Privacy and Information Sharing

Sharing information

Personal and health information of students, staff and others can be shared to carry out school and Department functions, for other related purposes and in other limited circumstances such as where there is a risk to health and safety.

‘Need to know’ framework

All staff should share information about students, staff and others on a ‘need to know’ basis, that is, to allow staff to perform their primary function (or for a secondary purpose that would be reasonably expected by the individual whose information is being shared).

Refer to the FAQ for staff for detailed guidance on the ‘need to know’ framework and the Schools’ Privacy Policy for more information on primary and secondary purposes.

Sharing information helps schools and the Department to:

• educate students, plan for individual needs and address barriers to learning
• support the students’ social and emotional wellbeing and health at school
• fulfil legal obligations towards students and the community.

Student information

Sharing information about students

The ‘need to know’ framework sets out that school staff can share student information amongst other school staff and relevant members of the Department to enable the school to:

• provide for and support the student’s education
• support the student’s social and emotional wellbeing and health
• reduce the risk of reasonably foreseeable harm to the student, other students, staff or visitors (duty of care)
• make a reasonable adjustment for the student’s disability (anti-discrimination law)
• provide a safe and secure workplace (occupational health and safety (OHS) law).

In addition to considering the ‘need to know’ framework, there are occasions where the school may lawfully share information with other parties outside the school or the Department. There is detailed guidance on how to:

• respond to specific requests for student information by third parties, refer to Requests for Information about Students
• request and share confidential information with authorised services to promote child wellbeing or safety, or assess or manage family violence risk, refer to Child and Family Violence Information Sharing Schemes for further information
• support a child who has been impacted, or is suspected to be impacted, by abuse, refer to Child protection privacy and information sharing.

School transfers

When a Victorian government school student has been accepted at another Victorian government school, the transferring school will provide the student’s information to that next school.

Schools should apply the ‘need to know’ framework when transferring student information stored outside CASES21 and ensure that it is transferred securely.

Parent consent is not required to transfer student information or records (including Student Support Services/Departmental Confidential Student files) to the student’s next Victorian government school.

For more detail, refer to Student transfers between schools.

Staff information

Staff information should be shared using the ‘need to know’ framework to allow other staff to perform their function, for example, to recruit and pay staff, support their health and wellbeing, and to comply with the Department’s legal obligations, policies and staff codes of conduct. This may include sharing necessary information with the relevant school, regional or central office staff, where permitted.