APP9 Adoption, use and Do not adopt, use or disclose government This APP applies to non-government N/A – disclosure of government related identifiers. entities only. related identifier Integrity of personal information Quality of personal Take such steps (if any) as are reasonable in The Commission undertakes steps that are Yes – information the circumstances to ensure personal reasonable to ensure personal information information that is collected, used or disclosed is required for the purposes of its accurate, current, complete and relevant. administrative functions is accurate, current, complete and relevant. APP11 Security of personal Take such steps as are reasonable in the All Commission information, regardless of Yes – information circumstances to ensure that personal whether it is personal information, is stored information is protected from misuse, in the Electronic Document and Records interference, loss and from unauthorised access, Management System (EDRMS) provided by modification or disclosure. The Commission Department of Health. The Commission must also take reasonable steps to destroy or receives regular assurances from Health IT deidentify personal information if it is no longer that its IT environment, including the needed for any purpose for which it may be EDRMS, is secure. used or disclosed, so long as the information is not contained in another Commonwealth record and the Commission is not required under an Australian law to retain it. Access to, and correction of, personal information APP12 Access to personal Give an individual access to their personal The Commission provides an individual Yes – information information upon request of that individual. The access to their personal information upon Commission can refuse to give access to the request. information under the Freedom of Information The Commission’s Privacy Policy includes Act 1982 or any other Commonwealth Act, to the contact details for the Commission’s Privacy extent that the Commission is required or Champion and Privacy Officers in the event authorised to refuse access. The Commission
APP9 – Adoption, use and disclosure of government related identifier Do not adopt, use or disclose government related identifiers. This APP applies to non-government entities only. N/A Integrity of personal information – Quality of personal information Take such steps (if any) as are reasonable in the circumstances to ensure personal information that is collected, used or disclosed is accurate, current, complete and relevant. The Commission undertakes steps that are reasonable to ensure personal information required for the purposes of its administrative functions is accurate, current, complete and relevant. Yes APP11 – Security of personal information Take such steps as are reasonable in the circumstances to ensure that personal information is protected from misuse, interference, loss and from unauthorised access, modification or disclosure. The Commission must also take reasonable steps to destroy or deidentify personal information if it is no longer needed for any purpose for which it may be used or disclosed, so long as the information is not contained in another Commonwealth record and the Commission is not required under an Australian law to retain it. All Commission information, regardless of whether it is personal information, is stored in the Electronic Document and Records Management System (EDRMS) provided by Department of Health. The Commission receives regular assurances from Health IT that its IT environment, including the EDRMS, is secure. Yes Access to, and correction of, personal information APP12 – Access to personal information Give an individual access to their personal information upon request of that individual. The Commission can refuse to give access to the information under the Freedom of Information Act 1982 or any other Commonwealth Act, to the extent that the Commission is required or authorised to refuse access. The Commission The Commission provides an individual access to their personal information upon request. The Commission’s Privacy Policy includes contact details for the Commission’s Privacy Champion and Privacy Officers in the event Yes
Commission-Privacy-Policy.docx