_edited.png)
Pre-Exercise Screening in Australia: Are Your Fitness Health Forms and Disclaimers Legal?
Most fitness businesses collect some form of health history before a new client starts training, often through a PAR-Q style questionnaire. What a lot of business owners don’t realise is that the moment they collect that information, they may be taking on legal obligations that go well beyond having a form on file, obligations that can apply even to a very small, single-location studio.
Pre Exercise Screening Australia: Is a PAR-Q Legally Required?
There’s generally no single Australian law that mandates a PAR-Q or health questionnaire before a client starts training. It has become standard industry practice because it helps a business identify clients who may need medical clearance or a modified program, which is directly relevant to whether the business can later show it exercised reasonable care and skill, a point we cover in more detail in Are Your Client Waivers Actually Legal?, including a real case where a gym’s failure to manage a known, foreseeable risk mattered far more than the paperwork it had on file.
Fitness Health Screening and Privacy Law in Australia
This is the part that catches a lot of small fitness businesses off guard. Under the Privacy Act 1988 (Cth), businesses with an annual turnover of 3 million dollars or less are generally exempt from most privacy obligations. But there’s an important exception: a business that provides a health service and holds health information is generally covered by the Privacy Act regardless of its turnover.
A PAR-Q form, by its nature, collects health information. The OAIC’s own guidance for sporting clubs confirms this directly: a club with programs or facilities to help members manage injuries or improve their fitness and health is likely providing a “health service,” and information collected about injuries, fitness, or health is likely to be “health information” under the Privacy Act, regardless of the size of the business collecting it.
That means a small, single-location personal training studio can find itself subject to the same core privacy obligations as a much larger business, purely because of what’s on that intake form.
Australian Privacy Principles for Fitness Businesses
Once a fitness business is covered by the Privacy Act because it holds health information, a handful of the Australian Privacy Principles tend to matter most in practice. Information should generally only be collected where it’s reasonably necessary for the business’s functions, such as designing a safe program.
Clients should generally be told, at or before collection, what’s being collected and why. Health information should generally only be used or disclosed for the purpose it was collected for, not repurposed for something like marketing without separate consent.
And the business should generally take reasonable steps to keep that information secure, which covers everything from physical storage of paper forms to who has login access to a digital client management system. The OAIC’s broader guidance on rights and responsibilities under the Privacy Act sets out what this generally involves in more detail.
What Health Information Privacy Means in Practice
If your business collects PAR-Q or health history information, you’re likely to need a compliant Privacy Policy that explains what health information you collect, why, how it’s stored, who can access it, and how a client can request access to or correction of their own information.
This is a similar obligation to the one we cover more generally in Is Your Website Legally Compliant?, but the health information element raises the stakes, since health information is treated as sensitive information under the Privacy Act and generally attracts a higher standard of care than ordinary personal information.
Fitness Disclaimers, Consent Forms and Waivers: What’s the Difference?
These three documents do different jobs, and conflating them is a common issue we see.
A disclaimer typically states the limits of what the business is representing, for example that general fitness advice isn’t a substitute for individualised medical advice.
A consent typically confirms the client agrees to participate in a specific activity or program, often after being told about relevant risks, and, where health information is involved, typically also confirms the client understands how that information will be collected and used.
A waiver typically attempts to exclude or limit liability for harm that might occur, within the boundaries the law actually allows, as covered in Are Your Client Waivers Actually Legal?.
A single generic “sign here” form that tries to do all three jobs at once is less likely to do any of them particularly well, and is also less likely to satisfy the specific “told at or before collection” requirement that applies to health information under the Privacy Act.
Example: Health Information Stored in an Unlocked Filing Cabinet
A yoga studio uses a one-page intake form asking about injuries, medications, and pregnancy status, then stores completed forms in an unlocked filing cabinet accessible to all staff and casual instructors, including instructors who have never taught the client in question.
Even if the form itself is well drafted, the studio is likely to have obligations under the Privacy Act around how that health information is stored and who can access it, simply because it collected health information as part of a health-adjacent service.
A breach of those storage obligations is a separate legal issue from whatever the form itself says, and is the kind of gap that tends to only surface after a complaint or a data incident, rather than being obvious day to day.
Can a Fitness Business Be an Unregistered Health Practitioner?
This is a distinct issue from privacy, and worth flagging because it’s easy to miss. Most states and territories have now introduced a Code of Conduct for health care workers who aren’t registered under the National Registration and Accreditation Scheme, the scheme that covers professions like physiotherapists, psychologists, and osteopaths through AHPRA.
These codes are generally aimed at practitioners like naturopaths, massage therapists, counsellors, and similar allied and alternative health providers, and are administered by a different complaints body in each jurisdiction.
In Western Australia, the Code of Conduct for certain health care workers took effect on 27 July 2023 and is administered by the Health and Disability Services Complaints Office (HaDSCO). Equivalent schemes exist in New South Wales, Queensland, South Australia, Victoria, the ACT, and elsewhere.
Personal trainers and general fitness instructors aren’t among the examples WA’s own guidance lists (which include counsellors, dieticians, massage therapists, naturopaths, and similar roles), so a typical gym-floor personal training service is unlikely to fall squarely within these codes.
Where this is genuinely worth checking is if your business, or a practitioner within it, markets services in terms that sound like treating a health condition rather than general fitness, for example a “corrective exercise” or “injury rehabilitation” program, or if you employ an accredited exercise physiologist, since exercise physiology is not one of the professions registered under the National Registration and Accreditation Scheme despite often being delivered as a clinical, Medicare-linked service.
The test each code applies is broadly whether the business is providing a “health service,” not what the role is called, so it’s the substance of what’s being offered and how it’s marketed that tends to matter, rather than the job title on the door.
Where a code like this does apply, the obligations are broadly similar across jurisdictions and tend to include obtaining proper consent, not making claims to cure serious illness, not misinforming clients about their qualifications or the nature of a service, complying with privacy laws, keeping appropriate records, holding appropriate insurance, and, in WA specifically, displaying the Code where clients can see it.
Clinical Pilates, Yoga and Health Practitioner Rules
This is a genuinely common scenario in the Pilates and yoga space specifically, more so than in a standard gym, so it’s worth addressing directly. Many Pilates studios engage instructors who are also registered physiotherapists, and market some or all of their classes as “clinical Pilates,” “rehab Pilates,” or similar, often alongside general mat or reformer classes taught by instructors who aren’t health practitioners at all.
This creates two separate compliance questions rather than one. The first is the health screening and disclaimer question covered in this blog. The second, more serious question is whether the business’s marketing accurately reflects who is actually delivering each type of class, and what they’re qualified to deliver.
Protected Titles and Physiotherapy Advertising in Australia
Titles like “physiotherapist” and “physiotherapy” are protected under the Health Practitioner Regulation National Law, which Western Australia has adopted through the Health Practitioner Regulation National Law (WA) Act 2010.
Under section 116 of the National Law, it’s generally a criminal offence to knowingly or recklessly hold out an unregistered person as being registered, or as qualified to practise, in a health profession, and AHPRA’s guidance on titles and advertising indicates this “holding out” offence can extend to the business or employer, not just the individual, where a studio describes or markets someone as a physiotherapist, or as delivering physiotherapy treatment, when they aren’t actually registered to do so.
Penalties can generally reach up to 120,000 dollars for a body corporate and up to 60,000 dollars or three years imprisonment for an individual per offence, and AHPRA has reported that a majority of its recent criminal prosecutions involve exactly this kind of title protection issue.
To be clear, this isn’t a reason to avoid the term “clinical Pilates” altogether. It’s a reason to be precise about what it means in your business specifically.
Where a session is genuinely delivered by a registered physiotherapist as an extension of physiotherapy treatment, that session is likely to sit under the physiotherapist’s own separate AHPRA registration, code of conduct, insurance requirements, and consent standards, on top of, not instead of, your studio’s general fitness business compliance.
Where “clinical” or “rehab” framed classes are actually delivered by an instructor who isn’t a registered physiotherapist, the marketing needs to be genuinely accurate about what that instructor is, and isn’t, qualified to do, both to avoid a misleading conduct issue under the Australian Consumer Law and to avoid inadvertently holding that instructor out as something they’re not.
Pre Exercise Screening Australia FAQs
Is pre-exercise screening legally required in Australia?
There’s generally no single Australian law that requires every fitness business to use a PAR-Q or health screening questionnaire before a client begins training. Pre-exercise screening is nevertheless widely used as an industry practice to identify clients who may need medical clearance, additional assessment or a modified exercise program.
Is a PAR-Q form mandatory for personal trainers in Australia?
There’s generally no single Australian law making a PAR-Q form mandatory for every personal trainer. However, collecting relevant health information can assist a trainer or fitness business in identifying risks and determining whether additional medical clearance or changes to programming may be appropriate.
What is pre-exercise screening in Australia?
Pre-exercise screening is the process of collecting relevant information about a client’s health, injuries and other factors before exercise begins so that potential risks can be identified and, where appropriate, further clearance or modifications can be considered.
Does the Privacy Act apply to small gyms and personal trainers?
It can. Although businesses with annual turnover of 3 million dollars or less are generally exempt from many Privacy Act obligations, an important exception can apply where a business provides a health service and holds health information. This means the type of information collected and the services provided can matter even for a small fitness business.
Is health information collected by a gym sensitive information?
Health information is treated as sensitive information under the Privacy Act. Information collected through a PAR-Q or health history form can therefore carry additional privacy obligations concerning collection, use, disclosure and security.
Does a fitness business need a Privacy Policy?
A fitness business that collects health information may need a compliant Privacy Policy explaining what information it collects, why it is collected, how it is stored, who can access it and how clients can request access to or correction of their information.
What is the difference between a fitness disclaimer, consent form and waiver?
A disclaimer generally explains the limits of what a business is representing. Consent generally confirms that a client agrees to participate or agrees to the collection and use of information after relevant information has been provided. A waiver generally attempts to exclude or limit liability within the boundaries permitted by law.
Can fitness businesses use health information for marketing?
Health information should generally only be used or disclosed for the purpose for which it was collected. Repurposing health information for marketing can raise separate consent and privacy issues.
Can a personal trainer provide injury rehabilitation services?
This can depend on what the trainer is actually providing and how the service is described. Where a fitness business markets services as treating or rehabilitating a health condition, additional questions can arise about health service regulation, qualifications and whether the marketing accurately reflects what the practitioner is qualified to provide.
Can a Pilates studio advertise “clinical Pilates”?
Potentially, but the terminology needs to accurately reflect the service being offered and the qualifications of the practitioner delivering it. A session delivered by a registered physiotherapist may sit within a different regulatory framework from a general Pilates class delivered by a fitness instructor.
Can an unregistered instructor call themselves a physiotherapist?
Titles such as “physiotherapist” and “physiotherapy” are protected under the Health Practitioner Regulation National Law. Businesses should not describe or market an unregistered person in a way that represents them as registered or qualified to practise in a protected health profession.
What privacy obligations apply to fitness businesses storing PAR-Q forms?
A business holding health information should generally take reasonable steps to keep that information secure and limit access to people who genuinely need it. This applies to both physical records, such as paper forms, and digital systems containing client health information.
This blog is intended for general information purposes only and does not constitute legal advice. The content is based on Australian law and may not be current at the time you read it. Legal requirements may vary depending on your circumstances. Always seek independent legal advice tailored to your specific situation before acting on any information provided.
Comments