1. Scope

This policy applies to members of school staff and the school council at The School for Student Leadership. This policy will be made available on request.

2. Authorisation

This policy was adopted at The School for Student Leadership council meeting on 11th November 2009.

3. Review date

This policy shall be reviewed at the August 2011 School Council meeting and updated if required.

4. Background

All staff members of The School for Student Leadership are required by law to protect the personal and health information the school collects and holds.

The Victorian privacy laws, the Information Privacy Act 2000 and the Health Records Act 2001, provide for the protection of personal and health information.

The privacy laws do not replace any existing obligations The School for Student Leadership has under other laws. Essentially this policy will apply when other laws do not regulate the use of personal information.

5. Definitions

Personal information means information or opinion that is recorded in any form and whether true or not, about an individual whose identity is apparent, or can be reasonably determined from the information or opinion. For example, this includes all paper and electronic records, photographs and video recordings.

Health information is defined as including information or opinion about a person’s physical, mental or psychological health, or disability, which is also classified as personal information. This includes information or opinion about a person’s health status and medical history, whether recorded or not.

Sensitive information is defined as information relating to a person’s racial or ethnic origin, political opinions, religion, trade union, or other professional, or trade association membership, sexual preferences, or criminal record that is also classified as personal information about an individual.

In this policy personal information refers to personal information, health information and sensitive information unless otherwise specified.

Parent in this policy in relation to a child, includes step parent, an adoptive parent, a foster parent, guardian, or a person who has custody or daily care and control of the child.

Staff in this policy is defined as someone who carries out a duty on behalf of the school, paid or unpaid, or who is contracted to, or directly employed by the school or the Department of Education and Early Childhood Development. Information provided to a school through job applications is also considered staff information.

6. Policy context

Personal information is collected and used by The School for Student Leadership to:

• provide services or to carry out the school’s statutory functions
• assist the school services and its staff to fulfil its duty of care to students
• plan, resource, monitor and evaluate school services and functions
• comply with DEECD reporting requirements
• comply with statutory and or other legal obligations in respect of staff
• investigate incidents or defend any legal claims against the school, its services, or its staff, and
• comply with laws that impose specific obligations regarding the handling of personal information.

7. Collection of personal information

The school collects and holds personal information about students, parents and staff.

8. Use and disclosure of the personal information provided

Students and parents

8.1 The purposes for which the school uses personal information of students and parents include:

• keeping parents informed about matters related to their child’s schooling
• looking after students’ educational, social and health needs
• celebrating the efforts and achievements of students
• day-to-day administration • satisfying the school’s legal obligations, and
• allowing the school to discharge its duty of care.

Staff

8.2 The purposes for which the school uses personal information of job applicants, staff members and contractors include:

• assessing suitability for employment
• administering the individual’s employment or contract
• for insurance purposes, such as public liability or WorkCover
• satisfying the school’s legal requirements, and
• investigating incidents or defending legal claims about the school, its services, or staff.

8.3 The school will use and disclose personal information about a student, parent and staff when:

• it is required for general administration duties and statutory functions
• it relates to the purposes for which it was collected, and
• for a purpose that is directly related to the reason the information was collected and the use would be reasonably expected by the individual and there is no reason to believe they would object to the disclosure.

8.4 The school can disclose personal information for another purpose when:

• the person consents, or
• it is necessary to lessen or prevent a serious or imminent threat to life, health or safety, or
• is required by law or for law enforcement purposes.

9. Where consent for the use and disclosure of personal information is required, the school will seek consent from the appropriate person. In the case of a student’s personal information, the school will seek the consent from the student and/or parent depending on the circumstances and the student’s mental ability and maturity to understand the consequences of the proposed use and disclosure.

10. Accessing personal information

A parent, student or staff member may seek access to their personal information, provided by them, that is held by the school.

Access to other information maybe restricted according to the requirements of laws that cover the management of school records. These include the Public Records Act and the Freedom of Information Act.

11. Updating personal information

The school aims to keep personal information it holds accurate, complete and up-to-date. A person may update their personal information by contacting the Principal, Mark Reeves.

12. Security

12.1 School staff and students have use of information and communications technologies (ICT) provided by the school. This use is directed by:

• DEECD acceptable use policy for Internet, email and other electronic communications
• DEECD security policy.

Web sites

12.2 Information collected

The School for Student Leadership web and web server makes a record of:

• Domain the person has come from or the IP address of that person who visits our site.
• Most popularly visited pages in our site and the domain name of the people who visited the page.
• The part of our web page that people most commonly enter, and the last page a person will most commonly visit before leaving.
• Webpage statistics including a graph of the country of origin of the visitor.
• All sites visited from within the school and the user name that has been used.
• The Internet protocol (IP) address of the machine connecting to the website.

13. Complaints under privacy

Should the school receive a complaint about personal information privacy this will be investigated in accordance with the DEECD privacy complaints handling policy.