Information Privacy Act
The Victorian Privacy Act 2000 sets standards for the way Victorian government organisations, statutory bodies and local councils collect and handle personal information. The Information Privacy Principles (IPPs) are the practical core of the Information Privacy Act. The Act came into full effect September 1, 2002.
What is personal information?
What is sensitive information?
What are the Information Privacy Principles?
What should I do if my privacy has been breached?
Personal information means recorded information or opinion, whether true or not, about an identifiable individual.
Personal information can be almost any information linked to an individual including name, address, gender, age, financial details, marital status, education, criminal record or employment history.
Sensitive information includes your racial or ethnic origin, political views, religious beliefs, sexual preferences, membership of groups or criminal record. The law puts special restrictions on the collection of this information.
This is a short summary of the Information Privacy Principles.
1. Collection: A Government organisation can only collect your personal information if it is necessary to fulfil the organisation's function.
2. Use and Disclosure: Your personal information should be used and disclosed for primary purpose for which it was collected unless it is for a secondary purpose that you would reasonably expect, Or your consent may be requested. The law also allows some uses and disclosures without consent such as to protect safety.
3. Data Quality: Organisation must keep your personal information accurate, complete and up to date.
4.Data Security: Personal information must be protected from misuse, loss and unauthorised access, modification or disclosure.
6.Access and Correction: You have a right to seek access to your own personal information and to seek corrections if necessary. Access and correction will be handled mostly under the Victorian Freedom of Information Act.
7. Unique Identifiers: Unique identifiers, usually a number, can facilitate data matching. Use of unique identifiers by organisations is only allowed under certain conditions.
8. Anonymity: Where lawful and feasible, you should have the option of transacting with an organisation without identifying yourself.
9. Transborder Data Flows: If your personal information travels outside Victoria, your privacy protection should travel with it.
10. Sensitive information: This includes your racial or ethnic origin, political views, religious beliefs, sexual preferences, membership of groups or criminal record. The law puts special restrictions on the collection of this information.
If you believe we have breached one or more of the Information Privacy Principles, you should attempt to resolve the matter with us first. Contact our Privacy Officer or write to us explaining the situation and how you would like it to be resolved.
If you are not satisfied with our response, you may complain directly to the Privacy Commissioner. The Commissioner will make all reasonable efforts to conciliate your complaints. Where conciliation is not reasonably possible, or is tried but fails, complaints may go to the Victorian Civil and Administrative Tribunal.
For more information contact Information Management on 1300 368 333 or email