Privacy Policy
The Kindergarten is required by law to inform clients of their rights concerning personal information.
Collection
Know why you need the information and collect only what you need.
Collect information lawfully and sensitively.
Collect information about the person from the person, where possible and practicable.
Inform the person of why you are collecting it and who else will see it.
Use and Disclosure
Use and disclose information only for the purpose for which it was collected, otherwise, obtain consent or ensure you have the legal authority to use and disclose the information.
This principle applies to information sharing.
Reasonable to aggregate information for predictable secondary purpose (eg planning).
Consent is valid when: The individual has legal capacity to consent; Consent is informed, freely given specific and current.
If an individual cannot consent because of impairment consult their authorised representative or, if none, a person you reasonably believe can make decision in the individual’s best interest.
Data quality
Ensure information is accurate, complete and up-to-date.
Data security and retention
Take reasonable steps to protect information from loss, misuse, unauthorised access, modification and disclosure.
Establish good record management policies and practices.
Develop security measures to protect the integrity, availability and confidentiality of information.
Openness
Document clearly expressed policies on management of information and make these policies available publicly.
Access and correction
Individuals have the right to access their own information.
Where an agency is currently subject to the freedom of information (FOI) act, access will continue to be only via FOI. Where an agency is not subject to FOI, access is a new client right subject privacy requirement.
Advise the individual of the access processes.
Correct information where appropriate.
Unique identifiers
Only use when necessary.
They are not to contain any identifying information.
Do not use another organisation’s unique identifier.
Anonymity
An individual has the right to deal with a service on an anonymous basis provided this is lawful and reasonably practicable.
Trans-border data flows
If an individual’s information is transferred to another state or country, so does privacy protection of that information to the same standard as required in Victoria.
Sensitive information
Ensure that sensitive information, such as race, religion, sexual preference, criminal record and membership of group, is only collected with the individual’s consent.
Making information available to another health service provider
Need to comply with an individual’s regarding the transfer of their information where appropriate.
Transfer or closure of health service provider
Need to comply with an individual’s request regarding the transfer of their information where appropriate.
