USI Privacy Obligations
The Office of the Student Identifiers Registrar privacy obligations require us to:
-
be open and transparent about how we hold, use and disclose personal information
-
have a privacy policy in place that is reasonably available to the public
-
take reasonable steps to ensure the security of personal information and protect it against intentional or unintentional misuse, loss, interference, unauthorised access, modification or disclosure
-
take reasonable steps to ensure the personal information that is held, used or disclosed is accurate, up to date, complete and relevant
The 13 Australian Privacy Principles (APPs) are particularly important for the Office of the Student Identifiers Registrar staff and their work. The APPS are specified in Section 14 of the Privacy Act, which details the obligations and rights attached to the collection, access, maintenance and disclosure of personal information with which the Office of the Student Identifiers Registrar staff must comply, and principally APPs 1, 3, 6, 10, 11, 13.
-
APP 1 – Open and transparent management
-
APP 3 – Collection of personal information
-
APP 6 – Use or disclosure of personal information
-
APP 10 – Quality of personal information
-
APP 11 – Security of personal information
-
APP 13 – Correction of personal information
How we meet our privacy obligations
-
we ensure the identity of the person we are speaking to is correct (APPs 3, 10, 11, 13)
-
answers to security questions assist us to identify if the caller is the person that USI Registry System personal details and records apply to.
-
if there are any doubts about who we are speaking with we will seek assistance from a supervisor.
-
we take reasonable steps to protect personal information (APPs 1, 6 & 11)
-
we lock our computer when we leave our desk to protect your information.
-
we shred personal identification information and material as soon as it is no longer required.
-
we have a ‘clear desk’ policy and do not leave personal identification information lying around and open to inappropriate access or use by another person.
-
we do not chat about work matters in public areas. For example, at the coffee shop or the bus stop where you may be overheard.
-
we do not chat about a person’s personal details with colleagues or friends (APPs 6 and 11).
Other resources
Legislation specifying the standards, rights and obligations about how the Student Identifiers Registrar must manage personal information includes the: