1. The purpose of this policy is to outline how the College manages the personal information that it collects or that is otherwise provided to it, as well as how stakeholders may access this information.2. This policy applies to all stakeholder groups: parents, students, staff, and visitors to the College (including contractors). It also applies to individuals making application for positions of employment within the College.3. This policy also includes scope for a Privacy Impact Assessment to be conducted in relation to the College’s other policies, procedures, and activities as required.
This policy should be read in conjunction with the following publications:
The Privacy Act 1988 contains full definitions of all terms relating to the issue of privacy. For the purposes of this policy, the College has adapted the following key terms:
1. The Act means the Privacy Act 1988 and any related legislative requirements as are implemented from time to time.2. Consent means express consent or implied consent.3. Health information may refer to information or an opinion about the health or a disability of an individual, an individual’s expressed wishes about the future provision of health services to him or her, or other personal information collected in order to provide a health service.4. Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether the information or opinion is recorded in a material form or not. The College regards this as information or an opinion that may be used to reasonably identify an individual.5. Sensitive information means information or an opinion that may include, but is not limited to, an individual’s race or ethnic origin, political opinion, religious beliefs, professional associations, criminal record, etc.
The College’s primary purpose in collecting personal and sensitive information is to facilitate the provision of its educational programs, including pastoral care.
The types of information the College collects and holds includes, but is not limited to, personal information (including health and other sensitive information) about:
1. students and parents and/or guardians before, during, and after the course of the student’s enrolment at the College;2. job applicants, staff members, volunteers, and contractors; and3. other people who come into contact with the College.
1. The College will generally collect personal information held about an individual by way of forms completed by parents or students either prior to their submission at the College or during the course of face-to-face meetings, interviews, emails, or telephone calls. On occasion, people other than parents and students may provide personal information. Typically, the types of personal information collected by the College include names, residential and/or postal addresses, telephone numbers, email addresses, marriage status, church membership, medical history, and so on.2. The College will also seek consent to collect photographic and videographic information from students and staff in particular, and, on occasion, from parents and other stakeholders. Please refer to the College’s Media Restrictions Policy for more information.
In some circumstances the College may be provided with personal information about an individual from a third party, for example a report provided by a medical professional, a Court order, or a reference from another school.
In cases where the College receives personal information about an individual that it has not requested, the College will:
1. determine whether or not it could have collected the information under normal circumstances;2. destroy the information in an appropriate manner if it determines it would not have ordinarily collected such information;3. store and manage the information as though it had collected it under normal circumstances, if it determines the information could have been collected in such a case.
The College will use the personal information it collects from you for the primary purpose of enabling the College to efficiently deliver its educational programs, and for such other secondary purposes that are related to the primary purpose of collection and which could be reasonably expected by the stakeholder, or to which you have consented.
1. The primary purpose of collection of personal information relating to a student and/or parents is the provision of education for that student. This includes satisfying the needs of parents, the needs of the student, and the needs of the College for the duration of the student’s enrolment in the College.2. The purposes for which the College may use the personal information it collects about students and parents includes:
3. In some cases where the College requests personal information about a student or parent, if the information requested is not provided, the College may not be able to enrol or continue the enrolment of the student or permit the student to take part in a particular activity.
1. In relation to personal information about applicants for positions of employment at the College, current staff members, and contractors, the College’s primary purpose of collection is to assess and (if successful) to engage the applicant, staff member, or contractor as the case may be.2. The purpose for which the College uses personal information relating to job applicants, staff members, and contractors include:
1. The College also obtains information about volunteers who assist in various capacities or conduct associated activities, such as Canteen rosters or classroom assistance.2. The purposes for which the College collects the personal information of volunteers include:
Though the College relies primarily on positive word of mouth for its promotion, there are occasions where other methods of promotion and marketing will be employed. The College also collects personal information for advertising and related purposes, where parents have provided consent for this occur. College publications, such as newsletters, yearbooks, Annual Reports, and websites may be used for marketing purposes.
1. The College regards fundraising as an important part of ensuring the provision of a quality learning environment that is in keeping with the needs of parents for the education and nurturing of their children. Personal information held by the College may be disclosed to organisations that are able to assist the College with fundraising; for example, the College’s Building Development Campaign, Rehoboth Past Students Association, or, on occasion, an external fundraising organisation.2. Parents, staff, contractors, and other members of the wider College community may from time to time receive fundraising information.
1. There are a variety of circumstances in which the College may disclose personal information, including sensitive information, held about an individual.2. Disclosure of personal information mainly occurs in relation to the stated primary purpose of facilitating the College’s educational programs and those items outlined in section 7 and may include disclosure to:
1. There are a number of circumstances in which disclosure of personal information may take place for a secondary purpose. These circumstances include those in which:
2. In the majority of these circumstances, the College will make all reasonable attempts to contact the individual either to acquire permission or to notify of the disclosure (where the circumstance permits).
In order to facilitate its primary purpose, the College will disclose relevant personal and sensitive information to the College Chaplain for the provision of pastoral care.
1. The College may disclose personal information about an individual to overseas recipients; for instance, when storing personal information with cloud computing providers where the provider’s infrastructure is located outside of Australia. The College is satisfied that such services provide robust security for the storage of personal information; however, it will not send personal information about an individual outside of Australia without:
2. In the event that the College becomes dissatisfied with the level of security afforded by a given cloud storage provider, it will seek to remove any personal information stored there at the first available opportunity.
Sensitive information will be used and disclosed only for the purpose for which it was provided or a directly related secondary purpose, unless the individual agrees otherwise, or the use or disclosure of the sensitive information is allowed by law.
1. College staff are required as a condition of their employment to respect the confidentiality of students’ and parents’ personal information and the privacy of individuals.2. The College has in place steps to protect the personal information it holds from misuse, interference and loss, unauthorised access, modification or disclosure by use of methods including password access rights to electronic records and cloud storage, and locked storage of hard copy records.3. Disclosure by a staff member of a student’s or parent’s personal information without proper authorisation will result in disciplinary action being taken.
Under the Privacy Act 1988, an individual has the right to obtain access to any personal information which the College holds about them and to advise the College of any perceived inaccuracy. Students will generally be able to access and update their personal information via their parents, but students in Year 11 or 12 may seek access and correction themselves. There are some exceptions to these rights as set out in the applicable legislation.
The procedure for making a request to access personal information is as follows:
1. Contact the CEO via the College Business Office in writing:By email email@example.comBy post PO Box 82, Cannington WA 6987In person 92 Kenwick Road, Kenwick WA 6107The correspondence should adequately outline the nature of the request, the types of personal information required, and current contact details in order for the Business Office to forward the information once released.2. The College may require verification of the applicant’s identity. If so, this will be required in person by the provision of a valid Driver’s Licence or Passport with photographic evidence.3. The College will make every effort to respond to the application within seven days of initial receipt. Depending on the extent of the personal information requested, this will either be with the information, or with an estimate of when it will be available.4. The College reserves the right to charge a nominal fee to cover the cost of verifying the application and locating, retrieving, reviewing, copying, and updating any material requested. The amount charged will be at the discretion of the Finance Manager. If the information is extensive or more than seven years old, the College will advise the applicant of the expected cost in advance.5. If the College is unable to provide the applicant with access to the requested personal information within the timeframes specified above, it will provide a written notice explaining the reasons for refusal.
1. The College will maintain an accurate log summarising the personal information it has disclosed and the date of release following a successful request. The log will include: the date the information was released; an administrative number assigned to the request; and a summary of the information requested.2. This log is for internal College use only and will remain secure as per the College’s standards.
1. The College respects every parents’ right to make decisions concerning their child’s education and nurturing.2. Generally, the College will refer any requests for consent and notices in relation to the personal information of a student to that student’s parents. The College will treat consent given by parents as consent given on behalf of the student, and notice to parents will act as notice given to the student.3. As outlined in section 10, parents may seek access to personal information held by the College about them or their child by contacting the Business Office. However, there are occasions when access may be denied. Such occasions would include:
4. The College may, at its discretion, on the request of a student, grant that student access to information held by the College about them, or allow the student to give or withhold consent to the use of their personal information, independently of their parents. This would normally be done only when the maturity of the student and/or the student’s personal circumstances so warranted.
There are a number of policies, procedures, or initiatives undertaken by the College that will, either directly or indirectly, impact on an individual’s privacy. As part of its risk management procedures, the College will conduct an assessment of this impact and make recommendations to manage or minimise any identified risks to privacy. A copy of the assessment is contained in Appendix 1.
If you would like further information about the way the College manages the personal information it holds, or wish to lodge a complaint that you believe the College has breached the Australian Privacy Principles, please contact the Business Office. The College will investigate any complaint in accordance with its Complaints and Grievances procedures and will notify you of the making of a decision in relation to your complaint as soon as is practicable after it is made.
Powered by BetterDocs