Privacy

Question 1

Collection

Answer 1

An organisation must inform its clients about the proposed uses and disclosures of their information. At this point it is advisable also to let clients know about their right to access their information and to correct it, if it is wrong.

Question 2

Use and Disclosure

Answer 2

An organisation must use and disclose the information collected from the client only for the stated primary purpose, and in most cases must obtain the consent of the client to sue or disclose it for a secondary purpose

Question 3

Data Quality

Answer 3

An organisation must take reasonable steps to make sure that the personal information it collects, uses and discloses is accurate, complete and up to date.

Question 4

Data Security

Answer 4

An orgnanisation must take reasonable steps to protect personal information it holds form misuse and loss, and from unauthorised access, modification and disclosure

Question 5

Openness

Answer 5

An organisation must have a document available that sets out clearly expressed policies on the management of personal information, and provide more detailed information request

Question 6

Access and correction

Answer 6

an organisation is required to give clients access (with some exceptions) to any information held about them, and to take reasonable steps to correct that information if the client shows that the information is not accurate, complete, or up to date.

Question 7

Identifiers

Answer 7

an organisation must not adopt as its own identifier for a client the identifier that a commonwealth agency or contracted service provider of a c commonwealth agency has assigned to an individual. In addition, organisations must not use or disclose commonwealth dentifers, except where they are required to fulfil obligations to the agency who assigned it.

Question 8

Anonymity

Answer 8

Wherever it is lawful and practical individuals must have the option of not identifying themselves when entering transactions with an organisation.

Question 9

Transorder data flows

Answer 9

an organisation is not permitted to disclose personal information abut a client to someone in a foreign country that is not subject to a comparable information privacy scheme (except wtht eh clients consent)

Question 10

Sensitive information

Answer 10

An organisation is required to get consent (with some exceptions) for the collection of sensitive information, which includes health information. There are some exceptions under certain conditions, for example research, statistics, and management activities which involve identifiable health information