Often, however, there\u2019s a major sticking point once we know about genetic risk in the proband: telling the family. Some patients are uncomfortable making contact. Others may be estranged, uncertain of how to have the conversation, or simply overwhelmed. The rate of cascade testing of at-risk relatives is estimated to be less than 50%<\/a>. As clinicians, we might be asked: \u201cCan you tell them for me?\u201d.<\/p>\n Research tells us that when clinicians do notify relatives directly, cascade testing uptake generally increases<\/a>. In a 2005 study done in South Australia<\/a> to test this, the directly notified cohort had double the cascade testing uptake of the \u201cusual practice\u201d cohort. Despite this, many Australian clinicians have been hesitant to act, fearing it might breach privacy laws. Thanks to updated guidance from the Office of the Australian Information Commissioner<\/a> (OAIC), however, we now have clear, national guidance that supports clinicians\u2019 discretion to notify at-risk relatives directly, without breaching the Privacy Act 1988 (Cth).<\/p>\n What the updated guidance means<\/p>\n Over the past two decades, Australian law has evolved to allow clinicians to notify genetic relatives without patient consent in specific circumstances. These are laid out in the National Health and Medical Research Council s95AA guidelines<\/a>. But in the situation where patients do consent, even though it seems obvious that this would be allowed, clinicians have reported uncertainty<\/a>. Some are worried that using a relative\u2019s contact details (even with consent from the patient) could breach the relative\u2019s privacy. Others are confused about how the Privacy Act applies.<\/p>\n To address this, I sought clarification in 2024 from the OAIC \u2014 Australia\u2019s national privacy regulator. Following discussions with the OAIC, it updated Chapter 8 of its Guide to health privacy<\/a> in 2025 to clarify the position. The revised guidance confirms that clinicians can collect a relative\u2019s contact details from a patient and use those details to notify the relative of their genetic risk, where the patient consents and the risk represents a serious threat to life, health or safety. Importantly, the guidance states that in these circumstances, collecting a relative\u2019s contact details without their prior consent is permitted under the law, because it would generally be impracticable to obtain it otherwise.<\/p>\n This update confirms what I had previously argued<\/a>: if you have consent from your patient, and the risk is serious and actionable, you can contact their relatives directly about possible genetic risk. The OAIC has even created a simple flowchart to support clinical decision making.<\/p>\n Do patients and the public support this?<\/p>\n It\u2019s not just clinicians calling for clarity, patients and the public overwhelmingly support this too. We\u2019ve surveyed hundreds of patients<\/a> and over 1000 members of the general public<\/a>. The majority of people said they wanted to be told if they were at risk of a serious genetic condition. Although some said they preferred to receive notification from their family members, many even preferred to be contacted by a health professional about their risk. We asked specifically if people had privacy concerns about this, and they were minimal.<\/p>\n The idea of a \u201cright not to know\u201d is often raised in discussions about genetic risk notification, and it\u2019s important to consider. But in practice, there is no difference in this sense between clinician-led contact and patient-delivered \u201cfamily letters,\u201d which are the current standard. In both cases, the patient decides who should be informed. Importantly, this discretion only applies where the risk is serious, and the health threat can be lessened or prevented, making the argument for public interest in disclosure even stronger. Further, it is difficult to support true autonomy (making an informed choice) if at-risk people are not even told about their risk and given the opportunity to make that choice.<\/p>\n Where to next?<\/p>\n Now that the national privacy regulator has confirmed that direct notification is legal under the Commonwealth Privacy Act, clinicians need tools and support to know how to put this into practice. National clinical guidelines would help with this, particularly around when the \u201cserious threat\u201d threshold is met, and how to document consent and communication. We also need consistent interpretation across jurisdictions. Although the OAIC\u2019s guidance applies to clinicians working in the private sector (who are subject to the Commonwealth Privacy Act provisions), clinicians working in the public sector are also governed by state and territory regulations. My earlier legal review<\/a> argues that the same principles that have been confirmed by the OAIC are consistent across all jurisdictions, but state and territory level clarification would provide reassurance to clinicians.<\/p>\n Finally, clinicians must be able to exercise their discretion without fearing that it will create a rod for their backs. The OAIC\u2019s guidance makes it clear this is a discretion, not a duty. The current law doesn\u2019t require clinicians to contact every relative of a patient, but if a patient does want us to help with contacting their relatives, we now know we can say yes.<\/p>\n This update is a win for patients, their families, and the clinicians who support them. It brings clarity to a long-questioned legal position and paves the way for more effective cascade testing, and, ultimately, the use of genomics for better disease prevention.<\/p>\n Dr Jane Tiller is a lawyer, genetic counsellor and public health researcher. She is Ethical, Legal and Social Adviser in Public Health Genomics at Monash University.<\/p>\n The statements or opinions expressed in this article reflect the views of the authors and do not necessarily represent the official policy of the AMA, the\u00a0MJA\u00a0or\u00a0InSight+\u00a0unless so stated.\u00a0<\/p>\n Subscribe to the free\u00a0InSight+\u00a0weekly newsletter\u00a0here<\/a>. It is available to all readers, not just registered medical practitioners.\u00a0<\/p>\n![\"The](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2025\/07\/shutterstock_2389637833-1024x683.jpg\")
Many Australian clinicians have been hesitant to notify at-risk relatives, fearing it might breach privacy laws (fizkes\/Shutterstock).<\/p>\n![\"The](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2025\/07\/Figure-1-Disclosing-genetic-information-guidance-flowchart-2-472x1024.png\")
<\/p>\n