Privacy and Confidentiality Policy

This document tells you about our privacy and confidentiality policy.

The privacy and confidentiality policy says how we do what the law says we must do to protect your privacy.

Privacy means that any person has the right to have their personal information to not be told or shown to anyone.

Confidentiality means that there is a duty to keep your personal information private and protected.

If you would like to know more information or you have a question, please ask our staff.

This document is about your privacy. This document will tell you:

what we know about you
why we know things about you
how we will use what we know
how we will keep what we know safe
what we do when your personal information has been accessed without your consent.

There are laws to protect your personal information.

Personal information is anything that is about you. This could be:

We will keep your information private.

This means we will not tell people your personal information unless we have to.

You do not have to give us your personal information.

If you choose not to give us personal information we may not be able to give you services you need.

The personal information we keep might include:

Sometimes your personal information is sensitive information.

Sensitive information is normally private and can include:

We also keep personal information on:

We will not tell anyone about your personal information unless we have to.

The NDIS Commission might need the information to keep you safe.

We will use your personal information to help us provide the best services and supports.

We might need to tell other people about you because they give you the supports you need.

You need to give consent for us to tell other people your personal information. Consent means you say ‘yes’.

We might give other people your information when you have not given consent if:

You can ask us any time about the personal information we keep about you.

You can request a copy of your personal records.

We keep paper records safe in our offices under lock and key.

We keep your personal information stored on computers protected with a password.

Only staff who provide supports and services to you can see your personal information.

We only keep your personal information as long as we need it.

We destroy your personal information when we no longer need it

When someone has accessed your personal information without our permission and without your consent, this is called a data breach.

If a data breach happens:

Source: NDIS.GOV.AU