Medical Centre Security Systems Brisbane
What Queensland law requires a practice to secure, and the narrow part equipment plays
since
Monitoring
After the last patient leaves, a Brisbane practice still holds what the law names. Schedule 8 medicines sit in a store the medicines regulation calls an S8 safe, established under a departmental standard by a named person. Patient records are sensitive information, and a health service provider is covered by the Privacy Act whatever its turnover. Staff come back to an empty building. Each duty sits with the practice, not a supplier. Access Alarms installs ordinary commercial security – alarms, CCTV, access control and monitoring – from an Eagle Farm office trading since 2006. Book a technician.
Take an inventory of your own practice at 7pm, once the last patient has gone and the door is locked. There are Schedule 8 medicines in a store the Medicines and Poisons (Medicines) Regulation 2021 calls an S8 safe. There is a medicine register that has to be kept with it, or as close as practicable to it, and reconciled monthly. There are patient files, a server or backup drive, and a scanner queue. There may also be one person still in the building alone. Each of those things carries a duty, every one of them sits with the practice, and equipment plays a narrow part in only some of them.
Why Medical Centre Security Systems Matter in Brisbane
Nothing on that list is unusual, and that is the point.
Since 2006
Why Brisbane Businesses Choose Access Alarms
Access Alarms opened in December 2006 and works from an office at 2/789 Kingsford Smith Drive, Eagle Farm - a Brisbane address a practice manager can drive to. It installs and maintains alarms, CCTV, access control and intercoms, services and upgrades existing systems, and offers 24/7 alarm monitoring through a monitoring centre. Where a business has taken over premises with another company's alarm already in them, it states that in most cases it can service, repair and upgrade that system rather than replace it. That is general commercial trading history and a general commercial service line, and Access Alarms claims nothing more of it. The business describes itself as licensed and insured but publishes no licence number. Ask for the number and the licence class, and check them on the Queensland Office of Fair Trading register yourself.
Before you engage anyone, ask for a Queensland security provider licence number and check it - Access Alarms describes itself as licensed and insured but publishes no number, so ask it of them too. Then take four questions to your own premises, before your next monthly reconciliation rather than after it. Can you name, in writing, the person appointed to establish and maintain your S8 safe and the person appointed to manage it? Can you list everyone who currently holds access to it? Is the medicine register kept with the safe, or as close as practicable to it, as section 206 requires? Is there a fixed way for someone working alone to call for help? Where an answer points to a door, a detector or a record, Access Alarms installs ordinary commercial security from an Eagle Farm office. Where it points to the safe, the register or a privacy decision, it points to Queensland Health, the OAIC and your own adviser.
Common Security Problems We Solve
Nobody can produce a current list of who holds access to the S8 safe
Why it happens
Access is something the regulation lets the establisher give to a person - a key, a swipe card, a code, a password or a biometric enrolment. Whether your own practice can produce a current list of who holds each one is a question only the practice can answer.
Why it matters
The regulation permits access to be given only to an authorised user, and lists keys, swipe cards, codes, passwords and biometric entries as the ways access is given. It also requires the user to keep that device or information secure and to lock the safe when they have finished. A list that has drifted no longer matches the regulation's own condition.
What we do
This is a records exercise before it is an equipment one, and it costs nothing: write down every person who can currently open the safe, check each is still an authorised user, and decide what happens to access when someone leaves. The equipment question is the adjacent one - who can reach the room the safe is in, and whether anyone would know if they did. Access Alarms installs access control and alarm detection at commercial premises; it does not touch the safe.
The medicine store has ended up on a route patients walk unaccompanied
Why it happens
Section 199 turns on the establisher's own reasonable belief about where a medicine store is put, which is a judgement about a particular place at a particular time. Whether it still holds in your own premises is for the practice to revisit.
Why it matters
Section 199 requires the medicine store establisher to put each store where they reasonably believe a member of the public could not access it without being seen by a worker, with a stricter out-of-sight rule again where pseudoephedrine or therapeutic nicotine are held. The section turns on the establisher's own reasonable belief, so the judgement - and the job of revisiting it after every change - belongs to the practice.
What we do
Walk the route a patient can take on their own and ask whether any medicine store on it can be reached unobserved. Where the answer is uncomfortable, the fix is often a controlled door rather than a camera, and Access Alarms installs access control and intercoms at commercial premises. Whether a particular layout satisfies section 199 is not a question for an installer to answer.
The record store, the server and the backup drive sit behind a door anyone in the building can open
Why it happens
That is a question about your own building rather than about any rule: walk to where the records, the server and the backup drive actually sit, and note which doors on the way anyone in the building can open.
Why it matters
Health information is sensitive information, which the OAIC says is generally afforded a higher level of privacy protection than other personal information. Health service providers were also the most commonly affected sector under the Notifiable Data Breaches scheme in 2025, at 225 of 1,205 notifications, and across all sectors the OAIC attributed the majority of the year's notifications - 716 of them - to malicious or criminal activity. No installation addresses that total. What it can bear on is narrower: on the OAIC's own description of the scheme, a data breach happens when personal information is accessed or disclosed without authorisation or is lost, which a stolen server, laptop or box of files can be as surely as a leaked password.
What we do
Treat the record store and the comms cupboard as their own doors rather than as part of the back office, and decide who can open them after hours. Access control and alarm detection are ordinary commercial equipment and Access Alarms installs both. Whether your practice is covered, and what the Act requires of it, is a question for the OAIC or your own adviser.
A clinician finishes notes alone at 7pm and nobody counts that as isolated work
Why it happens
'Remote or isolated' is a defined term in the Work Health and Safety Regulation rather than a description of distance.
Why it matters
The Work Health and Safety Regulation 2011 (Qld) defines remote or isolated work as work isolated from the assistance of other persons because of location, time or the nature of the work, and requires a system of work that includes effective communication with the worker. Section 19 of the WHS Act puts the duty on the practice as the person conducting a business or undertaking, and section 19(5) catches a self-employed practitioner in respect of their own safety. The RACGP Standards for general practices ask, under Criterion C3.5, whether a duress alarm is required, particularly for staff working outside normal hours.
What we do
The RACGP's own practice guidance recommends duress alarms in consulting rooms and at reception, alongside a layout patients must pass reception to get through, locks on medication storage and strong lighting. Access Alarms installs and maintains commercial alarm systems and offers 24/7 monitoring through a monitoring centre. Ask any installer to quote a duress point specifically and to show what happens when it is pressed. The system of work around it - who responds, and when - stays with the practice, and Workplace Health and Safety Queensland is where that question belongs.
What We Design, Install and Support
Commercial Alarm Systems
Intruder alarm systems installed, serviced and upgraded for commercial premises.
Commercial alarmsCommercial CCTV
Camera systems installed and maintained for commercial premises, including analogue-to-digital upgrades.
Commercial CCTVAccess Control
Electronic door control for commercial premises, so entry to individual rooms and areas can be restricted and logged.
Access controlServicing, Upgrades and System Takeover
Servicing, repair and upgrade of existing systems, including systems originally installed by another company.
Security system servicingCommercial security specialist since 2006
We design, install, monitor and service commercial security across Brisbane, and we take over systems other companies installed.
Need a security assessment for your commercial property? We'll recommend the right system.
Frequently Asked Questions
Does Access Alarms supply or install S8 drug safes?
Does the Privacy Act apply to a small practice?
Can we put a camera in a consulting room or treatment area?
Drugs are missing after a break-in. What does Queensland require of us?
Will a security system make our practice compliant?
Explore More Commercial Security
All commercial securityService areas
Sources
- Medicines and Poisons (Medicines) Regulation 2021 (Qld) - chapter 8, secure storage systems, medicine registers and reporting
- OAIC - APP Guidelines Chapter B: Key concepts (small business operator exception for health service providers; sensitive information)
- OAIC - Notifiable Data Breaches, 2025 calendar year figures (1,205 notifications; health service providers 225)
- Work Health and Safety Regulation 2011 (Qld) - section 48, remote or isolated work
- RACGP - General practice business toolkit, Module 2: Safety and security (duress alarms, practice layout, medication storage, CCTV with signage)
Protect Your Business
Get a security assessment for your commercial property. Free quote, no obligation.