Early childhood centres are obligated by law, centre agreements and licensing requirements to comply with the privacy and health records legislation when collecting personal and health information about individuals.
The Health Records Act 2001 (Part 1, 7.1) and the Privacy and Data Protection Act 2014 (Part 1, 6.1) include a clause that overrides the requirements of these Acts if they conflict with other Acts or Regulations already in place. For example, if there is a requirement under the Education and Care Centres National Legislation that is inconsistent with the requirements of the privacy legislation, centres are required to abide by the Education and Care Centres National Legislation.
This policy outlines our ongoing obligations in respect of how we manage Personal Information. The centre has adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act) which governs the way in which we collect, use, disclose, store, secure and dispose of your Personal Information. A copy of the APPs may be obtained from the website of The Office of the Australian Information Commissioner at www.aoic.gov.au
This policy applies to all CSIROCare employees, volunteers, students, parents/guardians who wish to enrol or already have enrolled their child at the centre and all other persons engaging in programs and activities of CSIROCare.
Collection of personal and health information
The centre will only collect the information needed, and for which there is a purpose that is legitimate and related to the centre’s functions, activities and/or obligations. Personal information about individuals, either in relation to themselves or their children enrolled at the centre, will generally be collected via forms filled out by parents/guardians. Personal information about individuals relating to employment will also generally be collected via the completion of forms. Other information may be collected from job applications, face-to-face interviews and telephone calls.
Laws that require us to collect specific information
The Education and Care National Law Act 2010 and the Education and Care National Regulations 2011, Associations Incorporation Reform Act 2012 (Vic) and employment-related laws and agreements require us to collect specific information about individuals from time-to-time.
Use of information
The centre will use personal information collected for the primary purpose of collection. The centre may also use this information for any secondary purposes directly related to the primary purpose of collection, to which the individual has consented, or could reasonably be expected to consent.
Disclosure of personal information, including health information
Personal information may be disclosed in a number of circumstances including:
Disclosure of sensitive information
Sensitive information will be used and disclosed only for the purpose for which it was collected or a directly related secondary purpose, unless the individual agrees otherwise, or where the use or disclosure of this sensitive information is allowed by law.
Storage and security of personal information
In order to protect the personal information from misuse, loss, unauthorised access, modification or disclosure, the Approved Provider and employees will ensure that, in relation to personal information:
Access to information and updating personal information
Under the privacy legislation, an individual has the right to:
There are some exceptions set out in the Privacy and Data Protection Act 2014, where access may be denied in part or in total. Examples of some exemptions are where:
Any queries or complaints about our Privacy and Confidentiality policy can be directed to:
The Centre Director at CSIROCare Clayton
Ph: 8521 2117