In this article
Our obligations under privacy laws
The Postgraduate Medical Council of Victoria Inc ABN 11 296 600 377, Association number A0038523M (“PMCV”) is a non-profit association established to support the education, training and career development of hospital medical officers and hospital administrative staff.
The PMCV is committed to protecting the privacy of those involved in its processes. PMCV is bound by the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles (“APPs”) in respect of personal information. PMCV has adopted these principles as part of its business procedures and operations.
Where PMCV works with Victorian public sector bodies, it may also be required to comply with the Information Privacy Act 2000 (Vic) ("IP Act") and the Information Privacy Principles ("IPPs").
PMCV owns an Allocation and Placement Service system ("APS System") and provides it to assist the Victorian Department of Health & Human Services and others. The APS System provides for online matching and assistance for candidates/applicants ("participants"), including students, graduates, health professionals, hospital administrators, hospitals and other health services to match them with relevant positions in hospitals, health services and other organisations ("health organisations"). PMCV also develops accreditation processes and standards in connection with its work and the APS System.
This policy explains how PMCV protects the personal information of the participants that PMCV assists in connection with the APS System, along with how PMCV:
In this policy:
Aside from the APS System, PMCV also provides a number of other services, including providing members, stakeholders and others with access to information, education and training materials and details of other relevant news and events. PMCV also conducts research and undertakes projects on a range of issues affecting health professionals.
PMCV collects personal information regarding participants in the APS System, including their:
PMCV may also collect sensitive information (in particular health information) from participants, including those who apply for special consideration. This information is kept outside of the APS system.
PMCV collects personal information of referees, including their name, phone number, email address or other contact details, current position held and employing organisation.
For visitors to the APS System website who are not registered participants, PMCV will collect information such as the visitor’s IP address, internet service provider, the web page directing that visitor to the website and the visitor’s activity on the website. This information is usually anonymous and PMCV does not use it to identify individuals. However, due to the nature of internet protocols, such information might contain details that identify those visitors.
Generally, PMCV collects personal information directly from individuals and their representatives as part of placing participants using the APS System unless it is unreasonable or impracticable to do so.
PMCV generally collects personal information directly from participants when they register or submit information on the APS System website or from other material provided by the participant, including their Candidate Priority List or curriculum vitae. Additional information Such as Academic Transcript may be required and held outside of the APS system. We may also collect personal information directly from participants through phone calls, emails, website forms or in person enquiries, including at careers expos and similar events attended by PMCV. Where a participant applies for special consideration, PMCV may collect sensitive information about that individual from that individual. This information is kept separately to the APS system. PMCV may also collect a participant’s personal information from their referees. In some cases, PMCV collects a participant’s personal information from public sources (for example national health practitioner register, internet) or through their memberships (for example peak bodies).
PMCV initially collects personal information about referees from participants who nominate those referees, then directly from referees (including through the Referee Assessment Form completed by referees).
PMCV collects data from our APS System website using various technologies, including cookies. A cookie is a text file that our website sends to your browser which is stored on your computer as a tag identifying your computer to us. You can set your browser to disable cookies. However, some parts of the APS System website may not function properly (or at all) if cookies are disabled.
In some cases, PMCV collects information about individuals:
PMCV generally only uses personal information for the primary purpose for which it is collected, as set out under each heading below, or a secondary purpose related to the primary purpose for which you would reasonably expect PMCV to use the collected information.
PMCV will make you aware of the purpose for which it collects your information by notifying you about all the relevant matters of that collection.
PMCV will not use your information for an unrelated secondary purpose unless PMCV obtains your written consent, is permitted to do so under the Privacy Act or another exception applies. Examples of exceptions could include where it is impracticable to obtain your consent and PMCV believes that collecting, using or disclosing your information is necessary to lessen a serious threat to the life, health or safety of any individual.
PMCV collects personal information about participants in order to operate the APS System and specifically to allow for applicants to be matched to available positions at health organisations in accordance with PMCV’s computer matching algorithm.
The information collected is also used by PMCV to:
PMCV collects personal information about referees for the primary purposes of verifying the participants experience and communicating with referee’s regarding the Referee Assessment Form.
PMCV uses information regarding website visits for the purposes we collected it.
PMCV may also collect and use personal information from others for our operational, human resources, research, referral or other corporate activities in connection with the APS System.
Generally, PMCV only discloses personal information:
PMCV will provide relevant details of participants to referees in order to enable the referee to comment on the participant’s experience.
In the course of operating the APS System, relevant personal information is provided to health organisations, and others involved in these processes, including any providers of relevant intern training programs.
We disclose this information for the purpose of allowing those entities to:
PMCV asks health organisations participating in the matching service to undertake to use the information provided only for selection purposes and not to disseminate any personal information to any other persons not involved in the selection process.
A health organisation may retain a candidate’s curriculum vitae and Referee Assessment Forms if that candidate is matched to, or accepts, an unmatched post. Documentation submitted by candidates who were not matched or offered a post, will be destroyed after the finalisation of any appeals process in accordance with legislative requirements. Hospitals and health services will receive details of all candidates matched to all hospitals and health services participating in this process. This information may be used only to verify the status of candidates, and for no other purpose.
PMCV may disclose personal information of participants or others to the Department of Health & Human Services, in accordance with our reporting obligations or in order to allow the Department to participate in the National Audit of Internship Acceptances (“National Audit”). PMCV may also disclose personal information directly to the Data Manager or others involved in the National Audit, so that they may perform their audit and other functions, including the Late Vacancy Management Process.
PMCV (or other organisations) may disclose personal information to regulators or auditors of health organisations on a strictly confidential basis to enable the regulator or auditor to satisfy itself that the matching was done lawfully and fairly.
With the participant’s consent, PMCV may share and disclose relevant information with other similar bodies both nationally and in other states and territories for the purposes of research and general information sharing in respect of data matching processes, intern arrangements, and other related purposes. PMCV will endeavour to ensure that such other bodies will receive and hold identifying information on a basis similar to that upon which PMCV holds and protects such information.
We may also disclose personal information to:
The PMCV will under no circumstances sell or receive payment for licensing or disclosing your personal information.
PMCV’s technology infrastructure may make use of cloud infrastructure or servers located outside Australia. This means that PMCV may disclose and store your personal information outside Australia, taking such steps as are reasonable in the circumstances to ensure that the overseas recipient does not breach the Privacy Act or the APPs in respect of your personal information.
Wherever reasonably practicable, PMCV will first seek your consent to such cross-border disclosure. Please note that where you consent to such cross-border disclosure, PMCV will be exempt from the requirements of the Privacy Act in relation to such disclosed information. Where it is not reasonably practicable for PMCV to obtain your consent PMCV will otherwise comply with the requirements of the Privacy Act.
PMCV may send you direct marketing about:
If PMCV collected your details from you personally, PMCV will reasonably expect that you agreed to receive direct marketing. PMCV will offer an opt-out procedure so that you can unsubscribe from all future marketing communications.
If PMCV proposes to use information about you collected indirectly to send you direct marketing, PMCV will seek your consent unless an exception applies under the Privacy Act. If you do not wish to receive any direct marketing, please contact PMCV to opt-out at any time.
Please note that PMCV will also comply with other laws that are relevant to direct marketing, including the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).
You are not required to give PMCV all the kinds of personal information listed above. However, if you choose not to provide the information, this may limit your ability, particularly in respect of the participants, to use the APS System.
In relation to participants and referees, the matching service cannot be provided on an anonymous basis. If you do not provide the minimum required personal information, you will not be able to use the APS System. If you do not provide full and complete information, this may limit your prospects of being matched to a position.
All personal information is securely stored by PMCV using appropriate physical and/or electronic security technology, settings and applications, and by ensuring staff dealing with personal information are trained in our privacy policies and procedures. These policies are designed to protect personal information from unauthorised access, modification or disclosure, and from misuse, interference and loss.
There are always inherent risks in transmitting information via the internet and PMCV does not have the ability to control the security of information collected and stored on third party servers. However, in relation to PMCV’s own servers, all reasonable steps are taken to ensure data security. PMCV takes reasonable measures to destroy or permanently de-identify personal information when it is no longer required.
All registered users of the APS system can log in and update their personal information and all information regarding their registration details except for their eligibility criteria.
If there are difficulties accessing the system individuals can contact PMCV if information held about them is incorrect or has changed and request that it be updated. PMCV will respond to all requests to update details within 10 working days.
If you are concerned that PMCV may have handled your personal information inappropriately or you wish to complain about a breach of your privacy, the complaint should be made in writing to PMCV’s Privacy Officer (see details below). All privacy complaints are to be taken seriously and PMCV will endeavour to deal with them promptly and in accordance with our general complaints procedures.
PMCV will acknowledge receipt of your complaint, and will endeavour to deal with your complaint and provide you a response within 30 days. Some matters may require detailed investigation, and may accordingly take longer to resolve. PMCV will provide you with progress updates in that case, and may seek further information from you.
PMCV may refuse to investigate or deal with a complaint if we think it is abusive, trivial or vexatious.
If you are dissatisfied with the outcome of your complaint, you may seek internal review of the decision. Internal review will be conducted by a different person who has not previously been involved in your complaint.
If you are still dissatisfied with the outcome of your complaint after internal review, you are able to take your complaint to a privacy commissioner for resolution.
Individuals registered on the APS system will be notified about data breaches if we believe they are likely to be at risk of serious harm. For example, the data breach may be likely to result in serious financial harm, or harm to their mental or physical well-being.
See https://www.oaic.gov.au/individuals/data-breach-guidance for more details on what a data breach is.
A data breach that is deemed to cause risk of serious harm will be notified by email at the earliest opportunity once identified. Information regarding the breach will also be posted on the APS system web site.
A data breach that is identified but is deemed will not be likely to cause risk of serious harm will not be notified.
Attention: Privacy Officer
Postgraduate Medical Council of Victoria Inc.
|Postal address:||PO Box 13330 Law Courts VIC 8010|
|Location address:||Suite 801, Level 8 533, Little Lonsdale Street Melbourne VIC 3000|
|Telephone||+61 3 9670 1066|