personal information
📖 O que é personal information? Significado e conceito
In Australia, 'personal information' is a key concept in privacy law, especially under legislation like the Privacy and Personal Information Protection Act 1998 (NSW). This term covers any data, pictures, or other material that directly points to an individual or could reasonably be used to figure out who they are. The protection of personal information is crucial, and its handling is governed by specific rules known as Information Protection Principles (IPPs).
When an organisation or agency holds personal information, there are strict guidelines about how it can be used, disclosed, and kept secure. For instance, disclosing someone's personal information unlawfully can be a breach of these principles, leading to actions to remedy the damage caused. This might involve notifying those who received the information that it was provided improperly and requesting its deletion.
The legal framework aims to prevent unauthorised access, use, or sharing of personal details. Cases often involve assessing whether information was handled in accordance with the IPPs, particularly concerning its disclosure. The administrative nature of certain functions, such as those performed by the NSW Police Force, may sometimes lead to exemptions from specific privacy laws, but the core concept of protecting identifying information remains central.
📋 Requisitos
- The information must identify a person or be likely to lead to the identification of a person.
- The information is subject to Information Protection Principles (IPPs) regarding its use, disclosure, and security.
- Unlawful disclosure of such information constitutes a breach of privacy principles.
📝 Procedimento
- An organisation or agency discloses personal information.
- A complaint is made regarding the unlawful disclosure or handling of personal information.
- A tribunal or court determines if a breach of Information Protection Principles (IPP) occurred.
- If a breach is found, orders may be made to remedy the damage, such as notifying recipients of the unlawful disclosure and requesting deletion of the information.
💡 Exemplos
- A government department unlawfully shares a person's contact details with an unauthorised third party, breaching privacy principles.
- A company discloses an individual's financial records to another entity without proper consent, leading to a privacy complaint.
- A public body is ordered to inform recipients that personal details they received were unlawfully provided and to request their deletion from all records.
- A tribunal prohibits the publication of an applicant's name or any identifying information in proceedings to protect their privacy.
📚 Base legal
- Privacy and Personal Information Protection Act 1998 (NSW)
- Civil and Administrative Tribunal Act 2013 (NSW)
- Health Records and Information Privacy Act 2002
- Administrative Decisions Review Act 1997 (NSW)
❓ Perguntas frequentes
What kind of information is considered 'personal information'?
It includes any details that can identify you, such as your name, address, or even a picture, or any other material that could reasonably lead to your identification.
Can my personal information be shared without my permission?
Generally, no. The law sets out specific rules, called Information Protection Principles, about when and how your personal information can be used or disclosed. Unlawful disclosure is a breach of these principles.
What happens if my personal information is unlawfully disclosed?
If your personal information is unlawfully disclosed, a tribunal may order the organisation responsible to take steps to remedy the damage, such as notifying those who received the information and asking them to delete it.
Are there any situations where privacy laws don't apply to personal information?
Yes, some entities or functions, like certain administrative functions of the NSW Police Force, may have exemptions from specific privacy laws, as seen in some legal cases.
How can I find out if an organisation has my personal information?
You generally have a right to access your personal information held by organisations. You would typically make a request directly to the organisation, often under freedom of information or privacy legislation.
What should I do if I believe my personal information has been misused?
If you believe your personal information has been misused or unlawfully disclosed, you can lodge a complaint with the relevant privacy commissioner or tribunal. It may also be beneficial to seek advice from a qualified solicitor.