Privacy and Data Protection

Privacy and Data Protection Act 2014

The purpose of the Privacy Data Protection Act 2014 is to provide for the responsible collection, handling, securing and protecting of personal information. It also establishes a regime to monitor and assure the public sector's data security processes, and establish the Commissioner for Privacy and Data Protection.

What is personal information?

Personal information means information or an opinion (including information or an opinion forming part of a database), that is recorded in any form and whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion, but does not include information of a kind to which the Health Records Act 2001 (the HRA) applies.

Some personal information is classed as ‘sensitive information’. Sensitive information is information about a person’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or trade union, sexual preferences or practices and criminal history.

What is health information?

Health Information is defined in the HRA as:

• Information or an opinion about:

- the physical, mental or psychological health (at any time) of an individual; or –

- a disability (at any time) of an individual; or

- an individual's expressed wishes about the future provision of health services to him or her; or

- a health service provided, or to be provided, to an individual – 

that is also personal information; or 

• other personal information collected to provide, or in providing, a health service; or

• other personal information about an individual collected in connection with the donation, or intended donation, by the individual of his or her body parts, organs or body substances; or

• other personal information that is genetic information about an individual in a form which is or could be predictive of the health (at any time) of the individual or of any of his or her descendants

Maribyrnong City Council Privacy Policy

The Privacy and Data Protection Act 2014 and the Health Records Act 2001 have informed Council's Privacy Policy, a copy of the Policy can be accessed below.

Access to and correction of personal information

Should you wish to access your personal information, or feel aggrieved by Council's handling of your personal information, please contact Council's Privacy Officer on 9688 0200.

Access to your personal information will be provided except in the circumstances outlined in the Privacy and Data Protection Act 2014, for example, where the information relates to legal proceedings or where the Freedom of Information Act 1982 applies.