{"id":3,"date":"2023-04-24T05:05:18","date_gmt":"2023-04-24T05:05:18","guid":{"rendered":"https:\/\/clrs.org.au\/?page_id=3"},"modified":"2025-10-23T12:13:22","modified_gmt":"2025-10-23T02:13:22","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/clrs.org.au\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"141\" src=\"https:\/\/clrs.org.au\/wp-content\/uploads\/2025\/10\/Screenshot-2025-10-23-at-11.23.47-am-1024x141.png\" alt=\"\" class=\"wp-image-4575\" srcset=\"https:\/\/clrs.org.au\/wp-content\/uploads\/2025\/10\/Screenshot-2025-10-23-at-11.23.47-am-1024x141.png 1024w, https:\/\/clrs.org.au\/wp-content\/uploads\/2025\/10\/Screenshot-2025-10-23-at-11.23.47-am-300x41.png 300w, https:\/\/clrs.org.au\/wp-content\/uploads\/2025\/10\/Screenshot-2025-10-23-at-11.23.47-am-768x105.png 768w, https:\/\/clrs.org.au\/wp-content\/uploads\/2025\/10\/Screenshot-2025-10-23-at-11.23.47-am.png 1122w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PRIVACY<\/strong><\/h2>\n\n\n\n<p><strong>POLICY<\/strong><\/p>\n\n\n\n<p>Community Living &amp; Respite Services (CLRS) will use all reasonable efforts to protect the privacy of individuals\u2019 personal information and to comply with the obligations imposed by the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles (APP) and all relevant legislation.<\/p>\n\n\n\n<p><strong>SCOPE<\/strong><\/p>\n\n\n\n<p>This police applies to all clients, employees, labour hire staff, volunteers and students of CLRS.<\/p>\n\n\n\n<p><strong>Purpose of Policy<\/strong><\/p>\n\n\n\n<p>The purpose of this policy is to:<\/p>\n\n\n\n<p>\u2022 Ensure personal information is managed in an open and transparent way;<\/p>\n\n\n\n<p>\u2022 Protect the privacy of personal information including Health Information of clients and staff;<\/p>\n\n\n\n<p>\u2022 Provide for the fair collection and handling of personal information;<\/p>\n\n\n\n<p>\u2022 Ensure that personal information we collect is used and disclosed for relevant purposes only;<\/p>\n\n\n\n<p>\u2022 Regulate the access to and correction of personal information;<\/p>\n\n\n\n<p>\u2022 Ensure the confidentiality of personal information through appropriate storage and security; and<\/p>\n\n\n\n<p>\u2022 Ensure reporting requirements under Department of Health and Human Services<\/p>\n\n\n\n<p>Client Incident Management System are met.<\/p>\n\n\n\n<p><strong>DEFINITIONS<\/strong><\/p>\n\n\n\n<p><strong>Staff\/ Staff Member<\/strong> refers to employees, labour hire staff, volunteers and Students of CLRS.<\/p>\n\n\n\n<p><strong>Employment <\/strong>refers to employment, volunteering or placement.<\/p>\n\n\n\n<p><strong>Personal Information<\/strong> refers to information or an opinion, wheth.er true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.<\/p>\n\n\n\n<p><strong>Sensitive Information<\/strong> refers to information or an opinion about an individual\u2019s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record, biometric information, biometric templates, health information about an individual and genetic information.<\/p>\n\n\n\n<p><strong>Health Information<\/strong> refers to information or an opinion about:<\/p>\n\n\n\n<p>\u2022 the health or a disability (at any time) of an individual; or<\/p>\n\n\n\n<p>\u2022 an individual\u2019s expressed wishes about the future provision of health services to him or her; or<\/p>\n\n\n\n<p>\u2022 a health service provided, or to be provided, to an individual that is also personal information; or<\/p>\n\n\n\n<p>\u2022 other personal information collected to provide, or in providing, a health service;<\/p>\n\n\n\n<p>\u2022 other personal information about an individual collected in connection with the donation, or intended donation, by the individual of his or her body parts, organs or body substances; or<\/p>\n\n\n\n<p>\u2022 genetic information about an individual in a form that is, or could be, predictive of the health of the individual or a genetic relative of the individual.<\/p>\n\n\n\n<p><strong>Likely<\/strong> refers to more probable than not (rather than a possibility), under the judgment of a reasonable person in the entity\u2019s position.<\/p>\n\n\n\n<p><strong>Responsible person<\/strong> refers to a parent, a child or sibling, a spouse, a relative, a member of the individual\u2019s household, a guardian, an enduring power of attorney, a person who has an intimate personal relationship with the individual, or a person nominated by the individual to be contacted in case of emergency, provided they are at least 18 years of age.<\/p>\n\n\n\n<p><strong>Serious harm <\/strong>refers to physical, psychological, emotional, financial and reputational harm (being upset is insufficient). Three main factors affect whether harm is serious:<\/p>\n\n\n\n<p>\u2022 the type(s) of information involved;<\/p>\n\n\n\n<p>\u2022 the circumstances of the breach; and<\/p>\n\n\n\n<p>\u2022 the nature of harm that might arise.<\/p>\n\n\n\n<p><strong>Staff \/ Employee Record<\/strong> refers to a record of personal information relating to the employment of the staff member. Examples of personal information relating to the employment of the staff member are all or any of the following:<\/p>\n\n\n\n<p>\u2022 The engagement, training, disciplining or resignation of the employee;<\/p>\n\n\n\n<p>\u2022 The termination of the employment of the employee;<\/p>\n\n\n\n<p>\u2022 The terms and conditions of employment of the employee;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s personal and emergency contact details;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s performance or conduct;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s hours of employment;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s salary or wages;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s membership of a professional or trade association;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s trade union membership;<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s recreation, long service, sick, personal, maternity, paternity or other leave; and<\/p>\n\n\n\n<p>\u2022 The staff member\u2019s taxation, banking or superannuation affairs.<\/p>\n\n\n\n<p><strong>Unsolicited Information<\/strong> refers to all personal information received from an individual that we did not actively seek to collect.<\/p>\n\n\n\n<p><strong>PROCEDURE<\/strong><\/p>\n\n\n\n<p><strong>Collection of personal information<\/strong><\/p>\n\n\n\n<p>We will only collect Personal Information about an individual by fair and lawful means and only if the information is necessary for one or more of our functions as an aged care provider and collection of the <\/p>\n\n\n\n<p>Personal Information is necessary to:<\/p>\n\n\n\n<p>\u2022 Comply with the provisions of state or commonwealth law;<\/p>\n\n\n\n<p>\u2022 Provide data to government agencies in compliance with state or commonwealth law;<\/p>\n\n\n\n<p>\u2022 Determine eligibility to entitlements provided under any state or commonwealth law;<\/p>\n\n\n\n<p>\u2022 Provide appropriate services and care;<\/p>\n\n\n\n<p>\u2022 Enable contact with a nominated person regarding a client\u2019s health status; and<\/p>\n\n\n\n<p>\u2022 Lawfully liaise with a nominated representative and to contact family if requested or needed.<\/p>\n\n\n\n<p>Some individuals may not want to provide information to us. The information we request is relevant to providing them with the care and services required. If the individual chooses not to provide us with some or all of the information we request, we may not be able to provide them with the care and services they require.<\/p>\n\n\n\n<p>We will not collect your Sensitive Information (including Health Information) unless the collection of the information is reasonably necessary for or directly related to one or more of our functions and:<\/p>\n\n\n\n<p>\u2022 You have consented to the collection of this information; or<\/p>\n\n\n\n<p>\u2022 The collection of the information is required as authorised by or under an Australian law or a court\/tribunal order; or<\/p>\n\n\n\n<p>\u2022 A permitted general situation exists to the collection of the information; or<\/p>\n\n\n\n<p>\u2022 A permitted health situation exists in relation to the collection of the information.<\/p>\n\n\n\n<p><strong>Methods of collection<\/strong><\/p>\n\n\n\n<p>Personal Information and Sensitive Information (including Health Information), may be collected:<\/p>\n\n\n\n<p>\u2022 From a client or resident;<\/p>\n\n\n\n<p>\u2022 From any person or organisation that assesses health status or care requirements;<\/p>\n\n\n\n<p>\u2022 From the health practitioner of a client or resident;<\/p>\n\n\n\n<p>\u2022 From other health providers or facilities;<\/p>\n\n\n\n<p>\u2022 From family members or significant persons of a client or resident; and<\/p>\n\n\n\n<p>\u2022 From a legal advisor of a client or resident.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>We won\u2019t collect Personal Information from the client or resident unless:<\/p>\n\n\n\n<p>\u2022 We have the consent of the client or resident to collect the information from someone else; or<\/p>\n\n\n\n<p>\u2022 We are required or authorised by law to collect the information from someone else; or<\/p>\n\n\n\n<p>\u2022 It is unreasonable or impractical to do so.<\/p>\n\n\n\n<p>When engaging with a potential client or resident, the individual should identify any parties from whom they do not wish Personal Information accessed or to whom they do not wish Personal Information provided. This should be recorded in the file of the client or resident and complied with to the extent permitted by law.<\/p>\n\n\n\n<p><strong>Unsolicited Information<\/strong><\/p>\n\n\n\n<p>If we receive Personal Information from an individual that we have not solicited and we could not have obtained the information by lawful means, we will destroy or de-identify the information as soon as practicable and in accordance with the law.<\/p>\n\n\n\n<p><strong>Staff records<\/strong><\/p>\n\n\n\n<p>We must keep a record in respect of staff about:<\/p>\n\n\n\n<p>\u2022 Basic employment details such as the name of the employer and the staff member and the nature of<\/p>\n\n\n\n<p>their employment (eg part-time, full-time, permanent, temporary, casual, volunteer, agency or<\/p>\n\n\n\n<p>student);<\/p>\n\n\n\n<p>\u2022 Pay;<\/p>\n\n\n\n<p>\u2022 Overtime hours;<\/p>\n\n\n\n<p>\u2022 Averaging arrangements;<\/p>\n\n\n\n<p>\u2022 Leave entitlements;<\/p>\n\n\n\n<p>\u2022 Superannuation contributions;<\/p>\n\n\n\n<p>\u2022 Termination of employment (where applicable); and<\/p>\n\n\n\n<p>\u2022 Individual flexibility arrangements and guarantees of annual earnings.<\/p>\n\n\n\n<p>We may also collect Personal Information about a staff member relating to their employment being Staff\/ Employee Records as defined above.<\/p>\n\n\n\n<p><strong>Notification<\/strong><\/p>\n\n\n\n<p>We will at or before the time or as soon as practicable after we collect Personal Information from an individual take all reasonable steps to ensure that the individual is notified or made aware of:<\/p>\n\n\n\n<p>\u2022 Our identity and contact details;<\/p>\n\n\n\n<p>\u2022 The purpose for which we are collecting Personal Information;<\/p>\n\n\n\n<p>\u2022 The identity of other entities or persons to whom we usually disclose Personal Information to;<\/p>\n\n\n\n<p>\u2022 That our Privacy Policy contains information about how the individual may complain about a breach of the APPs and how we will deal with a complaint;<\/p>\n\n\n\n<p>\u2022 Whether we are likely to disclose Personal Information to overseas recipients and if so, the countries in which such recipients are likely to be located and if practicable, to specify those countries.<\/p>\n\n\n\n<p><strong>Use and disclosure of information<\/strong><\/p>\n\n\n\n<p><strong>a)Permitted disclosure<\/strong><\/p>\n\n\n\n<p>We may not use or disclose Personal Information for a purpose other than the primary purpose of collection, unless:<\/p>\n\n\n\n<p>\u2022 the secondary purpose is related to the primary purpose (and if Sensitive Information directly related) and the individual would reasonably expect disclosure of the information for the secondary purpose;<\/p>\n\n\n\n<p>\u2022 the individual has consented;<\/p>\n\n\n\n<p>\u2022 the information is Health Information and the collection, use or disclosure is necessary for research, the compilation or analysis of statistics, relevant to public health or public safety, it is impractical to obtain consent, the use or disclosure is conducted within the privacy principles and guidelines and we reasonably believe that the recipient will not disclose the Health Information;<\/p>\n\n\n\n<p>\u2022 we believe on reasonable grounds that the disclosure is necessary to prevent or lessen a serious and imminent threat to an individual\u2019s life, health or safety or a serious threat to public health or public safety;<\/p>\n\n\n\n<p>\u2022 we have reason to suspect unlawful activity and use or disclose the Personal Information as part of our investigation of the matter or in reporting our concerns to relevant persons or authorities;<\/p>\n\n\n\n<p>\u2022 we reasonably believe that the use or disclosure is reasonably necessary to allow an enforcement body to enforce laws, protect the public revenue, prevent seriously improper conduct or prepare or conduct legal proceedings; or<\/p>\n\n\n\n<p>\u2022 the use or disclosure is otherwise required or authorised by law.<\/p>\n\n\n\n<p><strong>b)Cross border disclosure<\/strong><\/p>\n\n\n\n<p>If we disclose an individual\u2019s Personal Information to an overseas recipient, we will take all steps that are reasonable in the circumstances to ensure that the overseas recipient does not breach the APP, unless:<\/p>\n\n\n\n<p>\u2022 the overseas recipient is subject to laws similar to the APP and the individual has mechanisms to take action against the overseas recipient;<\/p>\n\n\n\n<p>\u2022 we reasonably believe the disclosure is necessary or authorised by Australian Law; or<\/p>\n\n\n\n<p>\u2022 the individual has provided express consent to the disclosure.<\/p>\n\n\n\n<p><strong>c)Disclosure of Health Information<\/strong><\/p>\n\n\n\n<p>We may disclose Health Information about an individual to a person who is responsible for the individual if:<\/p>\n\n\n\n<p>\u2022 the individual is incapable of giving consent or communicating consent;<\/p>\n\n\n\n<p>\u2022 the services manager is satisfied that either the disclosure is necessary to provide appropriate care or treatment or is made for compassionate reasons or is necessary for the purposes of undertaking a quality review of our services (and the disclosure is limited to the extent reasonable and necessary for this purpose); and<\/p>\n\n\n\n<p>\u2022 the disclosure is not contrary to any wish previously expressed by the individual of which the services manager is aware, or of which the services manager could reasonably be expected to be aware and the disclosure is limited to the extent reasonable and necessary for providing care or treatment.<\/p>\n\n\n\n<p><strong>ACCESS<\/strong><\/p>\n\n\n\n<p>You have a right to request that we provide you access to the Personal Information we hold about you (and we shall make all reasonable attempts to grant that access) unless the request for access:<\/p>\n\n\n\n<p>\u2022 is frivolous or vexatious;<\/p>\n\n\n\n<p>OR<\/p>\n\n\n\n<p>\u2022 poses a serious threat to the life or health of any individual;<\/p>\n\n\n\n<p>\u2022 unreasonably impacts upon the privacy of other individuals;<\/p>\n\n\n\n<p>\u2022 jeopardises existing or anticipated legal proceedings;<\/p>\n\n\n\n<p>\u2022 prejudices negotiations between the individual and us;<\/p>\n\n\n\n<p>\u2022 is unlawful or would be likely to prejudice an investigation of possible unlawful activity;<\/p>\n\n\n\n<p>\u2022 denied by an enforcement body performing a lawful security function which asks us not to provide access to the information:<\/p>\n\n\n\n<p>\u2022 giving access would reveal information we hold about a commercially sensitive decision making process.<\/p>\n\n\n\n<p><strong>Requesting access<\/strong><\/p>\n\n\n\n<p>Requests for access to information can be made orally or in writing and addressed to the Senior Manager of the relevant service. We will respond to each request within a reasonable time.<\/p>\n\n\n\n<p><strong>Declining access<\/strong><\/p>\n\n\n\n<p>An individual\u2019s identity should be established prior to allowing access to the requested information. If unsatisfied with the individual\u2019s identity or access is requested from an unauthorised party, we can decline access to the information.<\/p>\n\n\n\n<p>We will provide in writing the reasons for declining access to the requested information.<\/p>\n\n\n\n<p><strong>Granting access<\/strong><\/p>\n\n\n\n<p>On request (and after determining an individual\u2019s right to access the information) we should provide access to Personal Information.<\/p>\n\n\n\n<p><strong>Charges<\/strong><\/p>\n\n\n\n<p>If we charge for providing access to Personal Information, those charges will not be excessive.<\/p>\n\n\n\n<p><strong>PERSONAL INFORMATION QUALITY<\/strong><\/p>\n\n\n\n<p>We aim to ensure that the Personal Information we hold is accurate, complete and up-to-date. Please contact us if any of the Personal Information you have provided to us has changed or you believe that the information we have about you is not accurate or complete.<\/p>\n\n\n\n<p><strong>CORRECTION<\/strong><\/p>\n\n\n\n<p>If an individual establishes the Personal Information held about them is inaccurate, incomplete, out-of-date, incomplete, irrelevant or misleading we must take reasonable steps to correct the information. If we disagree with an individual about whether information is accurate, complete and up- to-date, and the individual asks us to associate with the information a statement claiming that the information is inaccurate, incomplete, out-of-date, incomplete, irrelevant or misleading we must take reasonable steps to do so.<\/p>\n\n\n\n<p>If we refuse to correct the Personal Information as requested by the individual, we will give the individual written notice that sets out:<\/p>\n\n\n\n<p><br>\u2022 the reasons for the refusal, except to the extent that it would be unreasonable to refuse;<\/p>\n\n\n\n<p>\u2022 the mechanisms available to complain about the refusal; and<\/p>\n\n\n\n<p>\u2022 any other matter prescribed by the regulations.<\/p>\n\n\n\n<p><strong>DIRECT MARKETING<\/strong><\/p>\n\n\n\n<p><strong>Personal Information<\/strong><\/p>\n\n\n\n<p>We will not use or disclose Personal Information about an individual for the purposes of direct marketing, unless the information is collected directly from you and:<\/p>\n\n\n\n<p>\u2022 you would reasonably expect us to use or disclose your Personal Information for the purpose of direct marketing; and<\/p>\n\n\n\n<p>\u2022 we have provided you a means to \u2018opt-out\u2019 and you have not opted out.<\/p>\n\n\n\n<p><strong>Sensitive Information<\/strong><\/p>\n\n\n\n<p>We will not use or disclose Sensitive Information about an individual for the purposes of direct marketing, unless the individual has consented to the information being used for direct marketing.<\/p>\n\n\n\n<p><strong>An individual\u2019s rights in relation to direct marketing activities<\/strong><\/p>\n\n\n\n<p>If we use information for the purposes of direct marketing the individual may ask us<\/p>\n\n\n\n<p>\u2022 not to provide direct marketing communications to us;<\/p>\n\n\n\n<p>\u2022 not to disclose or use the information; and<\/p>\n\n\n\n<p>\u2022 to provide the source of the information.<\/p>\n\n\n\n<p><strong>PERSONAL INFORMATION SECURITY<\/strong><\/p>\n\n\n\n<p>We are committed to keeping secure the Personal Information you provide to us. We will take all reasonable steps to ensure the Personal Information we hold is protected from misuse, interference, loss, from unauthorised access, modification or disclosure.<\/p>\n\n\n\n<p><strong>Information of a Client<\/strong><\/p>\n\n\n\n<p>\u2022 We must keep the records of a client in a secure storage area.<\/p>\n\n\n\n<p>\u2022 If the records are being carried while providing care only the staff member carrying the records will have access to them.<\/p>\n\n\n\n<p>\u2022 Records of previous clients and earlier unused records of current clients shall be archived and stored in a locked service away from general use.<\/p>\n\n\n\n<p>\u2022 Only Direct Support Professionals attending to the care of a client are to have access to information of the client. A client record shall only be used for the purpose it was intended.<\/p>\n\n\n\n<p>\u2022 A client, or their representatives shall be provided access to records as requested and after consultation with the service manager. At these times, a qualified staff member is to remain with a client or representative to facilitate the answering of any questions raised.<\/p>\n\n\n\n<p>\u2022 Details of a client are not to be provided over the phone, unless the staff member is sure of the person making the inquiry..<\/p>\n\n\n\n<p>\u2022 No staff member shall make any statement about the condition or treatment of a client to any person not involved in the care except to the immediate family or representative of the client and then only after consultation with the Services Manager.<\/p>\n\n\n\n<p>\u2022 All staff must be discrete with their comments at all times, protecting and respecting the privacy, dignity and confidentiality of all clients and residents.<\/p>\n\n\n\n<p>\u2022 Handovers shall be conducted in a private and confidential manner.<\/p>\n\n\n\n<p><strong>Security measures<\/strong><\/p>\n\n\n\n<p>Our security measures include, but are not limited to:<\/p>\n\n\n\n<p>\u2022 training our staff on their obligations with respect to your Personal Information;<\/p>\n\n\n\n<p>\u2022 use of passwords when accessing our data storage system; and<\/p>\n\n\n\n<p>\u2022 the use of firewalls and virus scanning tools to protect against unauthorised interference and access.<\/p>\n\n\n\n<p>This applies to staff (including contracted staff) who are required to have up-to-date virus protection software and firewalls installed on any device used to access documents containing Personal Information.<\/p>\n\n\n\n<p>Contractors working on our behalf are required to:<\/p>\n\n\n\n<p>\u2022 comply with the APP;<\/p>\n\n\n\n<p>\u2022 notify us of any actual or potential breaches of security;<\/p>\n\n\n\n<p>\u2022 indemnify us in relation to any loss suffered by a breach.<\/p>\n\n\n\n<p>We will, as soon as practicable and in accordance with the law, destroy or de-identify any Personal Information that is no longer required for our functions.<\/p>\n\n\n\n<p><strong>Client Privacy Incidents<\/strong><\/p>\n\n\n\n<p>Privacy breaches that impact out-of-home care clients or Victorian based NDIS clients may need to be reported as a client incident under DHHS Client Management System in accordance with the Out of Home Care Incident Reporting Procedure.<\/p>\n\n\n\n<p><strong>DATA BREACH<\/strong><\/p>\n\n\n\n<p>From February 2018 the Notifiable Data Breach Regime (NDBR) came into effect, introducing mandatory data breach notification obligations for all organisations subject to the Privacy Act.<\/p>\n\n\n\n<p>The regime requires us to:<\/p>\n\n\n\n<p>\u2022 conduct an assessment into a security incident if it has reasonable grounds to suspect that an &#8216;eligible data breach\u2019 occurred; and<\/p>\n\n\n\n<p>\u2022 notify the Privacy Commissioner and affected individuals if it has reasonable grounds to believe that it suffered an \u2018eligible data breach\u2019.<\/p>\n\n\n\n<p><strong>What is an \u2018eligible data breach\u2019?<\/strong><\/p>\n\n\n\n<p>A data breach occurs if there is unauthorised access to, unauthorised disclosure of, or loss of information (e.g. Personal Information). However, the NDBR does not impose obligations on all types of data breaches.<\/p>\n\n\n\n<p>For the regime to apply, a data breach must be an \u2018eligible data breach\u2019. A data breach is only an eligible data breach if a reasonable person would conclude that it is likely that an affected individual would suffer serious harm because of the breach.<\/p>\n\n\n\n<p>A data breach would not be considered an eligible data breach if the data is protected to a high standard. For example, if personal information stored on a laptop is encrypted to a high standard and the laptop was stolen, the breach would not be an eligible data breach.<\/p>\n\n\n\n<p>If a data breach occurs, the Office of the Australian Information Commissioner (OAIC) and any affected individuals must be notified in accordance with the Data Breach Notification Procedure.<\/p>\n\n\n\n<p><strong>MEDIA<\/strong><\/p>\n\n\n\n<p>No staff member of staff shall make any statement to the press, radio or television station or to any reporter for the media. If a staff member is approached to make a statement or comment they must refer the person to our Chief Executive Officer.<\/p>\n\n\n\n<p><strong>GRIEVANCE PROCEDURE<\/strong><\/p>\n\n\n\n<p><strong>How to make a complaint<\/strong><\/p>\n\n\n\n<p>If you wish to make a complaint about the way we have managed your Personal Information you may make that complaint verbally or in writing by setting out the details of your complaint to any of the following:<\/p>\n\n\n\n<p><strong>Privacy Officer<\/strong><\/p>\n\n\n\n<p>Phone: 03 5480 2388<\/p>\n\n\n\n<p>Email: hr@clrs.org.au<\/p>\n\n\n\n<p><strong>Chief Executive Officer<\/strong><\/p>\n\n\n\n<p>Phone: 03 5480 2388<\/p>\n\n\n\n<p>Email: ceo@clrs.org.au<\/p>\n\n\n\n<p><strong>Director of Operations<\/strong><\/p>\n\n\n\n<p>Phone: 03 5480 2388<\/p>\n\n\n\n<p>Email: ldavy@clrs.org.au<\/p>\n\n\n\n<p>Further information regarding complaints management can be found in our Complaints Policy<\/p>\n\n\n\n<p><strong>Monitoring and Evaluation<\/strong><\/p>\n\n\n\n<p>Security audits are conducted annually to ensure staff are compliant with securing of information.<\/p>\n\n\n\n<p>Complaints are recorded on a Complaints Register and monitored by the Senior Management, or Board. Client input and comments are sought through the annual client survey.<\/p>\n\n\n\n<p>CLRS is obliged to provide information to the following external agencies:<\/p>\n\n\n\n<p>\u2022 Department of Health and Human Services<\/p>\n\n\n\n<p>\u2022 Disability Complaints Commissioner<\/p>\n\n\n\n<p>\u2022 Office of the Australian Information Commissioner<\/p>\n\n\n\n<p>\u2022 Office of the Senior Practitioner<\/p>\n\n\n\n<p>\u2022 Quarterly Data Collection<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy<\/p>\n","protected":false},"author":1,"featured_media":3690,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"content-narrow.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":13,"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":4577,"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/pages\/3\/revisions\/4577"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/media\/3690"}],"wp:attachment":[{"href":"https:\/\/clrs.org.au\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}