Privacy Policy
Privacy and confidentiality guidelines
Confidentiality
To support the privacy and confidentiality of individuals:
-
we are committed to complying with the privacy requirements of the Privacy Act, the Australian Privacy Principles and for Privacy Amendment (Notifiable Data Breaches) as required by organisations providing disability services
-
we are fully committed to complying with the consent requirements of the NDIS Quality and Safeguarding Framework and relevant state or territory requirements
-
we provide all individuals with access to information about the privacy of their personal information
-
each individual has the right to opt out of consenting to and providing their personal details if they wish
-
individuals have the right to request access to their personal records by requesting this with their contact person
-
where we are required to report to government funding bodies, information provided is non-identifiable and related to services and support hours provided, age, disability, language, and nationality.
-
personal information will only be used by us and will not be shared outside the organisation without your permission unless required by law (e.g. reporting assault, abuse, neglect, or where a court order is issued)
-
images or video footage of participants will not be used without their consent
-
participants have the option of being involved in external NDIS audits if they wish
-
all staff sign confidentiality agreements when they commence
-
staff are trained in privacy and confidentiality during induction.
Security
To keep information secure:
-
we take reasonable steps to protect the personal information we hold against misuse, interference, loss, unauthorised access, modification and disclosure
-
we ensure personal information is accessible to the participant and is able for use only by relevant workers
-
we ensure security for personal information includes password protection for IT systems, locked filing cabinets and physical access restrictions with only authorised personnel permitted access
-
we ensure personal information no longer required is securely destroyed or de-identified.
Consent to Share
Consent to share information
-
Far North Community Services will not share personal information with a third party without the participants expressed consent.
-
Where not providing information to a third-party places the participant or others at immediate serious risk of abuse, neglect, exploitation or discrimination, our duty of care will take first priority and the least restrictive amount of information required to keep the person and others safe will be shared.
-
Consent may be verbal or in writing.
-
All participants will have the Participant consent form explained to them and a signed copy will be kept on their TRACCS file
-
Consent to share information may not be given and this will be recorded on the participants TRACCS file
-
Consent may be withdrawn at any time and this will be recorded on the participants TRACCS file
Data Breaches
Data breaches
As part of information security responsibilities:
-
we will take reasonable steps to reduce the likelihood of a data breach occurring including storing personal information securely and accessible only by relevant workers
-
if we know or suspect your personal information has been accessed by unauthorised parties, and we think this could cause you harm, we will take reasonable steps to reduce the chance of harm and advise you of the breach, and if necessary the Office of the Australian Information Commissioner.
Privacy Breaches
Breach of privacy and confidentiality
A breach of privacy and confidentiality is an incident:
-
follow the Manage incident internally process to resolve
-
may require an investigation
-
an intentional breach will result in disciplinary action up to and including termination of employment.
Glossary
Personal information includes (regardless of its accuracy):
- name
- address
- phone number
- email address
- date of birth
- recorded opinions or notes about someone
- any other information that could be used to identify someone.
Participant Conscent
The information we will share will depend on the permission you give us on this form. For example, you can agree to us sharing information to a third party about:
-
you
-
your plan or your funded supports
-
your medical information held by us
-
information that enables us to support you safely
-
supporting you to achieve the goals in your plan
You do not have to give your permission if you do not want to share your information. If you give us permission and then decide that you don’t want us to share your information anymore, you can withdraw your consent by contacting us. You can do this in writing or verbally.
We will not share your personal information to anyone unless you have given your permission, or the disclosure of your information is required or authorised by law.
Audits
As part of being a registered NDIS Provider, all clients of Far North Community Services are automatically enrolled in the audit process, which means you may be contacted by the audit team for an interview, and/or may have your files, records or plans reviewed by an auditor. This review is to make sure Far North Community Services, as your registered NDIS provider, is complying with the NDIS Practice Standards and upholding all our responsibilities.
As a client, you have the right to opt out of the client sampling process included in our audit. If you do not wish to participate in the client sampling process, meaning you do not wish to be interviewed, or do not wish to have your records be provided as a sample to the auditors. I do not wish to be interviewed by an external auditor or have my records used in any audit process
​
Consent
Please complete and sign this form to give your consent to Far North Community Services Ltd.
Consent for Far North Community Services to:
Please tick where you give consent
share your information on your behalf
seek information to support you well
collect and store information about you (including health information from your GP or hospital).
have my services delivered by staff who have not had a COVID19 vaccine (if you do not give consent, only staff who are vaccinated will be rostered to support you)
have photographs of yourself included in our newsletters, social media and website
I understand that Far North will:
-
Keep my personal details accurate, complete and up to date;
-
Keep my personal details stored safely (e.g. locked filing cabinets and/or on password protected computers, databases and shared drives);
-
I acknowledge and accept that after Far North provides my confidential information to the parties listed above, that Far North has no control over how these parties will safeguard the information. Far North is not responsible to you for any matters or consequences that arise relating to that confidential information once Far North has provided the confidential information in accordance with this authority;
-
Provide me with the Privacy Policy, for Individuals, Volunteers and Members upon request; and
-
Seek my permission to disclose information, other than is detailed on this consent form.
I understand that I can:
-
Ask to see my personal files;
-
Request that my personal details are updated and correct;
-
Change my consent; and
-
Talk to or make a complaint to, if I believe my personal information has not been treated with appropriate privacy.
Data Breach
A security incident where personal, sensitive or confidential information normally protected, is deliberately or mistakenly copied, sent, viewed, stolen or used by an unauthorised person or parties.
A data breach where people are at risk of serious harm as a result, is reportable to the Office of the Australian Information Commissioner.