• Section 1 - Policy
• Section 2 - Introduction
• Section 3 - Right to Access Personal Information Held About You
• Section 4 - Exceptions to the Right to Access Information Held About You
• Section 5 - Right to Request Correction of Personal Information Held About You
• Section 6 - Access and Correction Requests
• Section 7 - Lodging Complaints
• Section 8 - Updates to this Procedure
• Section 9 - Contact Details

Section 1 - Policy

(1) This Procedure is governed by the Privacy Policy.

Section 2 - Introduction

(2) ACU is committed to managing personal information in an open and transparent way.

(3) Personal information is information in any form about or an opinion about any identifiable individual.

(4) The University is a registered company and is subject to the requirements of the Privacy Act 1988 (Cth) (the Act). As required by the Act, the University has adopted a Privacy Policy which details how ACU manages personal information in accordance with the Australian Privacy Principles (APPs).

(5) Specific terms defined in clause (9) of the Privacy Policy have the same meaning wherever they appear in this Procedure.

Section 3 - Right to Access Personal Information Held About You

(6) In general, you have a right under the Act to access personal information ACU holds about you, although there are some exceptions to this right.

Section 4 - Exceptions to the Right to Access Information Held About You

(7) The exceptions are:

1. in cases where ACU reasonably believes that giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
2. giving access would have an unreasonable impact on the privacy of other individuals;
3. the request for access is frivolous or vexatious;
4. the information relates to existing or anticipated legal proceedings between ACU and the individual, and would not be accessible by the process of discovery in those proceedings;
5. giving access would reveal ACU’s intentions in relation to negotiations with the individual in such a way as to prejudice those negotiations;
6. giving access would be unlawful;
7. denying access is required or authorised by or under an Australian law or a court / tribunal order;
8. ACU has reason to suspect that unlawful activity, or misconduct of a serious nature that relates to its functions or activities has been, is being, or may be engaged in, and giving access would be likely to prejudice the taking of appropriate action in relation to the matter;
9. giving access would be likely to prejudice one or more enforcement related activities conducted by or on behalf of an enforcement body; and
10. giving access would reveal evaluative information generated within ACU in connection with a commercially sensitive decision-making process.

(8) If ACU determines that because of one of these exceptions it cannot provide you with access to your personal information it will inform you of this in writing, giving reasons for its decision and advising you about how you can complain about that decision.

Section 5 - Right to Request Correction of Personal Information Held About You

(9) You have a right under the Act to request corrections to any personal information that ACU holds about you if you think that information is inaccurate, out-of-date, incomplete, irrelevant or misleading.

(10) When ACU receives such a request it will take all reasonable steps in the circumstances to ensure that, having regard to the purpose for which it is held, the information is accurate, up-to-date, complete, relevant and not misleading.

(11) If ACU is unable to or determines that it should not make the correction you request, it will inform you of this in writing, giving reasons for its decision and advising you about how you can complain about that decision.

(12) If ACU refuses or is unable to correct the personal information for any reason it will if you request, take reasonable steps to associate with the information a statement from you noting that the information is inaccurate, out-of-date, incomplete, irrelevant or misleading in such a way as to make that statement apparent to users of the information.

Section 6 - Access and Correction Requests

(13) To access or seek correction to personal information ACU holds about you contact the Privacy Coordinator using the contact details below.

Section 7 - Lodging Complaints

(14) To complain about a refusal to provide access to and correction of personal information ACU holds about you, contact the Privacy Coordinator using the contact details below.

(15) Your complaint will be handled in accordance with the Privacy Inquiry and Complaints Procedure by someone who was not involved in the decision about which you are complaining.

(16) If ACU does not respond to your complaint within 30 days or if you are dissatisfied with ACU’s response to your complaint you may make a complaint to the Office of the Australian Information Commissioner (OAIC).

(17) To make a complaint to the OAIC follow the details for making a privacy complaint outlined on the OAIC website.

Section 8 - Updates to this Procedure

(18) This Procedure will be reviewed frequently and updated as required.

(19) Unless otherwise indicated, this Procedure will still apply beyond the review date.

Section 9 - Contact Details

(20) Contact for all matters related to privacy, including:

1. general inquiries;
2. accessing personal information held about you;
3. requests to correct personal information held about you; and
4. complaints about breaches of privacy should be directed as follows: