Privacy Policy
When dealing with personal or health information about individuals, the CRC is obliged to comply with
the National Privacy Principles under the Privacy Act 1988 (Commonwealth) and applicable State
legislation. In this policy a reference to “information” includes both “health information” and “personal
information”.
The CRC's Privacy Officer is the Chief Operations Officer, Ms Robyn McLachlan. Enquiries and
complaints may be lodged with the Privacy Officer.
Personal information means information or an opinion (including information or an opinion forming
part of a database), whether true or not, and whether recorded in a material form or not, about an
individual whose identity is apparent, or can reasonably be ascertained, from the information or
opinion, but does not include health information.
Health information means information or an opinion about:
-
the physical, mental or psychological health (at any time) of an individual; or
-
a disability (at any time) of an individual; or
-
an individual's expressed wishes about the future provision of health services to him or her; or
-
a health service provided, or to be provided, to an individual, that is also personal information; or
-
other personal information collected to provide, or in providing, a health service; or
-
other personal information about an individual collected in connection with the donation, or
-
intended donation, by the individual of his or her body parts, organs or body substances; or
-
other personal information that is genetic information about an individual in a form which is or
-
could be predictive of the health (at any time) of the individual or of any of his or her
-
descendants.
Collection
The CRC is constrained by the Acts to collect information only where it is necessary for one or more
of our research functions or activities. When we collect information about an individual, we will take
reasonable steps to inform the individual of:
-
the purposes for which the information is collected; and
-
to whom the CRC usually discloses information of that kind; and
-
any law that requires the particular information to be collected; and
-
the main consequences (if any) for you if all or part of the information is not provided.
Some personal information, such as information about an individual’s ethnicity or religious beliefs,
may be regarded as “sensitive information”. We will only collect sensitive or health information with
consent of the individual concerned, or as otherwise allowed by the Acts, or as required or authorised
by or under law.
Use & Disclosure
The CRC will only use or disclose information:
-
for the purpose for which it was collected (the primary purpose);
-
for a secondary purpose that:
-
is related to the primary purpose and, if the personal information is sensitive information, or health information directly related to the primary purpose; and
-
the individual would reasonably expect;
-
where there is consent of the individual concerned to the use or disclosure; or
-
as otherwise allowed under the Acts, or required or authorised by or under law.
When a node of the CRC collects information, the purposes for which the information is collected will
usually be made clear on any forms that are to be completed, or will be apparent from the
circumstances. When required, we will seek your consent to use your information in a particular way.
If you require more specific information about the way in which your information is used or disclosed,
please contact the relevant node or the CRC’s Privacy Officer.
Accuracy of Information
The CRC will take reasonable steps to ensure that the information we hold is accurate and complete.
Security of Information
The CRC will take reasonable steps to protect information from misuse, loss, unauthorised access,
modification or disclosure. Information will be destroyed if it is no longer needed for any legitimate
purpose.
Access & Correction
Access and correction of your information is handled by the CRC in accordance with the National
Privacy Principles. | 
