Employee Obligations

Below is a summary of our obligations under the Privacy Laws: 

• Collection
  Columbia Aged Care must only collect personal information as is necessary to fulfil the organisation’s lawful functions.  

• Use and disclosure
  Personal information must only be used and disclosed by Columbia Aged Care for the primary purpose for which it was collected, unless it is for a secondary purpose that the client would reasonably expect, or for which they have given consent. In some circumstances the law allows some uses and disclosures without a person’s consent, such as to protect their safety.  

• Data quality
  Columbia Aged Care must ensure the personal information it collects is accurate, complete and up to date. 

• Data security
  Columbia Aged Care must ensure that the personal information it holds is safeguarded against potential misuse, loss, unauthorised access, modification or disclosure.  

• Openness
  Columbia Aged Care must establish a privacy policy which is publicly available and implement these procedures to apply to the way in which it manages the personal information it holds. 

• Access and correction
  A person has the right to request access to their own personal information and to seek corrections if necessary, and Columbia Aged Care must facilitate this. 

• Government related identifiers
  Columbia Aged Care must not assign a unique government identifier to an individual except in accordance with the exception provisions under the Privacy Laws. 

• Anonymity
  Where lawful and feasible, persons will have the option of transacting with Columbia Aged Care without identifying themselves and Columbia Aged Care must support this principle where possible and practical. 

• Disclosure of information outside Australia
  Columbia Aged Care may disclose personal information about an individual outside of Australia only in accordance with the Privacy Laws. 

• Sensitive information
  Columbia Aged Care must not collect sensitive information about an individual except in accordance with the Privacy Laws. 

Non-compliance with the Privacy Policies places Columbia Aged Care at serious risk of legal liability and reputational damage. All employees and contractors of Columbia Aged Care, including any subsidiaries or associated companies must ensure they adhere to the procedures set out on this website, on the staff portal and in any related documents such as your employment contract and our Code of Conduct.

Any incidents of non-compliance with the Privacy Policies should be reported to the Facility Manager and privacy@cnh.com.au immediately. 

Incidents of wilful non-compliance with this Policy are considered to be serious and will be dealt with in accordance with Columbia Aged Care’s normal performance management process, which may include dismissal.