Advice on ChatGPT
- All schools are required to follow the department’s standardised and must post a link to it on the school’s website.
- Following the policy will ensure your school is complying with current privacy legislation and departmental policy.
- The Guidance tab also provides information on other privacy-related issues and requirements relevant to schools, including:
- the provision of collection notices to students and their parents/carers
- consent requirements
- appropriate sharing of information
- privacy impact assessments
- health information
- management of privacy incidents and complaints.
- Additional policy advice for schools on when information can and must be shared to promote the wellbeing or safety of children, or to assess or manage family violence risk, is now available at: .
All schools are required to:
Personal information is recorded information or opinion, whether true or not, about a person whose identity is apparent, or can reasonably be ascertained, from the information. The information or opinion can be recorded in any form. A person's name, address, phone number and date of birth (age) are all examples of personal information.
Sensitive information is a type of personal information with stronger legal protections due to the risk of discrimination. It includes information or opinion about an identifiable person’s racial or ethnic origin, political opinions or affiliations, religious beliefs or affiliations, philosophical beliefs, sexual orientation or practices, criminal record or membership of a trade union.
Personal and sensitive information is regulated in Victoria under the Privacy and Data Protection Act 2014 (Vic).
Health information is information or opinion about an identifiable person’s physical, mental or psychological health or disability. Health information is a type of personal information which, because of its sensitivity, also has different and stronger legal protections.
Health information is regulated in Victoria under the Health Records Act 2001 (Vic).
Note: De-identified information about individuals can become personal information if it is re-identified or if it is at high risk of being re-identified, for example, if it is released to the public or is a small sample size.
Reviewed 13 July 2023