Policy overview
1 Purpose
To ensure the University complies with the requirements of the Information Privacy Act 2009 (the Act).
2 Scope
This policy applies to University Members.
3 Policy Statement
The University values and respects an individual's right to privacy and will meet the legal obligations under the Act which imposes privacy protection obligations to:
- comply with the Information Privacy Principles (IPPs) as provided in the Schedule 3 of the Act;
- transfer Personal Information outside of Australia only in compliance with section 33 of the Act;
- take reasonable steps to have Contracted Service Providers adhere to the privacy principles where required by section 35 of the Act;
- deal with Privacy Complaints by individuals in a timely and responsive manner;
- comply with any Compliance Notice issued by the Information Commissioner; and
- comply with the conditions of any public interest approval issued by the Information Commissioner.
This policy aligns with:
- Higher Education Standards Framework (Threshold Standards) 2021: Standard 7.3 Information Management
4 Principles
- The functions of the University necessitate the collection, creation and use of Personal Information.
- The University adopts the definition of Personal Information contained in the Act.
- The University is committed to protecting personal privacy, recognising that individuals have a reasonable expectation the University will protect and manage the Personal Information it collects and holds about them.
- The University will interpret and apply the Act to ensure it provides for the fair collection and handling of Personal Information and a right of access to, and amendment of, Personal Information in the University's possession or under its control unless, on balance, it is contrary to the public interest to give access to or allow the information to be amended.
- Subject to the provisions of the Right to Information Act 2009 and the Information Privacy Act 2009, the University will embrace the principles of openness and transparency regarding the information it holds.
- The Administrative Access Scheme operated by the University is the preferred method for providing access to Personal Information.
- The first point of contact for all privacy matters including complaints, application and amendment requests, and requests for internal review is the:
Privacy Officer
University of Southern Queensland
Toowoomba Queensland 4350
5 References
Guidelines - Privacy Principles, Office of the Information Commissioner (OIC).
6 Schedules
This policy must be read in conjunction with its subordinate schedules as provided in the table below.
7 Policy Information
Accountable Officer | Privacy Officer |
Responsible Officer | Privacy Officer |
Policy Type | Executive Policy |
Policy Suite | |
Subordinate Schedules | |
Approved Date | 25/6/2015 |
Effective Date | 30/6/2015 |
Review Date | 7/8/2029 |
Relevant Legislation | Information Privacy Regulation 2009 |
Policy Exceptions | |
Related Policies | Administrative Access Scheme Policy |
Related Procedures | Administrative Access Scheme Procedure Privacy Procedure (under development) |
Related forms, publications and websites | |
Definitions | Terms defined in the Definitions Dictionary |
Is information or an opinion, including information or an opinion forming part of a database, whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion....moreIs information or an opinion, including information or an opinion forming part of a database, whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. The term 'University' or 'UniSQ' means the University of Southern Queensland....moreThe term 'University' or 'UniSQ' means the University of Southern Queensland. | |
Definitions that relate to this policy only | |
Compliance Notice As per section 158, Information Privacy Act 2009. (Bound) Contracted Service Provider Defined in Schedule 5, Dictionary of the Information Privacy Act 2009. Information Commissioner The information commissioner under the Right to Information Act 2009 Information Privacy Principles (IPPs) As per Chapter 2, Information Privacy Act 2009. Privacy Complaint Defined in section 164, Information Privacy Act 2009. | |
Keywords | Privacy, Personal Information |
Record No | 13/404PL |