Privacy And Confidentiality Policy And Procedure

PURPOSE

Anchor & Co. Behaviour Support is committed to preserving privacy.

Anchor & Co. Behaviour Support is committed to protecting the privacy of all individuals whose personal information we collect. This privacy policy outlines the practises regarding the collection use disclosure and safeguarding of personal information in accordance with the privacy act 1988 and the Australian privacy principles (APPs) which outline the proper collection, use, and storage of personal information.

The Privacy Act 1988 (Cth) regulates how certain private sector organisations can collect, hold, use and disclose personal information and how the individual can access and correct that information.

The purpose of this policy is to set out how Anchor & Co. Behaviour Support will respect and protect the personal and sensitive information of participants and their dignity and right to privacy.

This policy applies to all records containing personal and/or sensitive information, whether they are in hard copy or electronic form, as well as to any interviews or discussions of a sensitive personal nature.

SCOPE

This policy applies to:

  • All Anchor & Co. Behaviour Support staff, including permanent or casual employees, contractors, consultants, and people otherwise engaged by Anchor & Co. Behaviour Support.
  • All participants receiving NDIS services and support, including their families and support network.

This Privacy and Confidentiality Policy covers how Anchor & Co. Behaviour Support collects, holds, uses and discloses the participant’s personal information.

This Policy applies to all personal information collected by Anchor & Co. Behaviour Support, including personal information collected through our social media websites and from other service providers.

DEFINITIONS

 

Term Definition
Confidentiality It means protecting the secrecy and privacy of information collected from individuals and organisations.
Data breach A data breach happens when personal information is accessed, disclosed without authorisation or is lost. For example, when:

  • a USB or mobile phone that holds an individual’s personal information is stolen
  • a database containing personal information is hacked
  • someone’s personal information is sent to the wrong person

 

A data breach can harm an individual whose personal information is affected. They can, for example, suffer distress or financial loss.

 

An eligible data breach occurs when the following criteria are met:

  • There is unauthorised access to or disclosure of personal information held by an organisation or agency (or information is lost in circumstances where unauthorised access or disclosure is likely to occur).
  • This is likely to result in serious harm to any of the individuals to whom the information relates.
  • The organisation or agency has been unable to prevent the likely risk of serious harm with remedial action.
Personal information Includes a broad range of information or an opinion that could identify an individual. For example, personal information may include the following:

  • an individual’s name, signature, address, phone number or date of birth
  • sensitive information
  • credit information
  • staff member record information
  • photographs
  • internet protocol (IP) addresses
  • voiceprint and facial recognition biometrics

location information from a mobile device.
Sensitive information Sensitive information means:

  • information or an opinion about an individual’s:
    • racial or ethnic origin; or
    • political opinions; or
    • membership of a political association; or
    • religious beliefs or affiliations; or
    • philosophical beliefs; or
    • membership of a professional or trade association; or
    • membership of a trade union; or
    • sexual orientation or practices; or
    • criminal record; or
  • health information about an individual; or
  • genetic information about an individual that is not otherwise health information; or
  • biometric information that is to be used for the purpose of automated biometric verification or biometric identification; or
  • biometric templates.

POLICY

Anchor & Co. Behaviour Support is committed to providing high-quality support and services that respect the dignity and privacy of each participant.

To achieve this commitment, Anchor & Co. Behaviour Support will ensure that:

  • Consistent processes and practices are in place that respect and protect the personal privacy and dignity of each participant.
  • Each participant is advised of confidentiality policies using the language, mode of communication and terms that the participant is most likely to understand.
  • Each participant understands and agrees to what personal information will be collected and why, including recorded material in audio and/or visual format.

Anchor & Co. Behaviour Support respects and protects each participant’s dignity and right to privacy by complying with the Privacy Act 1988, the NDIS Quality and Safeguarding Framework requirements, all applicable state or territory legislation and adhering to the Australian Privacy Principles in its information management practices.

Anchor & Co. Behaviour Support will maintain and protect the privacy and confidentiality of all participants and their family members, carers, guardians and/or advocates. This includes collecting, storing, and handling information about participants and the services provided to them in a way that respects their rights.

All staff and management are expected to comply with this policy, be consistent in collecting the participants’ information, follow the procedures for handling their information and determine who has access to it.

Staff must ensure that each participant understands and agrees to the collection and handling of their personal information and the reasons for it. Before any audio or visual material can be recorded, the participant must give permission in writing using the Participant Consent Form.

Anchor & Co. Behaviour Support will maintain and protect the privacy and confidentiality of all participants and their family members, carers, guardians and/or advocates. This includes collecting, storing, and handling information about participants and the services provided to them in a way that respects their rights. All staff and management are expected to comply with this policy, be consistent in collecting the participants’ information, follow the procedures for handling their information and determine who has access to it. Staff must ensure that each participant understands and agrees to the collection and handling of their personal information and the reasons for it. Before any audio or visual material can be recorded, the participant must give permission in writing using the Participant Consent Form.

Staff must also ensure that participants are aware of their rights regarding privacy and confidentiality and that they understand their obligations to protect their personal and sensitive information. To achieve this, participants will be advised of this Privacy and Confidentiality Policy using language, communication methods and terms that they can easily understand.

COMPLAINTS

If you have any complaints about our privacy practices, please send details to Level 1, 63-73 Ann Street SURRY HILLS NSW 2010. We take all complaints seriously and will respond promptly after receiving the written notice of your complaint.