The Information Privacy Act

Monash University is required to comply with the Information Privacy Act (Vic) 2000.

Objects of the Information Privacy Act

The objects of the Information Privacy Act are to:

• Balance the public interest in the free flow of information with the public interest in respecting privacy and protecting personal information in the public sector; and
• Promote the responsible and transparent handling of personal information in the public sector and promote awareness of these practices.

Compliance with the Information Privacy Act

The Act took effect from the 1st September 2001, with individuals being able to lodge complaints with the Office of the Victorian Privacy Commissioner from 1st September 2002.

With limited exemptions, all Victorian government agencies, statutory bodies and local councils must comply with the IPP's. Monash University is required to comply because the Act applies to ‘a body established or appointed for a public purpose by or under an Act’. Monash University is established by the Monash University Act 1958.

The Act contains ten Information Privacy Principles (IPP's) which are the central part of the laws.

Relevant Definitions

The Information Privacy Act applies to two types of information:

Personal Information: basically means recorded information or opinion, whether true or not, about an identifiable individual. It also includes information from which the identity of the individual can be reasonably ascertained. Examples: name, address, telephone number, title.

Sensitive Information: racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record that is also personal information.