Intent
Positive Step respects and values individuals right to privacy, dignity and confidentiality in all aspects of their lives. This is not limited to the legal requirements for privacy, as it extends to ensure we deliver on our business values.
Positive Step complies with the Australian Privacy Principles outlined within the Privacy Act 1998 and subsequent amendments. We collect, use, disclose, securely store and appropriately dispose of personal and sensitive information inline with the primary purpose of delivering our service to individuals and to manage our business activities.
Collection of information
Positive Step only collects information about individuals by fair and lawful means and only if the information is necessary. With regards to service provision, personal and sensitive information it may be collected in the following ways:
- from the individual directly
- referring healthcare organisation that accesses health status or care requirements
- individual’s health practitioner
- individual’s family members or significant persons
- individual’s legal advisors
Sometimes information is collected from somebody else as it is unreasonable or impractical to obtain it from the individual, or Positive Step is required or authorized by law. Beyond this Positive Step will obtain an individual’s consent to collect information from somebody else.
Retention of information
Personal and sensitive information shall be held in a combination of paper copies and within electronic systems. This information is retained in:
- secure, locked filing cabinets, i.e. individual’s case files, human resource files
- secure business network and associate hardware, i.e. electronic databases
Security of information
Access to all personal and sensitive information is secured in the following ways:
- paper copies in filing cabinets are physically locked
- electronic files on the business network are located on secure computer systems with controlled access.
Use and disclosure
Personal or sensitive information will only be used or disclosed for the primary purpose for which it was collected or for situations allowed under the permitted general or health situations outlined the Privacy Amendment (Enhancing Privacy Protection) Act 2012. Beyond this Positive Step will obtain an individual’s consent to use or disclose their personal or sensitive information.
Disposal of information
When the personal or sensitive information is no longer required by Positive Step it is destroyed, by Positive Step, in an appropriate manner in the following ways:
- paper copies are shredded
- electronic files are securely deleted
Accuracy of information
Positive Step takes all reasonable steps to ensure that the personal and sensitive information it collects, uses or discloses is accurate, complete and up-to-date.
Accessing and requesting correction of information
Individuals can request a copy of their personal and sensitive information that is held by Positive Step. Individuals can request their personal and sensitive information held by Positive Step to be updated.
Individuals requesting to obtain a copy or update their personal or sensitive information held by Positive Step may contact Positive Step on 08 9341 7300 or [email protected].