The thirteen principles, one by one.

What it requiresHandle personal information openly, with a clear, current privacy policy that is easy to find and read.

• A plain-language Privacy Policy that maps to each principle and is versioned and dated on change.
• This page: the principles set out one by one, with the specific mechanism behind each.
• A named contact for privacy enquiries, answered directly.

What it requiresGive people the option of not identifying themselves where that is lawful and practicable.

• aurii is a clinical record system: patients are identified because the clinical and billing record legally requires it.
• Marketing and general enquiries to aurii do not require an account or identifying detail beyond the email you choose to send from.

What it requiresCollect only information reasonably necessary for your functions, and collect sensitive information with consent.

• aurii collects only what it needs to draft documentation and record billing: the consult audio, the transcript, the drafts, and the patient identifiers.
• Health information is handled as sensitive information, collected in the course of care the clinician is already providing.
• No data-broker purchases, no advertising pixels on the clinical application.

What it requiresIf you receive personal information you did not ask for, decide whether you could have collected it, and if not, destroy or de-identify it.

• Uploaded context files attach to the patient record they were provided for and flow only into background sections of a draft, never the examination or plan.
• Content that does not belong to an active clinical record is not retained in the working set.

What it requiresTell people that you are collecting their information, why, and who you might share it with.

• The Privacy Policy sets out what is collected, why, where it lives, and the short list of sub-processors that can touch it.
• Patients are informed through the treating clinician and hospital that controls the record, in the ordinary course of care.

What it requiresUse or disclose information only for the purpose it was collected, or a directly related purpose the person would expect.

• Clinical information is used to transcribe the consult, draft the documentation, and record billing for the clinician to review and sign.
• It is not used for marketing, and it is never sold.
• Disclosure happens only where the clinician directs it, such as a signed letter to a GP, or where Australian law requires it.

What it requiresDo not use personal information for direct marketing unless the person would expect it and can opt out.

• aurii does not use patients' clinical information for marketing, at all.
• The clinical application carries no third-party advertising or tracking.

What it requiresBefore sending personal information overseas, take reasonable steps to ensure the recipient handles it consistently with the APPs.

• Your data is pinned to Australia: a primary region in Sydney, replicated to a backup region in Melbourne.
• Consult audio is transcribed in Australia, and the documents drafted from it are stored and encrypted in Australia.
• aurii does not disclose your data to overseas recipients for its own purposes. Where a sub-processor is involved, it is bound by contract to the same residency and confidentiality terms.

What it requiresDo not adopt, use or disclose a government identifier as your own identifier for a person.

• aurii identifies patients by the hospital's own medical record number, not by a government identifier.
• Where a Medicare number is recorded for billing, it is encrypted at the field level and is not surfaced back into documents; the pharmacist or fund completes it from the physical card where a printed form needs it.

What it requiresTake reasonable steps to ensure the information you hold is accurate, up to date and complete.

• aurii drafts; the specialist decides. Nothing is final, sent or billed until a doctor has reviewed and signed it, so a human checks accuracy at the point it matters.
• The examination, impression and plan are dictated, not invented: aurii does not fabricate clinical content the clinician did not say.

What it requiresProtect information from misuse, interference, loss, and unauthorised access, with steps reasonable in the circumstances.

• Clinical information is encrypted in transit and at rest, record by record, each record's data key wrapped by a key in Microsoft Azure Key Vault in Australia.
• Access is authenticated and least-privilege, with multi-factor authentication and passkeys, and each practice's data is isolated from every other tenant.
• Every document and every action is written to an append-only, tamper-evident audit retained for seven years.

What it requiresGive people access to the personal information you hold about them, on request.

• A clinician can see the personal information aurii holds for their account.
• aurii holds patient information on behalf of hospitals and specialists. A patient access request flows through the clinician or hospital that controls the record, and aurii helps them respond.

What it requiresCorrect personal information that is inaccurate, out of date, incomplete, irrelevant or misleading, on request.

• A signed document can be amended, and the amendment is itself recorded in the tamper-evident audit, so the correction is transparent rather than silent.
• Account information can be corrected on request, and patient corrections flow through the hospital that controls the record.