QLD Health Patient Consent

Detects completed Queensland patient consent records - informed, treatment, surgical and anaesthetic consent forms, advance health directives and enduring power of attorney (health) documents - when the consent phrase sits with populated patient identifiers and consent form fields.

Type

regex

Confidence

medium

Confidence justification

Medium: enforce tiers need a populated patient identifier; 85 also needs a consent field and clinical-consent evidence. Consent policies, website cookie notices and training material stay at 65.

Jurisdictions

au

Regulations

Privacy Act 1988 (Cth), Information Privacy Act 2009 (Qld), NDB Scheme (Cth), Hospital and Health Boards Act 2011 (Qld), Powers of Attorney Act 1998 (Qld), Guardianship and Administration Act 2000 (Qld)

Frameworks

ISO 27001, ISO 27701, SOC 2

Data categories

phi, health, legal, government

Scope

narrow

Risk rating

8

Platform compatibility

Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?i)\b(?:(?:patient|treatment|surgical|anaesthetic)\s+consent(?:\s+form)?|informed\s+consent|consent\s+to\s+treatment|advance\s+health\s+directive|EPOA(?:\s+health)?)\b

Should match

• Patient consent form - Gold Coast Hospital and Health Service Patient name: Avery Teston URN: 004418273 DOB: 04/02/1991 Proposed procedure: Laparoscopic cholecystectomy Anaesthetic: General Consenting doctor: Dr Jordan Staffson Material risks and alternative treatment discussed; patient has decision-making capacity. — Populated surgical consent with patient, consent fields and clinical-consent evidence (85)
• Informed consent recorded in the chart Patient: Casey Rourke MRN: 5540921 — Informed consent note with labelled patient identifiers only (75)
• Advance health directive - Metro North Hospital and Health Service Patient name: Morgan Testa URN: 117320945 Substitute decision-maker: Riley Testa Relationship to patient: Sibling Date signed: 12/08/2026 Witness: Dr Sam Wexley Directions: accepts blood transfusion; declines CPR if decision-making capacity is permanently lost. — Populated advance health directive with substitute decision-maker, witness and capacity evidence (85)

Should not match

• Cookie consent banner on website — Non-match 1
• Consent to receive marketing emails — Non-match 2
• Patient election form training session agenda — Training reference must remain discovery-only
• Policy guidance: this procedure explains how informed consent forms are collected, stored and shared, who may access them and how long they are kept. Staff should read the privacy section before completing any form. It contains no details about any individual. — Policy/guidance text naming the topic without any populated record (65 discovery at most)
• Patient consent form Patient name: ____________________ URN: ____________________ Proposed procedure: ____________________ Consenting doctor: ____________________ Signature: ____________ Date: __/__/____ — Blank form with unpopulated labelled fields (placeholder guard keeps it below 75)
• Training: the informed consent module covers material risks, interpreters and substitute decision-makers, with worked scenarios for nursing staff. — News/training prose about the topic without a populated record (65 discovery at most)

Known false positives

• Digital consent in non-health contexts. Mitigation: Require clinical consent terms like patient, surgical, or advance directive.

References

• Queensland Government - Power of attorney and advance health directive forms
• Hospital and Health Boards Act 2011 (Qld) - Part 7 confidentiality of patient information
• Information Privacy Act 2009 (Qld)