Privacy Impact analysis The following provides an analysis of the functions and processes of BloodSTAR against the requirements set out in the Australian Privacy Principles (APPs). Australian Privacy Consideration Y/N Response Action required to Gap or compliance Principle address APPs evidence APP 1 open and Will personal Yes Personal and sensitive information will be collected and used Provide Privacy Privacy Statement — transparent for the purposes of assessing patient eligibility against the information or Statement and and Notice will be management of qualifying and review criteria specified in the sensitive information Notice for the made available in Criteria for the personal be handled? information of BloodSTAR. clinical use of intravenous immunoglobulin in Australia. information Consent to the collection, use and usual disclosures of individuals of Compliant personal sensitive information will be sought and recorded in interest to BloodSTAR. BloodSTAR. Consent form will Will reasonable steps A Privacy Statement and Notice will be provided for the Yes Obtain consent be made available information of individuals who become of interest to be taken to tell the from the in BloodSTAR. BloodSTAR. The notice will detail the purpose for the individual about the individuals of The consent form collection of sensitive information, its use, usual disclosures purpose of the interest to will record explicit and consent. The notice will also explain the consequences of collection and usual BloodSTAR, and written or oral disclosures? not providing consent. record their consent and can be consent status in uploaded to the system. BloodSTAR for record keeping purposes. Compliant
Privacy Impact analysis The following provides an analysis of the functions and processes of BloodSTAR against the requirements set out in the Australian Privacy Principles (APPs). Australian Privacy Principle Consideration Y/N Response Action required to address APPs Gap or compliance evidence APP 1 — open and transparent management of personal information Will personal information or sensitive information be handled? Yes Personal and sensitive information will be collected and used for the purposes of assessing patient eligibility against the qualifying and review criteria specified in the Criteria for the clinical use of intravenous immunoglobulin in Australia. Consent to the collection, use and usual disclosures of personal sensitive information will be sought and recorded in BloodSTAR. Provide Privacy Statement and Notice for the information of individuals of interest to BloodSTAR. Obtain consent from the individuals of interest to BloodSTAR, and record their consent status in the system. Privacy Statement and Notice will be made available in BloodSTAR. Compliant Consent form will be made available in BloodSTAR. The consent form will record explicit written or oral consent and can be uploaded to BloodSTAR for record keeping purposes. Compliant Will reasonable steps be taken to tell the individual about the purpose of the collection and usual disclosures? Yes A Privacy Statement and Notice will be provided for the information of individuals who become of interest to BloodSTAR. The notice will detail the purpose for the collection of sensitive information, its use, usual disclosures and consent. The notice will also explain the consequences of not providing consent.
ig-gov-and-system-privacy-impact-assesmt-rprt.DOCX