Breach of Data, Proper Reporting, and Prevention The Privacy Act 1988 ensures that all personal information pertaining to a patient or any customer must be handled with utmost confidentiality by agencies such as medical care facilities. However, there may.