Staff group chats and AI leakage: what a WhatsApp handover thread gives away in ChatGPT or Claude.

Shift handover often happens in a group chat on personal phones, because it is quick and everyone is in it. The thread becomes a record, and a manager or a nurse will copy it into ChatGPT or Claude to summarise a week, work out who said what or draft an incident note. A few days of messages hold resident names and rooms, injuries, photos, a dying resident, a colleague accused of something, a shared login and a police matter that the manager asked staff not to discuss. This page marks every item in a realistic handover thread and shows what the Aged Care Act 2024, the Code of Conduct and the Privacy Act bear on, and how the same thread is summarised on Ermos.

The staff group chat handover

Used by the nursing and care team to hand over between shifts, mostly on personal phones, and kept on those phones afterwards.

An invented thread. Mobile numbers are placeholders. Hover or tap any highlighted line for the analysis; the full list is below.

What leaves the service

1. 1
   The members

   Eleven workers, including an agency worker, each with a personal mobile number. Personal information, and everyone who could be asked how the thread came to be shared. Privacy Act guide.

2. 2
   An allegation against a named colleague

   A worker is named as having grabbed a resident. Unreasonable use of force is a reportable incident under section 16 of the Aged Care Act 2024, and the Commission’s guidance sets 24 hours for Priority 1. The line is an eyewitness account and is not a finding, and it is the resident’s protected information under section 21. Privacy Act guide.

3. 3
   A photo of a resident’s injuries

   Photographs are personal information and, here, health information. A photo can carry the date and time it was taken, and a copy on a staff member’s phone is outside the service’s systems, as the message itself acknowledges. Patient data guide.

4. 4
   A resident’s behaviour, a fall and an anticoagulant

   Two nights about the same woman: that she hit out at personal care, calling for her late husband, and that she fell and cut her eye and is on a blood thinner. Health information that section 168 of the Act ties to delivering her care, and an instruction about who is to be called. Patient data guide.

5. 5
   A dying resident and her family

   That a named woman is very weak, who is with her and that a priest has been. Health information and religion, which is on the Privacy Act’s closed list of sensitive information. Patient data guide.

6. 6
   A resident who wanders, and his wife’s instruction

   A resident in another resident’s room, and what his wife has said about which relative may be told. Two residents’ information and a family confidence. Privacy Act guide.

7. 7
   A colleague’s distress after a medication error

   A nurse’s welfare and the manager’s view of her responsibility. Personal information about a named worker in a message that was meant to be kind, and an internal matter that belongs in the incident system. Privacy Act guide.

8. 8
   A shared login

   An agency worker asks to use another nurse’s login, and is told how. APP 11 asks an organisation to take reasonable steps to protect personal information it holds from misuse, interference, loss and unauthorised access, and a shared login means a record cannot be attributed to the person who made it. Privacy Act guide.

9. 9
   The manager’s instruction about an open matter

   That police and the Commission have been told and that staff must not speak to the agency, the accused or the family. A note about an open police matter and the service’s own response. Privacy Act guide.

10. 10
    The lift

    A broken lift and a maintenance day. No person and no resident is in it, so it is safe to share.

What happens in Frontier Models (ChatGPT, Claude)

• The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
• On consumer tiers, prompts can be retained and used to train future models.
• The provider’s staff and systems can reach the content under the provider’s own policies.
• Once sent, the service no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Part of AI data leakage in aged care providers.

Common questions