Staff Key Points

Privacy laws do not prevent the legitimate flows of information necessary for University operations. Become familiar with the Information Protection Principles and the Health Privacy Principles and apply them to the way you handle personal information:

  • Collect only the information you need;
  • Advise people why you need the information and how it will be used and disclosed;
  • Use and disclose for the primary purpose of collection unless the person consents or an exemption applies;
  • Take steps to ensure the quality of the information;
  • Secure the information.

The Information Protection Principles of the Privacy and Personal Information Protection Act 1998 and Health Privacy Principles of the Health Records and Information Privacy Act 2002 are detailed in the University Privacy Management Plan.