purpose of the use or to system Privacy Statement When requested, BloodSTAR users must provide information to patients about information stored about them, and have disclosure? functions to and Notice will the opportunity to identify and correct errors. correct records include this when errors are provision. detected. Patients will be advised through Compliant the Privacy Statement and Notice of their right to access correct details about them. Is the agency taking Controls must be All users APP 11 Security Yes BloodSTAR, its management and operation will be tightly – controlled. NBA systems have one of the highest levels of reasonable steps to in place to established in the security available in Australia, housed in a highly secure data ensure that the authenticate users system will be centre in Canberra. Stringent security protocols will be built personal information using unique user authenticated into the system to control access to personal information. All it collects is protected names and before access is reasonable steps will be taken to protect personal from misuse, passwords for granted. information from misuse, interference and loss, and from interference, loss and roles appropriate unauthorised access, modification or disclosure. Personal Compliant and sensitive information will only be stored on a password from unauthorised to roles protected ICT system which complies with the Australian access, modification supporting patient Government Protective Security Policy Framework. This or disclosure? care. includes ensuring that information is only accessed by authorised users that require access to undertake their official functions and roles.
purpose of the use or disclosure? When requested, BloodSTAR users must provide information to patients about information stored about them, and have the opportunity to identify and correct errors. to system functions to correct records when errors are detected. Patients will be advised through the Privacy Statement and Notice of their right to access correct details about them. Privacy Statement and Notice will include this provision. Compliant APP 11 – Security Is the agency taking reasonable steps to ensure that the personal information it collects is protected from misuse, interference, loss and from unauthorised access, modification or disclosure? Yes BloodSTAR, its management and operation will be tightly controlled. NBA systems have one of the highest levels of security available in Australia, housed in a highly secure data centre in Canberra. Stringent security protocols will be built into the system to control access to personal information. All reasonable steps will be taken to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Personal and sensitive information will only be stored on a password protected ICT system which complies with the Australian Government Protective Security Policy Framework. This includes ensuring that information is only accessed by authorised users that require access to undertake their official functions and roles. Controls must be in place to authenticate users using unique user names and passwords for roles appropriate to roles supporting patient care. All users established in the system will be authenticated before access is granted. Compliant
ig-gov-and-system-privacy-impact-assesmt-rprt.DOCX