Personal Information Protection Policy
April 2019 (Version 1)
Review of Policy
The Board will review this Policy at least every three years, or earlier if the need arises.
This Policy borrows from and in some cases replicates information from the Department of Premier and Cabinet. The assistance of the Department of Premier and Cabinet is acknowledged.
Under the Personal Information Protection Act 2004 (the PIP Act), Brand Tasmania is the custodian of personal information related to its functions and activities.
The PIP Act regulates the collection, maintenance, use and disclosure of personal information relating to individuals.
Personal Information is defined under the PIP Act as any information or opinion in any recorded format about an individual –
- whose identity is apparent or is reasonably ascertainable from the information or opinion; and
- who is alive or has not been dead for more than 25 years
‘Basic personal information’ (i.e. name, residential or postal addresses, date of birth and gender of an individual) can be used and disclosed to other Government bodies without consent in certain limited circumstances.
This Policy sets out the principles that are applied by Brand Tasmania in managing personal information. This Policy does not extend to public information, as such information is not regulated by the PIP Act.
3. Information collected by Brand Tasmania
Brand Tasmania only collects personal information that is necessary for it to perform its functions, and will only use or disclose this information for the purposes for which it was provided.
Brand Tasmania undertake activities that require the collection of personal information. The type of ‘personal information’ collected includes:
- telephone numbers
- any specific information about a person that may be required to enable us to provide the service.
Brand Tasmania takes reasonable steps to ensure that the personal information it holds is accurate, complete and up to date. Where practicable, Brand Tasmania will check on the accuracy of your personal information before it is used.
4. Sensitive information, unique identifiers and anonymity
‘Sensitive Information’ includes things like health information, criminal record, racial origin and sexual preferences. Generally, Brand Tasmania will only collect sensitive information if it is necessary to provide a service to a person and the person consents, or if the collection of that information is required or permitted by law.
Brand Tasmania does not assign unique identifiers to people unless it is necessary for us to carry out our functions efficiently or is required by law.
If a person is making a general enquiry, it may not be necessary to identify him- or herself. However, if a person wants to obtain a service, identification may be necessary
5. Access to and correction of information collection
The PIP Act provides that a person can access his or her personal information that is held by Brand Tasmania. If a person considers the personal information held by Brand Tasmania is inaccurate in any way, he or she can request that the information be amended.
Requests to access or correct personal information held by Brand Tasmania should be addressed to the Chief Executive Officer by mail at GPO Box 123, Hobart, 7001, or via email to firstname.lastname@example.org.
If a person is not satisfied with the handling or outcome of his or her request for access to or correction of his or her personal information, he or she can lodge a complaint with the Ombudsman. The Ombudsman’s Office can be contacted on 1800 001 170 and by email at email@example.com.
6. Use and disclosure of personal information
Brand Tasmania staff are only provided with or have access to the personal information that is necessary for them to carry out their functions within Brand Tasmania.
All staff are bound to maintain appropriate confidentiality in relation to information acquired in carrying out their duties.
Personal information will be used only for the purposes described in the Information Collected section above. Personal information will only be disclosed with the person’s consent, or if it is required by or authorised by law.
There may be a need to disclose some or all of the personal information Brand Tasmania collects to contractors and agents of the Brand Tasmania, law enforcement agencies, courts, or other public sector bodies.
Personal information in written submissions on policy matters or matters of public consultation may be disclosed in reports that are made public, unless the submission was submitted and/or accepted on a confidential basis.
7. Security of personal information
Brand Tasmania uses a number of safeguards to protect information from misuse and loss, unauthorised access, modification and disclosure.
Generally, there is an intention that information is destroyed or permanently de-identified when it is no longer required, but this can only be done in accordance with processes approved by the State Archivist under the Archives Act 1983.