120 likes | 237 Views
Office of the Ombudsman and Health Complaints Commissioner. Information Security and the Personal Information Protection Act 2004 Leon Atkinson-MacEwen September 2013. Office of the Ombudsman and Health Complaints Commissioner Ground floor, 99 Bathurst Street, Hobart TAS 7000
E N D
Office of the Ombudsman and Health Complaints Commissioner Information Security and the Personal Information Protection Act 2004 Leon Atkinson-MacEwen September 2013
Office of the Ombudsman and Health Complaints Commissioner Ground floor, 99 Bathurst Street, Hobart TAS 7000 GPO Box 960, Hobart TAS 7001 Phone 1800 001 170 (freecall from landlines, check mobile carrier) Email ombudsman@ombudsman.tas.gov.au
PIP Act • Definitions • Application of the Act • PIP Principles (detailed in Schedule 1) • Amendment of Personal Information • Complaints and Investigation (Ombudsman) • Schedule 1 – PIP Principles
what is personal information? • personal information means any information or opinion in any recorded format about an individual – • (a) whose identity is apparent or is reasonably ascertainable from the information or opinion; and • (b) who is alive or has not been dead for more than 25 years; Taken from section 3 of the Personal Information Protection Act 2004
Personal Information Protection Principles • Collection • Use and Disclosure • Data Quality • Data Security • Openness • Access and Correction • Unique Identifiers • Anonymity • Disclosure of information outside Tasmania • Sensitive information
IS Principles vs. PIP Principles Availability Information is accessible and useable to authorised entities. • #2: Use and Disclosure • #4: Data Security • #5: Openness • #6: Access and Correction Information Security Policy Principle Personal Information Protection Principles
IS Principles vs. PIP Principles Integrity The accuracy and completeness of information is protected. • #3: Data Quality • #5: Openness • #6: Access and Correction Information Security Policy Principle Personal Information Protection Principles
IS Principles vs. PIP Principles Confidentiality Information is not made available or disclosed to unauthorised individuals, entities or processes. • #2: Use and Disclosure • #5: Openness Information Security Policy Principle Personal Information Protection Principles
IS Principles vs. PIP Principles Proportionality Measures to protect information are relative to the risk of loss or failure of availability, integrity and confidentiality. • #4: Data Security • #5: Openness Information Security Policy Principle Personal Information Protection Principles
Questions Information Security and the Personal Information Protection Act 2004 Leon Atkinson-MacEwen