BPCS Privacy and Confidentiality Policy

This Privacy and Confidentiality Policy applies to Bold Park Community School (BPCS).

Bold Park Community School may, from time to time, review and update this Policy to take into account new laws and technology, changes to schools operations and practices and to make sure it remains appropriate to the changing school environment.

[This policy is based on AISWA docs – see Privacy Principals and Privacy Manual].

Rationale

This policy is designed to ensure that the staff of BPCS act within the provisions and principles of the Privacy Act and treat all information collected in a confidential and sensitive manner. As an educational institution, BPCS is expected to collect a wide range of information and data. It is important that staff have the mechanisms in place to manage that in an appropriate manner and that staff, parents and students understand what information and data will be collected and in what manner, and for what purpose it will be used.

Policy

This policy is to ensure that Bold Park Community School complies with the provisions of the Commonwealth Privacy Act 1988 – Privacy Amendments (Private Sector) Act 2000.

BPCS will follow the standards of the National Privacy Principles to regulate the way in which it manages personal and sensitive information. BPCS requires certain information be collected, in accordance with the regulatory framework of operating a school.

Provisions for Implementation

Collecting Information

• Personal information must only be collected and used specifically for the purpose of the school’s function. Personal information should be collected in a
  fair and unobtrusive way.
• Persons providing the information should be given appropriate access to their information, if requested, and be advised about the purpose for the collection of
  the information.
• Collection of information is limited to only the amount of information that is necessary for the school’s activities. It is generally only collected with consent of
  the individual.
• The primary purpose for collecting information is to enable the school to provide a high quality service.

Use and Disclosure

• Personal Information – Disclosure of information is only to be used for the purpose for which it was collected. This is with limited exceptions, and can only
  be used for a secondary purpose when it relates specifically to the primary purpose of the collection of the information.
• Sensitive Information – can only be used when informed consent is obtained at the time the information was collected.
• The school discloses personal and sensitive information to the staff, for the specific purpose of administration and education.
• The school may disclose specific information including a name, the study/course being undertaken to government agencies if specific funding requires this.
• Staff will have access to emergency contact details. Access to these is limited to the staff.

Information Quality

• BPCS must take all reasonable precautions to ensure personal information that it collects, uses and discloses is accurate, complete and up-to-date. However, the
  accuracy of that information depends to a large extent on the information that is provided by the individuals.
• Individuals will be required to advise the school of any changes that may affect the initial information provided.
• The Principal of the school must ensure information is collected and maintained in accordance with this policy.

Information Security

• BPCS will protect personal information from misuse, loss, change, unauthorised access /disclosure.
• The Principal of the school will ensure personal information is stored in accordance with the BPCS Student Records Management Policy.

Openness, Access and Correction

• Staff, parents and students may seek access to personal information collected about them by contacting the Principal.

Identifiers

• BPCS will protect any Australian government identifier for an individual (for example, Medicare Number) from being used as the school’s own.

Anonymity

• The school will offer anonymous transactions within the organisation wherever possible.

Transfer Data Flows

• BPCS does not transfer personal information to other organisations, companies or agencies other than those identified to the person at the time of transfer or in
  compliance with Student Transfer requirements.

Sensitive Information

• BPCS respects the rights of individual’s sensitive information.
• A higher level of privacy protection applies to sensitive information.
• Sensitive information relates to information about an individual’s religious beliefs, racial or ethnic origin, philosophical beliefs, political opinions,
  membership of a political association, membership of a trade union, sexual preferences or practices, criminal records or health information.
• Sensitive Information can only be collected with an individuals consent to do so.

Sensitive Information – can only be used when informed consent is obtained at the time.

Polices relating to Privacy and Confidentiality Policy

Enrolment

Records Management

Relevant Legislation or Authority

Commonwealth Privacy Act 1988 – Privacy Amendments (Private Sector) Act 2000.