Our privacy obligations
Like all NSW public sector agencies, the Lifetime Care and Support Authority is bound to comply with two Acts which protect privacy:
- the Privacy and Personal Information Protection Act 1998, and
- the Health Records and Information Privacy Act 2002
These two laws establish a number of privacy principles, as well as exemptions to those principles.
The types of personal information we hold
So that our LTCS coordinators can advise potential applicants about applying for participation in the Lifetime Care and Support Scheme, our LTCS coordinators need to know information about the potential applicant's motor accident, and the extent of their injuries. This may include collecting information from other people, including the person's health service providers, or other people involved in the motor accident.
So that we can determine whether or not a person is eligible to become a participant of the Lifetime Care and Support Scheme, we need to know more information about the applicant's motor accident, and the extent of their injuries. This may include information collected from or about other people involved in the motor accident, including other parties and witnesses. We may also collect information about the accident from police, ambulance officers and insurance companies. We may need to share this information with the Motor Accidents Authority, our legal advisers and/or insurance companies. We will also collect health information about the applicant from other people, including their health service providers. We may need to share this information with external medical assessors.
So that we can run the Lifetime Care and Support Scheme, we also need to know information about participants' housing, caring and support situation. This may include information collected from or about other people involved in the participants' life, such as their family, friends and carers.
We also hold personal information about our staff and our contractors.
Our privacy promise to you
Our privacy promise is that we will aim for best practice in the handling of personal information, by following the privacy principles below unless authorised by law to depart from them.
Limiting our collections
We will only collect personal information if:
- it is for a lawful purpose that is directly related to one of our functions, and
- it is reasonably necessary for us to have the information
How we collect personal information
- We will collect personal information directly from the person unless it is authorised, unreasonable or impractical
- We will not collect personal information by unlawful means
- We will not collect personal information that is intrusive or excessive
- We will ensure that the personal information we collect is relevant, accurate, up-to-date, complete, and not misleading
Notification when collecting
When collecting personal information, we will tell the person:
- who will hold and/or have access to their personal information
- what it will be used for
- what other organisations (if any) routinely receive this type of personal information from us
- how the person can access their personal information held by us
- whether the collection is required by law
- what the consequences will be for the person if they do not provide the information to us
Security safeguards
- We will take reasonable security measures to protect personal information from loss, unauthorised access, use, modification or disclosure
- We will ensure personal information is stored securely, not kept longer than necessary, and disposed of appropriately.
Transparency
We will enable anyone to know:
- whether we are likely to hold their personal information
- the purposes for which we use personal information
- how they can access their own personal information
Access
- We will allow people to access their personal information without unreasonable expense or delay
- We will only refuse access where authorised by law, and we will provide written reasons
Correction
- We will allow people to update or amend their personal information, to ensure it is accurate, relevant, up-to-date, complete or not misleading
- Where possible, we will notify any other recipients of any changes
- You can let us know if you need your address suppressed
Accuracy
Before using personal information, we will take appropriate steps to ensure that the information is relevant, accurate, up-to-date, complete, and not misleading
Use and disclosure
We will use or disclose sensitive personal information only for the primary purpose for which it was collected, unless one of these apply:
- the person has consented
- to deal with a serious and imminent threat to any person
- where authorised or required by another law
Where the personal information is not 'sensitive', we may also use or disclose it:
- for a directly related secondary purpose within the reasonable expectations of the person
In addition, we will only disclose health information outside NSW in limited circumstances.
Unique identifiers
- We will only identify people by using unique identifiers if it is reasonably necessary for our functions
- We will only use government-issued identifiers (like unique patient numbers) as our own where required by law or with the person's consent
Anonymity
We will allow people to receive services from us anonymously, where lawful and practicable.
More information
For more information about privacy law in NSW, contact Privacy NSW on (02) 9228 8585, or see their website: www.lawlink.nsw.gov.au/privacynsw
Questions?
If you have a query about how we handle privacy matters, contact our Privacy Officer by:
| Phone: |
1300 738 586 |
| Fax: |
1300 738 583 |
| Email: |
enquiries@lifetimecare.nsw.gov.au |
| Mail: |
The Privacy Officer
Lifetime Care and Support Authority
Level 24, 580 George Street
SYDNEY NSW 2000 |