Guide
How Employers Verify a Telehealth GP Certificate, AHPRA Check and QR Code Guide
25 Sept 2026
Guide
Do Online Doctors Call Your Boss? Medical Privacy in Australia Explained
No, your GP cannot contact your employer without your consent. Australian privacy law protects your medical information.
5 min readMedically reviewedAustralia-wide
Online doctors do not routinely call your employer about your medical certificate or disclose your health information. Employers may verify whether a certificate is authentic, but this should not reveal your diagnosis or consultation details. Any disclosure of clinical information generally requires your consent unless there is another lawful basis for sharing it.
The Direct Answer: No, Your Doctor Cannot Call Your Boss
Medical confidentiality prevents any GP, whether via telehealth or in person, from contacting your employer about your health condition, diagnosis, or the details of your consultation without your explicit consent. This applies to all AHPRA-registered medical practitioners and is a fundamental ethical and legal obligation.
What the Privacy Act 1988 says
Under the Privacy Act 1988, health information is classified as 'sensitive information'. The Act restricts how sensitive information can be collected, used and disclosed. Disclosing your health information to your employer without your consent would breach the Privacy Act, and the practitioner could face significant professional and legal consequences.
What AHPRA's code of conduct says
AHPRA's Good Medical Practice: A Code of Conduct for Doctors in Australia requires practitioners to maintain confidentiality of patient information. Disclosing information without consent, except in very narrow circumstances such as mandatory reporting of specific notifiable conditions, is a breach of this code and can result in disciplinary action.
What Does Your Medical Certificate Actually Disclose to Your Employer?
An OMC Health medical certificate contains only what is required to demonstrate your entitlement to personal leave. It does not contain your diagnosis, clinical notes, medication details, or any information about what was discussed during the consultation.
| What IS on the certificate | What's NOT on the certificate |
|---|---|
| Your name | Your diagnosis or condition |
| Date of consultation | Clinical notes from the consultation |
| Period of absence covered | Medications prescribed |
| GP's name and AHPRA number | Why were you unfit (beyond generic 'unfit for work') |
| Practice name and details | Any personal health history |
| QR verification code | Treatment plan or referrals |
Can Your Employer Ask the GP About Your Condition?
No. An employer cannot contact your GP to ask about your diagnosis or the details of your consultation. Your GP cannot disclose this information without your consent. If an employer attempts to contact OMC Health regarding a patient's health information, OMC Health will decline to provide it in accordance with the Privacy Act 1988.
Employer verification vs medical inquiry
Employers can verify a certificate is genuine by scanning the QR code or using the OMC Health verification portal to confirm the certificate is real, and the GP is AHPRA-registered. This is different from asking about your medical condition. Verification of authenticity is permitted; inquiry into your health details is not.
When Can Health Information Be Disclosed Without Consent?
There are very narrow circumstances in which health information can be disclosed without patient consent. These include mandatory reporting obligations for specific notifiable diseases (such as certain infectious diseases) under public health legislation, when required by a court order, and when there is a serious and imminent threat to someone's life. Day-to-day employer queries about why you are off sick do not fall into any of these categories.
Your Rights if Your Privacy Is Breached
If a GP or health service discloses your health information to your employer without consent, you can make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, and/or to AHPRA at ahpra.gov.au. You may also have civil remedies available. Keep records of any communications that suggest a privacy breach.
Get Started, Book a Consultation Today
If you need a medical certificate, OMC Health connects you with an AHPRA-registered GP for a real-time phone consultation. If the GP determines a certificate is clinically appropriate, it is issued and emailed the same day. From 9.99. Full refund if not approved.
Frequently asked questions
No. GPs, whether via telehealth or in person, cannot contact your employer about your health without your explicit consent. This is required by Australian privacy law (Privacy Act 1988) and AHPRA's code of conduct for medical practitioners.
No. Your diagnosis and the details of your consultation are confidential. Your employer is not entitled to know your specific medical condition. A certificate only confirms you were assessed and are unfit for work for the covered period.
An OMC Health certificate tells your employer your name, the consultation date, the period of absence covered, and the GP's name and AHPRA registration number. It does not include your diagnosis, clinical notes, or any details of what was discussed.
Employers can use the QR code or certificate ID to verify the certificate is genuine through OMC Health's verification portal. They cannot ask OMC Health for details about your health condition or consultation, this information is protected under the Privacy Act 1988.
Contact your GP to confirm they will not disclose information without your consent. If a disclosure has already occurred, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au and to AHPRA at ahpra.gov.au.
