{"id":4300,"date":"2026-07-23T14:43:54","date_gmt":"2026-07-23T04:43:54","guid":{"rendered":"https:\/\/blog.amt.org.au\/?p=4300"},"modified":"2026-07-23T14:46:25","modified_gmt":"2026-07-23T04:46:25","slug":"what-your-privacy-policy-might-reveal-about-your-massage-practice","status":"publish","type":"post","link":"https:\/\/blog.amt.org.au\/index.php\/2026\/07\/23\/what-your-privacy-policy-might-reveal-about-your-massage-practice\/","title":{"rendered":"What your privacy policy might reveal about your massage practice"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Introducing AMT\u2019s Sole Trader Privacy Policy template<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Did you know that, as a massage therapist collecting personal and health information, you&#8217;re required by law to have a clear, up-to-date privacy policy? &nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Under the Privacy Act 1988 (Cth), any business covered by the Australian Privacy Principles (APPs) needs a privacy policy that meets the requirements of <a href=\"https:\/\/www.oaic.gov.au\/privacy\/australian-privacy-principles\/australian-privacy-principles-guidelines\/chapter-1-app-1-open-and-transparent-management-of-personal-information\" target=\"_blank\" rel=\"noreferrer noopener\">APP 1.4<\/a>. According to the Office of the Australian Information Commissioner&#8217;s (OAIC) <a href=\"https:\/\/www.oaic.gov.au\/privacy\/privacy-guidance-for-organisations-and-government-agencies\/more-guidance\/guide-to-developing-an-app-privacy-policy\" target=\"_blank\" rel=\"noreferrer noopener\">guide to developing an APP privacy policy<\/a>, that policy has to cover specific ground: what personal information you collect, how you collect it, how you store and secure it, why you use and disclose it, how people can access or correct their information, how they can complain, and whether any of their information goes overseas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The OAIC is also clear that a good privacy policy shouldn&#8217;t just recycle the wording of the Privacy Act. Their guidance advises entities to make the privacy policy specific to their own business rather than simply repeating the wording of the APPs, and to write it in plain language a reader can understand rather than treating it as a dense legal document.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And that&#8217;s the philosophy behind the template that AMT has created to help members meet their obligations under the Privacy Act to manage personal information in an open and transparent way. It is written in first person, plain English, and structured around the real activities of a massage therapy practice rather than abstract legal categories.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>What&#8217;s in AMT\u2019s privacy policy template<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">We have formulated a template that is based on the OAIC\u2019s <a href=\"https:\/\/www.oaic.gov.au\/privacy\/privacy-guidance-for-organisations-and-government-agencies\/more-guidance\/guide-to-developing-an-app-privacy-policy\">guidance and checklist<\/a>. The template walks through:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Who the policy applies to<\/strong> (clients, prospective clients, and website visitors)<\/li>\n\n\n\n<li><strong>What information is collected<\/strong> (everyday contact and billing details, and sensitive health information that is central to safe treatment)<\/li>\n\n\n\n<li><strong>How information is collected<\/strong> (through bookings, intake forms, and consultations, and indirectly through referring practitioners or booking platforms)<\/li>\n\n\n\n<li><strong>How information is stored\/security of personal information<\/strong> (cloud systems or paper files, password protection, multi-factor authentication, and retention periods aligned with health record-keeping requirements)<\/li>\n\n\n\n<li><strong>Use and disclosure of information<\/strong> (treatment planning, invoicing, and the limited third parties information might be shared with)<\/li>\n\n\n\n<li><strong>Overseas disclosure<\/strong> (a section for naming any software or services that store data outside Australia)<\/li>\n\n\n\n<li><strong>Access, correction, and complaints<\/strong> (how clients can see or fix their information, and what happens if something goes wrong).<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>AI scribes<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The AMT template also directly addresses AI transcription tools used during consultations. If you use an AI scribe to record or summarise sessions, that&#8217;s a form of sensitive information collection and overseas disclosure that needs to be transparently disclosed, along with any other third-party software. The template includes prompts to name the provider, explain how long recordings are kept, and note where the data is stored and processed.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Health information requires stronger security<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Because massage therapists collect health information, a category of sensitive information under the Australian Privacy Principles, the OAIC&#8217;s guidance on reasonable security steps expects more than a business just collecting basic details like names and emails. The AMT template reflects this by including multi-factor authentication and access limitation as baseline security measures, not optional extras.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>How to use the AMT template<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The template is a starting point, not a finished document. Every bracketed placeholder needs to be filled in with what actually happens in your practice. The OAIC&#8217;s guidance is worth reading alongside the template: it recommends testing your finished policy on someone outside your business to make sure it reads clearly. The OAIC also recommends reviewing your privacy policy regularly so it keeps matching your real practices as they change (a new booking platform, a new AI tool, an updated retention period).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A privacy policy is also not just a compliance box to tick. If it is done well, it&#8217;s one of the ways you build trust with clients who are handing over sensitive health information: not a shield against legal risk but a document that helps people feel confident in how you are looking after their information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You\u2019ll find the privacy policy template in the \u201cResources\u201d section of your <a href=\"https:\/\/members.amt.org.au\" data-type=\"link\" data-id=\"https:\/\/members.amt.org.au\" target=\"_blank\" rel=\"noreferrer noopener\">AMT membership portal<\/a>. It is also available for purchase by non-members. Please contact <a href=\"https:\/\/blog.amt.org.au\/index.php\/contact-us\/\" data-type=\"page\" data-id=\"6\" target=\"_blank\" rel=\"noreferrer noopener\">AMT Head Office<\/a> for more information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Is your privacy policy up to snuff? AMT has a template for that &#8230;<\/p>\n","protected":false},"author":1,"featured_media":4302,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[32,2,911,174],"tags":[1108,1105,598,1107,1106,1103],"class_list":["post-4300","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-amt","category-professional-practice","category-record-keeping","category-resources","tag-amt-member-resource","tag-apps","tag-association-of-massage-therapists","tag-oaic","tag-office-of-the-australian-information-commissioner","tag-privacy-policy-template"],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2026\/07\/Padlock.jpg?fit=1078%2C720&ssl=1","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1756,"url":"https:\/\/blog.amt.org.au\/index.php\/2019\/06\/05\/do-you-feel-secure\/","url_meta":{"origin":4300,"position":0},"title":"Do You Feel Secure?","author":"admin","date":"05\/06\/2019","format":false,"excerpt":"How did a politician get his hands on your mobile phone number? Can he also get his hands on your clients' information? Can anyone else? It's time to think about minimising the risk of a data breach. Sam McCracken is here to help. Oh, and we tell you what to\u2026","rel":"","context":"In &quot;Professional Practice&quot;","block_context":{"text":"Professional Practice","link":"https:\/\/blog.amt.org.au\/index.php\/category\/professional-practice\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/06\/security-2168234_1280.jpg?fit=1200%2C760&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/06\/security-2168234_1280.jpg?fit=1200%2C760&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/06\/security-2168234_1280.jpg?fit=1200%2C760&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/06\/security-2168234_1280.jpg?fit=1200%2C760&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/06\/security-2168234_1280.jpg?fit=1200%2C760&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3780,"url":"https:\/\/blog.amt.org.au\/index.php\/2023\/09\/07\/becoming-socially-acceptable\/","url_meta":{"origin":4300,"position":1},"title":"Becoming socially acceptable.","author":"admin","date":"07\/09\/2023","format":false,"excerpt":"AMT is excited to announce the release of our ground breaking Social Media Standard that has been designed to empower massage therapists across Australia in maintaining professional and ethical standards while engaging on social media platforms. Learn more about the evolution of the Standard and how it relates to your\u2026","rel":"","context":"In &quot;AMT&quot;","block_context":{"text":"AMT","link":"https:\/\/blog.amt.org.au\/index.php\/category\/amt\/"},"img":{"alt_text":"A collage of Social Media icons","src":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2023\/09\/social-3064515_1280.jpg?fit=1200%2C800&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2023\/09\/social-3064515_1280.jpg?fit=1200%2C800&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2023\/09\/social-3064515_1280.jpg?fit=1200%2C800&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2023\/09\/social-3064515_1280.jpg?fit=1200%2C800&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2023\/09\/social-3064515_1280.jpg?fit=1200%2C800&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":4022,"url":"https:\/\/blog.amt.org.au\/index.php\/2025\/05\/12\/so-you-think-you-can-ai-amts-new-position-statement-on-use-of-artificial-intelligence\/","url_meta":{"origin":4300,"position":2},"title":"So you think you can AI? AMT&#8217;s New Position Statement on use of Artificial Intelligence","author":"admin","date":"12\/05\/2025","format":false,"excerpt":"When the robot uprising finally happens, we want to make sure it doesn't start with your client notes accidentally being uploaded to SkyNet. In a future where deep tissue work triggers the awakening of a quantum neural network that thinks it's a qualified remedial massage therapist, AMT's new position statement\u2026","rel":"","context":"In &quot;AMT&quot;","block_context":{"text":"AMT","link":"https:\/\/blog.amt.org.au\/index.php\/category\/amt\/"},"img":{"alt_text":"1907 image of a slightly forlorn looking chimpanzee sitting at a typewriter with their right index finger hovering above a key. The image is credited to New York Zoological Park.","src":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/05\/52908165339_9e556a53ca_c.jpg?fit=799%2C502&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/05\/52908165339_9e556a53ca_c.jpg?fit=799%2C502&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/05\/52908165339_9e556a53ca_c.jpg?fit=799%2C502&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/05\/52908165339_9e556a53ca_c.jpg?fit=799%2C502&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":1262,"url":"https:\/\/blog.amt.org.au\/index.php\/2018\/12\/04\/from-the-archives-massage-treatment-review\/","url_meta":{"origin":4300,"position":3},"title":"From The Archives: Massage Treatment Review","author":"admin","date":"04\/12\/2018","format":false,"excerpt":"From the dusty AMT archive, we travel back to December 2002 and a massage that one might want to forget but never can.","rel":"","context":"In &quot;Massage&quot;","block_context":{"text":"Massage","link":"https:\/\/blog.amt.org.au\/index.php\/category\/massage\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2018\/12\/from-the-archives.png?fit=560%2C315&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2018\/12\/from-the-archives.png?fit=560%2C315&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2018\/12\/from-the-archives.png?fit=560%2C315&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":2174,"url":"https:\/\/blog.amt.org.au\/index.php\/2019\/11\/21\/out-with-the-old\/","url_meta":{"origin":4300,"position":4},"title":"Out with the old &#8230;","author":"admin","date":"21\/11\/2019","format":false,"excerpt":"AMT has recently completed its annual review of the AMT Code of Practice. And this time around, we've made one really exciting change, beyond reviewing the currency of legislation that applies to the practice of massage therapy ...","rel":"","context":"In &quot;AMT&quot;","block_context":{"text":"AMT","link":"https:\/\/blog.amt.org.au\/index.php\/category\/amt\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/11\/Change.jpg?fit=960%2C611&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/11\/Change.jpg?fit=960%2C611&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/11\/Change.jpg?fit=960%2C611&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2019\/11\/Change.jpg?fit=960%2C611&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":4141,"url":"https:\/\/blog.amt.org.au\/index.php\/2025\/08\/20\/introducing-amts-new-partnership-with-guild-insurance\/","url_meta":{"origin":4300,"position":5},"title":"Introducing AMT&#8217;s new partnership with Guild Insurance","author":"admin","date":"20\/08\/2025","format":false,"excerpt":"We're excited to announce our new partnership with Guild Insurance. Read on for more details.","rel":"","context":"In &quot;AMT&quot;","block_context":{"text":"AMT","link":"https:\/\/blog.amt.org.au\/index.php\/category\/amt\/"},"img":{"alt_text":"Black and white sketch showing a handshake with the word \"Teamwork\" written above the hands.","src":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/08\/shaking-hands-handshake-teamwork-staff-ab474225ab7dca72fc74fb44cd17498d-scaled.jpg?fit=1200%2C630&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/08\/shaking-hands-handshake-teamwork-staff-ab474225ab7dca72fc74fb44cd17498d-scaled.jpg?fit=1200%2C630&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/08\/shaking-hands-handshake-teamwork-staff-ab474225ab7dca72fc74fb44cd17498d-scaled.jpg?fit=1200%2C630&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/08\/shaking-hands-handshake-teamwork-staff-ab474225ab7dca72fc74fb44cd17498d-scaled.jpg?fit=1200%2C630&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/blog.amt.org.au\/wp-content\/uploads\/2025\/08\/shaking-hands-handshake-teamwork-staff-ab474225ab7dca72fc74fb44cd17498d-scaled.jpg?fit=1200%2C630&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/posts\/4300","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/comments?post=4300"}],"version-history":[{"count":3,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/posts\/4300\/revisions"}],"predecessor-version":[{"id":4304,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/posts\/4300\/revisions\/4304"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/media\/4302"}],"wp:attachment":[{"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/media?parent=4300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/categories?post=4300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.amt.org.au\/index.php\/wp-json\/wp\/v2\/tags?post=4300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}