Privacy Flashcards
What are some examples of Personal Information? (9 possible answers)
Name, DOB, address, signature, telephone number, signature, medical records, bank account, commentary or opinion about a person
What are some examples of sensitive information? (7 possible answers)
Racial details, political leanings, religious details, sexual details, criminal history, health/genetic information, biometrics
What part of the Privacy Act deals with areas such as the management of personal information, how personal information can be used, and keeping personal information secure
The Australian Privacy Principles
How many Australian Privacy Principles are there?
13
Who can complaints collect information from? (7 possible answers)
A care recipient, a CR’s relatives and representatives, an aged care provider and its staff, a complainant, health professionals, public guardians, state coroners, the Department of Health
When should a Privacy Impact Statement be completed?
Whenever a new project may deal with the solicitation, management, and storage of high-risk personal and sensitive information in a new or changed way.
What is considered a notifiable data breach?
When personal or sensitive information held by the Commission is released, accessed, used, lost, or disclosed without authorisation and is likely to cause serious harm.
What steps should you take when a data breach is identified?
Escalate to a direct manager, contain, and notify the Commission’s privacy officer, the Australian Information Commissioner, and the individual parties.
When should a Notice of Collection be provided?
An NoC is provided as early as possible after first contact.
What is a Notice of Collection? (8 possible answers)
An NoC contains information such as:
· who we are and our contact details
· the fact and circumstances of collection
· whether the collection is required or authorised by law
· the purposes of collection
· the consequences if personal information is not collected
· our usual disclosures of personal information that is collected by us
· information about our Privacy Policy
· whether we are likely to disclose personal information to overseas recipients, and if practicable, the countries where they are located.