Privacy

Aim

To provide the employees of NSW Outback Division of General Practice with guidelines in relation to the collection, use and disclosure of personal information relating to its customers, contractors, suppliers and employees in the performance of its business activities.

Purpose

This policy sets out guidelines to assist the NSW Outback Division of General Practice and its employees comply with the requirements of the Privacy Act 1988 (Cth) ("Privacy Act") and the National Privacy Principles ("NPP") in relation the collection, storage, use and disclosure of records containing individuals' Personal Information.

Scope

This policy applies to the collection, storage, use and disclosure by the NSW Outback Division of General Practice (or a person acting on behalf of the NSW Outback Division of General Practice of records containing individuals' Personal Information in Australia.

This policy does not apply to the collection, storage, use and disclosure of Personal Information where:

  • the Personal Information is an employee record; and
  • the collection, storage, use and/or disclosure of the employee record relates to the NSW Outback Division of General Practice 's employment relationship with the employee.

Responsibilities

All Staff and NSW Outback Division of General Practice Management.

Relevant documents

The Privacy Act 1988 (Cth) ("Privacy Act")
The National Privacy Principles ("NPP")


Policy

Collection of Personal Information

The NSW Outback Division of General Practice is entitled to collect Personal Information by lawful and fair means. Personal Information must not be collected in an unreasonably intrusive way.

A person who collects Personal Information on behalf of the NSW Outback Division of General Practice must comply with this Policy and the requirements of the Privacy Act.

Use and Disclosure of Personal Information

The NSW Outback Division of General Practice will not use or disclose personal information about an individual for a purpose (the secondary purpose) other than the primary purpose of collection unless:

a) both of the following apply:

1.  the secondary purpose is related to the primary purpose of collection and, if the personal information is Sensitive Information, directly related to the primary purpose of collection;

2.  the individual would reasonably expect the NSW Outback Division of General Practice to use or disclose the information for the secondary purpose; or

b) the individual has consented to the use or disclosure; or

c) the NSW Outback Division of General Practice has reason to suspect that unlawful activity has been, is being or may be engaged in, and uses or discloses the Personal Information as a necessary part of its investigation of the matter or in reporting its concerns to relevant persons or authorities; or

d) the use or disclosure is required or authorised by or under law; or

e)  the use or disclosure is not inconsistent with the requirements of the Privacy Act.

Data Quality

  • The NSW Outback Division of General Practice will take reasonable steps to make sure that the Personal Information it collects, uses or discloses is accurate, complete and up-to-date.

Data Security

  • The NSW Outback Division of General Practice will take reasonable steps to protect the Personal Information it holds from misuse and loss and from unauthorised access, modification or disclosure.
  • The NSW Outback Division of General Practice will take reasonable steps to destroy or permanently de-identify
  • Personal Information (such as a job applicant's resume) if it is no longer needed.

Openness

  • This Privacy Policy will be made available to anyone who asks for it.
  • On request by a person, the NSW Outback Division of General Practice will take reasonable steps to let the person know, generally, what sort of Personal Information it holds, for what purposes, and how it collects,
  • Holds, uses and discloses that information.

Access and Correction

  • If the NSW Outback Division of General Practice holds Personal Information about an individual, it will comply with legislative obligations to provide the individual with access to the information on request by the individual.
  • If the NSW Outback Division of General Practice holds Personal Information about an individual and the individual is able to establish that the information is not accurate, complete and up-to-date, the NSW Outback Division of General Practice will take reasonable steps to correct the information so that it is accurate, complete and up-to-date.
  • The NSW Outback Division of General Practice will provide reasons for denial of access or a refusal to correct Personal Information.

Security

The NSW Outback Division of General Practice has implemented generally accepted standards of technology and operational security in order to protect Personal Information from loss, misuse, alteration or destruction.

A person acting on behalf of the NSW Outback Division of General Practice must not transfer Personal Information to an individual without first establishing the identity of the recipient through the use of a personal identifier and/or cross check.

Definitions

Employee Record means a record of Personal Information relating to the employment of a NSW Outback Division of General Practice employee.

Personal Information means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.

Sensitive Information has the meaning set out in the Privacy Act.