St Cuthbert's College · Ki Hea Koe
Privacy ABC
A practical introduction to the Privacy Act 2020, set in the situations we actually meet at school — in the classroom, the boarding house, the health centre and in our contact with families.
1Scope of the Act
Privacy at school and at home
Who the Privacy Act applies to, and where the line sits between the school's obligations and your private life.
2What counts as personal information
Defining personal information
Personal information is anything that could identify a person — and it rarely needs a name attached.
3IPP 1 — Purpose of collection
When you can collect personal information
Only collect personal information for a lawful purpose connected to what the school actually does.
4IPP 3 — Collection from the individual
What to tell people when you collect their information
Be open about what you collect, why, who sees it, and what happens if it isn't provided.
5IPP 4 — Manner of collection
Limits on collecting information
Even for a good reason, collection must be fair, reasonable and not unreasonably intrusive.
6IPP 5 — Storage and security
Storing information safely
Take reasonable steps to keep information safe — and the more sensitive it is, the more you must do.
7IPP 6 — Access
Seeing your own personal information
People have a right to see the information the school holds about them, with limited grounds to withhold.
8IPP 7 — Correction
Making changes to your personal information
People can ask the school to correct information about them — and the school must review, then correct or attach a statement.
9IPP 8 — Accuracy before use
Keeping information accurate
Before the school uses information, it must take reasonable steps to check it is accurate, up to date and complete.
10IPPs 10, 11 & 12 — Use, disclosure, and overseas
Using and sharing information
Use and share information only for the purpose it was collected — with limited exceptions, and extra rules for sending it overseas.
11IPP 9 — Retention
Holding onto information
Don't keep personal information for longer than you need it for the purpose it was collected.
12IPP 13 — Unique identifiers
Using unique identifiers
Only assign identifiers the school genuinely needs, don't borrow another agency's, and confirm who someone is before assigning one.
About this course. It adapts the Office of the Privacy Commissioner's Privacy ABC programme for St Cuthbert's. The 13 information privacy principles are the same ones the OPC teaches; only the examples have been rewritten for our context. Health and counselling examples are also governed by the Health Information Privacy Code (HIPC) 2020. Every person in these scenarios is fictional.