This article covers the compliance commitments specific to Zanda customers based in Australia: Medicare integration and the audited Australian Privacy Principles (APP) program.
Note: For where your data is physically stored and hosted, including Australia, see Data Location and Separation. For the ISO 27001 program, access controls, and audit evidence that apply to every Zanda customer regardless of region, see Security and Operational Maturity. This article covers what’s specific to Australian accounts on top of those: Medicare integration and the Australian Privacy Principles program.
Key points – compliance for Australian customers
- Direct integration with Medicare
We have a native, direct integration with Medicare and comply with their strict data access and processing residency requirements, ensuring sensitive health data is handled in line with Australian government standards.
- Comprehensive, externally audited Australian Privacy Principles program
We maintain a privacy program specifically aligned with the Australian Privacy Principles (APPs), externally audited to ensure ongoing compliance. This sits alongside the wider ISO 27001 certification, dedicated Data Protection Officer, and staff screening that apply to every Zanda customer; see Security and Operational Maturity for that detail.
- Local customer support
Our Australian-based support team is the default contact for Australian customers.
- Local Australian presence
Zanda maintains a dedicated Australian presence, headquartered in Victoria, with local data handling and Australian-based service delivery wherever feasible. We also work with local providers where practical.
Summary
For Australian customers, compliance at Zanda centers on Medicare integration and the audited Australian Privacy Principles program. For where data is stored and how it’s protected, and for the security program that applies across every region Zanda supports, see Data Location and Separation and Security and Operational Maturity.
For more information, you can also refer to:
Note: If you’re asked about Medicare integration or Australian Privacy Principles compliance by a service purchaser, insurer, or oversight body, feel free to link them to this article to provide a complete, contextual answer. For data location and hosting evidence, use Data Location and Separation instead.
Frequently Asked Questions
Does Zanda comply with the Health Records and Information Privacy Act 2002 (NSW)?
The Zanda privacy program, Australia-wide, including AI features such as BizzyAI, is built around the Australian Privacy Principles (APPs), is ISO 27001 certified, externally audited, and overseen by a dedicated Data Protection Officer (see Security and Operational Maturity for that detail, and Key Points above for the APP-specific program). Zanda does not publish a statement confirming compliance with any individual state or territory health-records law, including the Health Records and Information Privacy Act 2002 (NSW). For a formal, account-specific response, a signed attestation or a completed compliance questionnaire that names this Act, use the Security and Sub-processors pages and contact Zanda Support with the exact wording you need.
Can one Zanda account run locations in two countries, such as New Zealand and Australia, with a different time zone for each?
Set up a separate Zanda account for each country. Each account keeps its own country, business time zone, and locations.
Tip: If you created each account on the same domain (such as my.zandahealth.com, us.zandahealth.com or uk.zandahealth.com, you can then use Linked Zanda Accounts to switch between them from a single login.
A single account has one country and one business time zone, both set in your Business Information, and every location in the account uses them. Locations do not carry a country or a time zone of their own, which is why two countries need two accounts.
If you want to see a second time zone while you work, each user can turn on Additional Time Zone in their own profile. This shows a second set of times on the calendar for that user only and does not change how appointments, availability, or reminders are stored.
⚠️ Do not change the account time zone to match a new location. Doing so shifts all existing appointments and affects every practitioner in the account. See Setting Up a User Time Zone.
Can I use this article as evidence for a non-Australian account?
No. This article covers Medicare integration and Australian Privacy Principles compliance for Australian accounts only. For Canadian, New Zealand, UK, US, or other regional accounts, see Data Location and Separation, or use the Security and Sub-processors pages together with account-specific confirmation from Zanda Support.