The purpose of this policy and procedure is to ensure that Empowering Connection protects the privacy and confidentiality of participants, staff and other stakeholders and manages personal and sensitive information appropriately.

This policy and procedure applies to all staff and meets relevant legislation, regulations and standards.

Applicable NDIS Practice Standards

Information Management

Outcome

Each participant’s information is managed appropriately and securely.

Indicators

• Policies and procedures are in place to ensure personal information is collected, used, disclosed, stored and destroyed in accordance with relevant legislation.
• Participants are informed about how their personal information is collected, used, stored and shared.
• Systems are in place to protect information from loss, unauthorised access, misuse or disclosure.
• Information is accurate, complete and up to date.

Definitions

Personal information

Information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and whether recorded in a material form or not.

Sensitive information

Information about an individual’s health, disability, racial or ethnic origin, religious beliefs, sexual orientation or criminal history.

Confidential information

Information provided in circumstances where it is reasonable to expect that the information will not be disclosed to others without consent.