Pairs

HPP 1 → Health Privacy Principle 1: health information may only be collected when necessary, lawfully, fairly and with the person told why

Necessary collection → Only ask for health information the organisation needs to provide its service or carry out its function

Lawful and fair collection: health information must not be obtained by deception, pressure or illegal means → A clinic asks the patient directly and does not secretly check their records

Telling the person: at collection the individual must be told who is collecting the data and why → Intake form: 'We collect your health details to book your treatment. Contact: Privacy Officer'

A gym asks new members for their full medical history, genetic test results and mental health notes just to book a class → Collection is not necessary. The gym only needs health details relevant to safe participation, so this breaches HPP 1.

A clinic collects a patient's health details through a hidden form and never says why the data is wanted → The collection is neither fair nor open. The person was not told why their health information was collected.

Section C: Definitions

HPP 1 — Health Privacy Principle 1: collect health information only if necessary for the service, by lawful and fair means, and tell the person why it is collected.

Section D: Fill in the Blanks

HPP 1: collect only if it is necessary

HPP 1: collect by lawful and fair means

HPP 1: tell the person why it is collected

IF necessary AND lawful AND fair: collect

IF collecting THEN tell(person, purpose)

Section E: Spot the Error

C — HPP 1 says the person must be told why their health information is collected. The line should tell the person the reason, not hide it.

D — Under HPP 1 the person must be told why the information is collected. Keeping the purpose secret breaks this. The line should tell them the purpose.

A — HPP 1 allows collection only when the information is necessary for the service. 'May help later' is not necessary. The line should tie need to the service.

C — HPP 1 requires health information to be collected by lawful and fair means. Tricking or pressuring a person is unfair. It should say lawful, fair means.

A — HPP 1 only allows collection when the information is necessary for the service. Being wanted by staff is not a valid test. It should be 'needed for service'.