Summary
1.1. This policy sets out A Plus Nursing position concerning the collection, storage, disclosure, or transfer of employee and member information as required by the Privacy Amendment (Private Sector) Act (Cth) 2000, Health Records Act (Vic) 2001 and NSW Health Records & Information Privacy Act 2002 No. 71.
1.2. The policy refers to employees and members of A Plus Nursing, third-party paid contractors, and independent contractors.
Privacy Statement
2.1. A Plus Nursing recognises the importance of its employees, members, contractors, and subcontractors’ privacy and understands their concerns about the security of the personal information provided to A Plus Nursing.
2.2. A Plus Nursing complies with the Australian Privacy Principles (APP’s) as contained in the Privacy Act (Cth) 1988, the Health Privacy Principles (HPP’s) as contained in the Health Records Act (Vic) 2001, and NSW Health Records & Information Privacy Act 2002 No.71. The Australian Privacy Principles (APP’s) detail how personal information is collected, used, stored, and destroyed and how an individual may gain access to personal information held about them.
2.3. A Plus Nursing respects the privacy of its employees, members, contractors, and subcontractors. Any personal information will only be collected with prior knowledge where possible, and no information will be disclosed to another institution or authority except if required by law or with their consent. Furthermore, A Plus Nursing will take all reasonable steps to protect personal information from unauthorized access, improper use, or alteration.
Responsibility
3.1. Responsibility and authority to implement and enforce this policy is placed with A Plus Nursing, however, all employees, members, contractors, and subcontractors have a legal obligation to comply with this policy.
3.2. A Plus Nursing will ensure that we:
3.2.1. Only collect personal information if it is necessary to do to provide services.
3.2.2. Does not use or disclose personal information about an individual for a purpose other than:
- The purpose for which it was collected.
- A related purpose for which it was collected.
- A purpose required or permitted by law.
- A purpose for which they have obtained the consent of the individual.
- In accordance with clause 9 of this policy
3.2.3. Take all reasonable steps to ensure that the personal information collected, used, or disclosed is accurate up-to-date, and protected.
3.2.4. Provide individuals with access to their personal information, except in circumstances as outlined in Clause 8 of this Policy.
3.3. Any personal information collected from third parties during recruitment or engagement for the purposes of verification of information provided, may be disclosed to a third party which may include:
- Recruitment or A Plus Nursing service providers.
- Health professionals.
- Nominated referees.
- Any government or department body (or their agents) to verify your work rights status.
3.4. Personal information collected during recruitment or engagement for unsuccessful candidates will be destroyed immediately. All other personal information collected will be held by the company whilst the information is required.
3.5. At the end of this period, A Plus Nursing will dispose of the documentation in accordance with Australian Privacy Principals (APP’s) and the Health Privacy Principles (HPP’s) (where the information is health-related) by either destroying or de-identifying the documentation.
Collecting Personal Information
4.1. In the course of the employment relationship, A Plus Nursing collects a variety of information including personal information. A Plus Nursing endeavors to only collect personal information that is necessary for the employment relationship and the management and administration of employees, members, contractors, and subcontractors.
4.2. The type of personal information collected will depend upon the nature of the relationship between A Plus Nursing and the individual, but at a minimum will include name, address, telephone numbers, date of birth, and next of kin.
4.3. While A Plus Nursing endeavors to collect personal information from the individual involved, in some instances A Plus Nursing may also receive personal information about an individual from third parties. Where A Plus Nursing receives (and retains), or uses personal information from third parties, A Plus Nursing will contact the individual involved and advise them that this information is retained while it is required for any of its functions, or any other lawful purpose.
Employee Information
5.1. A Plus Nursing collects employee records for the purpose of an employment relationship.
5.2. While A Plus Nursing endeavours to collect personal information from the individual involved, in some instances A Plus Nursing may also receive personal information about an individual from third parties. Where the company receives (and retains) or uses personal information from third parties, the company will contact the individual and advise that it holds this information.
5.3. Most information held for the purposes of an employment relationship is exempt under the Privacy Act 1988 as employee records, therefore, although A Plus Nursing is not obliged to maintain the contents of employee records under the National Privacy Principles (NPP’s) and the Privacy Act 1998, A Plus Nursing will use its best endeavours to do so.
5.4. Employee records are defined as:
- Information in relation to a current or former employment and member relationship.
- The engagement, training, disciplining, resignation or termination of employment of an employee, member, contractor or subcontractor.
- The terms and conditions of employment of an employee, member, contractor or subcontractor.
- The employee, member, contractor or subcontractor’s performance or conduct, hours of employment, salary and wages, personal and emergency contact details.
- The employee, member, contractor or subcontractor’s membership of a professional or trade association, or trade union membership.
- The employee, member, contractor or subcontractors leave entitlements.
5.5. A Plus Nursing complies with the Health Privacy Principles (HPP’s) in maintaining employee and members health information contained in employee records.
Health Information
6.1. Where an employee or member has consented to providing health related information to the company or health information has been provided by a third party, that information shall only be disclosed to a third party in the event of an emergency to prevent or lessen a serious and imminent threat to life or health of the individual.
Data Security and Storage
7.1. The security of employee and member information is important. All employees and members must take reasonable steps to protect any personal information they hold from the misuse, unauthorised access, modification, or disclosure to a third party.
7.2. An employee or member holding personal information relating to another employee, client or customer, must ensure that access is not provided to a third party in breach of this policy. All reasonable efforts must be made to ensure information is stored securely both in electronic and physical forms.
7.3. A Plus Nursing does not support the use of USB storage devices, unless encrypted and password protected. A Plus Nursing recommends all company documents are accessed via the G Drive to ensure latest versions are being accessed and used.
7.4. Personal information is stored electronically, on paper, or both. The company has physical, electronic, and procedural safeguards for personal information and takes reasonable steps to ensure that the information is protected. Data stored electronically is protected by both internal and external firewalls, and access to electronic records is limited by passwords. Only approved staff with a password have access to all information on the system and files can be designated no access.
7.5. Personal information is stored within secure premises. Externally, the premises have several barriers to unauthorised entry including secured entry and monitored alarms. Internally, steps are taken to ensure access to personal information is limited, including storage of all personal information electronically or on occasion via locked safes within a secured office or dedicated file room.
7.6. A Plus Nursing uses secure methods to destroy or permanently de-identify personal information when it is no longer needed. A Plus Nursing will retain personal information while it is required for any of its functions, or for any other lawful purpose.
Computer Based Information Systems
8.1. A Plus Nursing systems are critical assets of the company that are intended for business use. Electronic information stored on company computers, company servers, electronic files and communications stored, sent or received through company systems, are the property of A Plus Nursing.
8.2. A Plus Nursing has the right to intercept, divert, discard, access or review the contents of electronic communications or files or any other information created on, transmitted over or stored in company or service provider systems at any time. A Plus Nursing may conduct reviews of computer use for several reasons, including the management of its computer resources or communication facilities, assurance of systems security, verifying compliance of users with company policies or for other business reasons.
8.3. A Plus Nursing may specifically monitor sites visited by users on the internet, chat rooms and news groups, as well as material downloaded or loaded by users from or to the internet.
8.4. A Plus Nursing reserves the right to disclose information related to system usage for any of the foregoing purposes, as well as to comply with or assist law enforcement officials or legal authorities.
8.5. If an employee or members personal information is discovered because of electronic communications monitoring, this personal information would not be disclosed in line with the Privacy Act 1988 and company Privacy Policies, except if required by law or with the individual’s consent.
Access to Personal Information
9.1. When an employee or member requests access to their personal information A Plus Nursing will, in most circumstances, make available any personal information collected. Requests for access to an employee’s personal information should be made in writing to the General Manager of A Plus Nursing. A Plus Nursing may provide an employee or member with this information verbally or in writing, as may be appropriate. In some instances, an employee or member may be permitted to review their personnel file while accompanied by a representative from our A Plus Nursing team.
9.2. A Plus Nursing will take reasonable steps to amend or correct personal information to keep it accurate and up to date. Employees and members should notify A Plus Nursing of any changes to personal information.
9.3. A Plus Nursing will respond to requests for access to personal information within 5 days of receipt of the written request.
9.4. Requests for access to personal information must include the employee or members name and address and identify the information the individual is seeking.
Refusal of Access to your Personal Information
10.1. In certain circumstances the General Manager of A Plus Nursing may refuse an employee or member access to their personal information. These could be in circumstances where:
- There could be an unreasonable impact on the privacy of others.
- The information relates to legal proceedings.
- The information would reveal commercially sensitive decision-making process.
- Providing access to the information would prejudice certain investigations.
10.2. Where A Plus Nursing does not agree to provide an individual with details of personal information, the company will provide reasons why.
Disclosure and Transfer of Information
11.1. A Plus Nursing will not transfer personal information outside of Australia unless:
- It is necessary for the employment relationship and to provide necessary services, provided A Plus Nursing believes on reasonable grounds that the organisation involved will only deal with personal information in a similar manner to the requirements under the Australian Privacy Principals (APP’s) and in the case of health information, the Health Privacy Principles (HPP’s).
- The employee or member has provided their consent (including for the purposes set out in this Policy, by the individual acknowledging and signing this Policy.
- Where otherwise allowed by the Privacy Act 1998 and the Health Records Act 2001 Vic and NSW Health Records & Information Privacy Act 2002.
- The information is provided to other related entities, which deal with personal information in a similar manner to the requirements under the National Privacy Principles (NPP’s) and, in the case of health information, the Health Privacy Principles (HPP’s).
11.2. A Plus Nursing may disclose personal information to third parties, including third parties outside Australia for:
Breaches of this Policy
12.1. An employee, member, contractor or subcontractor found to be in breach of this Policy may be subject to disciplinary action that may result in:
- A formal warning being issued; or
- Summary dismissal (see Code of Conduct Policy).
Privacy Concerns
If you have any queries or concerns about your personal information, or would like to make a complaint, please contact the General Manager of A Plus Nursing.
Policy Review
This policy will be reviewed on a biennial or as required basis by the General Manager of A Plus Nursing. Any proposed changes to this policy must be approved by the CEO’s.
