Information and Communications Technology

Policy framework statement

Purpose

The purpose of this policy framework is to ensure:

• the ICT Governance Structure [intranet] and requirements for ICT decision-making are understood across the WA health system
• individuals accessing the WA health system's ICT comply with the mandatory requirements relating to the secure and efficient use of systems.

In conjunction with the WA Health Digital Strategy 2020-2030 and ICT Governance Structure [intranet], this ICT Policy Framework has been developed to embed systemwide ICT policies and practices that promote continuous improvement in the use of technology to deliver quality patient care, reflect business needs and align to wider government ICT strategic directions.

Applicability

This policy framework is binding on each HSP to which it applies or relates. Specifically, HSPs must ensure that in contracting with contracted health entities, the entity and any of their personnel accessing the WA health system comply with all relevant ICT mandatory requirements listed in this policy framework.

Principles

The key principles that underpin this policy framework are:

Accountability
Electronic communications, which are part of the business records of WA health system, are treated as such and managed in accordance with recordkeeping policies and legislation.

Consistency
ICT policy and management directions support the objectives of the:

• WA Health Digital Strategy 2020-2030
• Whole-of-Government ICT Strategy and policies, issued by the Office of the Government Chief Information Officer (OGCIO).

Customer focus
Investments in ICT are used to improve safety and quality, improve patient outcomes, create a better patient journey or experience, build knowledge to inform research and changes to clinical practice, or improve efficiencies and financial sustainability.

Governance
Effective governance and decision-making on ICT is undertaken in accordance with the ICT Governance Structure. This includes regular, ongoing and responsive clinical and consumer engagement. ICT projects and funding for ICT are well managed in order to deliver better care and better value.

Responsible use
The WA health system ICT resources are used responsibly, including behaviour that:

• is in accordance with public sector ethics, accepted community standards and relevant law, and
• does not disrupt the efficient delivery of the WA health system’s services.

Security and privacy
WA health system ICT resources are controlled and protected to safeguard privacy and confidentiality, preserve data integrity and ensure the ongoing availability of information. Security controls and guidelines are applied to the storage, access, processing or transmitting of data on a range of devices and infrastructure, whether it is WA health system owned, privately owned or purchased as a service. Access to and disclosure of information is managed and performed in accordance with the WA health system’s Information Management Policy Framework. ICT security considerations are incorporated into ICT investments, including monitoring and audit capability, where applicable.

Legislative context

This policy framework is made pursuant to ss 26(2)(k) of the Health Services Act 2016.

The Health Services Act 2016 refers to policy frameworks in ss. 26-27 and s. 34(2)(c). Other relevant parts in the Act that relate specifically to this policy framework include s .36(3)(e-f).

The legislation below, may also apply:

• Corruption, Crime and Misconduct Act 2003
• Privacy Act 1988 (Cwlth), Schedule 1 Australian Privacy Principles
• State Records Act 2000.

Mandatory requirements

Under this policy framework HSPs must comply with all mandatory requirements* including:

Policy framework custodian

Assistant Director General
Strategy and Governance

Review

Show allHide review details