GOLD COAST TRAINING COLLEGE
PRIVACY AND PERSONAL INFORMATION POLICY
Collecting Personal Information
Personal Information is defined as information or opinion, whether true or not, about whose identity can be ascertained from the information or opinion. Personal information will not be collected without the individual’s consent. Questions cannot be asked nor information gained just for personal interest, nor can they be gained for a purpose that has not been disclosed to the individual. Only lawful and fair means must be used to collect information. Personal information can only be collected directly from an individual when it is reasonable and practical to do so, and is not unduly inconveniencing the individual, and only when it is necessary for service activities.
At the time the personal information is being collected the individual must be informed of:
- Our contact details;
- How they can access the information;
- Why the organization or Instructor is collecting this information about them
- How the information will be used or disclosed;
- Any law regarding the collection of the information and the consequences of not providing the information.
Even if an individual’s personal information is collected from someone else the individual must still be made aware of all the information stated above.
Use and Disclosure
Information can only be used or disclosed for its original purpose of collection. Information will only be used or disclosed for other or secondary purposes when: The individual has consented to its use for a secondary purpose;
The secondary purpose is related to the primary purpose and the individual would reasonably expect the service or worker to use or disclose the information for that secondary purpose;
Information given indicates potential or intent to harm others or self or commit a criminal act;
Information given results in the disclosure of a child protection issue
The use or disclosure is required by law.
If disclosure of personal information is necessary the person involved must make a written note of such a disclosure.
All information will be recorded without bias, feeling, assumption and undue subjectivity; the office will ensure all information collected is complete and up-to-date. The worker recording the personal information will always be identifiable on the record.
The Gold Coast Training College Training will take reasonable precautions to protect personal information so that it is not misused, lost, accessed by unauthorised people, modified or disclosed. Filing cabinets containing personal and sensitive information need to be locked when not in use, and keys to these filing cabinets held only by relevant authorised employees. Files and information should be filed away when not in use, and should never be left on desks or in areas where other people can read or access it. Computers that store, or can access other computers that store personal information should have password access. Each computer user should have a password.
Offices and rooms with personal and sensitive information should be locked when not in use. Archive areas must be secured. Proper records of where files are archived must be held. All personal and sensitive information should be securely destroyed when no longer needed or statutory times for holding have passed. Personal and sensitive information should never be disposed of by general disposal methods. Reasonable steps must be taken to destroy or de-identify personal information that is no longer needed.
Practices of security will be monitored to ensure compliance with policies and are as follows:
- All personal and identifying information shall be regarded as confidential between the service and the student.
- All students have the right of access to their files.
- If required, Personal Information relating to the student may only be discussed with the Managing Director. The exceptions to this are:
- Where the student consents in writing to the release of information;
- Information has to be given to comply with legal requirements;
- Where a student discloses intent/action to harm others or self.
- The file is and remains the property of The Gold Coast Training College Training should only leave the premises under subpoena by a court.
- All student file entries are to be signed by the source. It is the responsibility of service coordinators to preserve the security of written records.
- The coordinator shall be notified prior to student access to any file.
- An employee in a supervisory position shall be present to assist the student when accessing information in his/her file.
- Written permission from the student must be obtained before information in a file is transmitted to another professional person. This may require consent from a parent or guardian in the case of a person who cannot demonstrate an understanding of the concepts of consent, personal information and privacy.
- Information required for statistical purposes, research and evaluation will not identify individuals and wherever possible students shall be informed for what purpose information is being collected.
- A breach of confidentiality will result in disciplinary action, including suspension or dismissal.
- If an individual does not ask what sort of personal information is held then the service generally should take reasonable steps to let them know what information is held, the purposes for which it is held and how it is/was collected, used, disclosed and stored.
Access and Correction
- The Gold Coast Training College Training will take all reasonable steps to allow people to access their personal information unless the law does not allow it.
- Access will be arranged within five (5) working days of a request.
- Services may deny access if there is, in the considered opinion of the service coordinator and manager jointly, that:
a) Providing access would pose a serious or imminent threat to the life or health of any individual;
b) The privacy of others would be unreasonably affected;
c) The request is shown to be frivolous or vexatious;
d) The personal information relates to existing or anticipated legal proceedings with the individual and the information would not be discoverable through discovery;
e) Providing access would be unlawful or denying access is required and authorised by law;
f) Providing access would be likely to prejudice an investigation of unlawful activity or law enforcement, public revenue protection, prevention and remedying of seriously improper conduct, or preparation or conduct of court or tribunal proceedings, either by or on behalf of an enforcement body.
g) An enforcement body performing a lawful security function requests denial of access to protect national security.
- A service will always explain reason/s for denial of access.
- When information held is found to be incorrect, or shown by an individual to be incorrect, it will then be corrected.
- If an individual requests the correction of information held about them and the service does not believe it is incorrect then it will be explained to the individual why the information will not be corrected. If requested, the service will keep a statement from the individual on file noting their view that the information is not correct.
- Collection of sensitive information will occur with an individual’s consent, unless the collection is; required by law to establish, exercise or defend a legal or equitable claim, or; necessary to prevent or lessen a serious or imminent threat to the life or health of the individual who is the subject of the information.
- Sensitive information includes information about a person’s:
a) Racial or ethnic origin;
b) Political opinions;
c) Membership of a political association;
d) Religious beliefs or affiliations;
e) Philosophical beliefs;
f) Membership of a professional or trade association;
g) Membership of a trade union;
h) Sexual preferences or practices;
i) Criminal record;
j) Health, including information or an opinion about the health or a disability of an individual, an individual’s expressed wishes about the future provision of their health services, a health service provided or to be provided to an individual, other personal information about an individual collected in connection with their donation or intended donation of body parts, organs or body substances;
k) Any other information deemed sensitive by Agency policies.