Skip navigation

Policy: Privacy

Purpose

This privacy policy outlines the personal information handling practices of The Australian National University.

Overview

The Privacy Act 1988 (Cth) (‘Privacy Act’) requires The Australian National University (‘ANU’) to have a privacy policy. We will update this privacy policy if our personal information handling practices change. The specific legal obligations of the ANU when collecting and handling your personal information are outlined in the Privacy Act and in the Australian Privacy Principles in Schedule 1 of that Act.

Scope

This Privacy Policy only applies to ANU. It does not apply to any other company or organisation we associate with, including organisations whose services are in some way linked to ANU through online content or services (such as apps, social media platforms).

When we engage third parties and contractors to perform services for us that involve handling of the personal information we hold, we require the third party service provider and contractors to handle all personal information in accordance with the obligations that apply to ANU under the Privacy Act.

Definitions

Personal information means information or an opinion about an individual who is identified, or who can reasonably be identified, from the information, whether or not the information or opinion is true or recorded in a material form, and includes sensitive information; and

Sensitive information means information or an opinion that is also personal information, about a person’s racial or ethnic origin, political opinions, memberships of political, professional and trade associations and unions, religious and philosophical beliefs, sexual orientation or practices, criminal history, health information, and genetic and biometric information.

Policy statement

Overview

  1. We collect, hold, use and disclose your personal information to enable us to meet legal obligations and for a range of internal University purposes. These include:
  1. for students, to administer admission, enrolment, academic progress, academic integrity, discipline, graduation, accommodation, access to University facilities and services, internal business reporting library loans, fees, visa, immigration, taxation and financial support purposes, and in relation to graduates, for alumni activities;
  2. for employees, visitors and sub-contractors, to administer pay, entitlements, performance, research funding applications, access to University facilities and services, visa, immigration and taxation purposes, and in relation to work health and safety, or rehabilitation and compensation matters.
  1. Material that contains your personal information that is created when we perform our internal processes, such as academic assessment or performance evaluation is protected and handled in accordance with this privacy policy.
  2. Sometimes we collect, use or disclose personal information in situations where it is impracticable to obtain your consent or provide you prior notice, but only when we reasonably believe it is necessary to do so, such as:
  1. to lessen or prevent a serious threat to life, health or safety;
  2. when we are required by or authorised under, a law or court or tribunal order to do so;
  3. to take appropriate action in relation to suspected unlawful activity or serious misconduct;
  4. to assist authorities to locate a person reported as missing;
  5. establishing or defending a legal or equitable claim, or participating in a confidential dispute resolution process; or
  6. for enforcement related activities conducted by, or on behalf of, an enforcement body.

Collection of personal information

  1. ANU collects a wide range of personal information in the course of its operations, for purposes that are directly related to its core functions or activities. ANU collects personal information about you:
  1. because we need it to provide a service you have requested – such as providing you with information about applying to the University for education or employment purposes;
  2. because you have provided it to us – by applying for admission, enrolling in courses, participating in mobility or exchange programs, applying for a position as an employee, participating in or commenting on online forums, registering to attend an event, asking us a question or making a complaint;
  3. because of your previous relationship with ANU – through our alumni relations and philanthropy activities;
  4. because we are required by law to collect it – for example because of higher education and immigration laws.
  1. At all times we aim to collect only the information we need for the particular function or activity we are carrying out. We may not be able to provide the assistance or services you ask for if you don’t provide us with the personal information, we ask for, when we request it.

Collecting sensitive information

  1. Sometimes we may need to collect sensitive information about you, for example, if you:
  1. use the counselling or medical services provided by the ANU,
  2. request assistance to manage the effect of a disability, injury or illness on your work or studies
  3. make a complaint to or about ANU, or
  4. apply for employment at ANU.

Collection from people other than you

  1. In the course of our day to day activities as an employer and a higher education provider, we may collect personal information about you indirectly from publicly available sources, or from third parties you have authorised to disclose your information. We also collect personal information from publicly available sources to enable us to identify and contact stakeholders about our endowment and philanthropy programs.

Anonymity

  1. Where practicable and lawful, we will allow you to interact with us anonymously or using a pseudonym. However, we usually need your name and contact information or your University ID number, and enough information about the particular matter to enable us to respond to your inquiry, request, application, donation or complaint.
  2. We host or manage some publicly accessible blogs and other interactive media. If you choose to interact with these media, you can do so anonymously or using a pseudonym.

Collecting through websites

  1. The ANU has its own public website at http://www.anu.edu.au. When you look at the ANU web site our server makes a record of your visit and logs some or all of the following information:
  1. your browser’s internet address;
  2. the date and time of your visit to the site;
  3. the pages you accessed and documents downloaded;
  4. the previous site visited;
  5. the type of browser you are using; and
  6. the username entered if accessing a restricted site.
  1. ANU uses this information for statistical purposes and for system administration tasks to maintain this service. We do not attempt to identify individuals however in the event there is an investigation, the University, a law enforcement or other government agency may exercise their legal authority to inspect our server’s logs.
  2. Entry to some ANU web services is restricted by user log-in protocols. We require you to use your University ID to access these sites to help us keep the information accessible through these sites secure from unauthorised alteration, use or disclosure.

On-campus IT infrastructure, and remote IT access

  1. If you use any ANU IT infrastructure that requires you to log-in using your University ID, we may use that information to identify and resolve problems with our IT systems, and to keep a record of who has accessed our IT systems for security purposes.

Building access

  1. If you enter any ANU building or room that requires you to swipe your University ID card to gain entry, we may collect and use that information to keep a record of who has had access to campus locations for safety and security purposes.

Library loans

  1. If you borrow material from any ANU library, we collect and use your personal information to manage priority course-based access to materials and to communicate with you about your library loans. We do not keep this information after you have returned the library material you borrowed.

Social Networking Services and Apps

  1. If you choose to communicate with us or access information about ANU through a social network service or App, the social network or App provider and its partners may collect, hold, use or disclose your personal information, in Australia or overseas, for its own purposes and according to its own policies. This policy does not apply to those services.
  2. We sometimes use social networking services to communicate with the public about our activities or achievements. If you choose to communicate with us using these services we may collect your personal information, but if we do, we will only use it to communicate with you. However, the social networking service may also collect or handle your personal information and use it for its own purposes according to their own privacy practices and policies. This policy does not apply to the acts or practices of those services.

Email Distribution lists

  1. We collect your non-ANU email address (and other contact details) when you enrol as a student or apply for employment. We only use this information to contact you for administrative purposes related to your engagement with us.
  2. If you are a graduate, we use your email address to send you information about ANU alumni and philanthropy activities. You can opt out of alumni related activities at any time by unsubscribing from such emails.
  3. If you register to attend an event, we usually collect the contact details you provide at registration to communicate with you about the event you registered for. With your consent, we will communicate with you about other events we think you might be interested in. You can opt out of receiving further emails at the time you register for an event, or you can unsubscribe from further events emails using the link in the email.

Use and disclosure

  1. We generally use or disclose personal information only with your consent and for the purpose we collected it, unless you consent to us using or disclosing it for a different purpose. We generally do not disclose personal information about students to a student’s relatives without the student's consent. Students consent to such disclosures of personal information using this form.
  2. Sometimes we use or disclose your personal information in circumstances where you would reasonably expect us to use or disclose it, the Privacy Act permits the disclosure, and it is impracticable to obtain your consent.
  3. We will take reasonable steps to ensure that any third parties who receive your personal information from ANU are bound by substantially similar privacy standards and obligations as ANU.
  4. Common situations in which we disclose personal information include:
  1. to other higher education institutions, if you are involved in a student mobility, exchange, cross-institutional or joint program, or if you are transferring to another institution;
  2. in relation to certain student administration matters, to the entity trading as ANU College;
  3. to accommodation service providers, an Affiliated Lodge, College or Hall of Residence, if your accommodation is dependent on your academic progress or is affected compliance with any Statutes, Rules, Orders or policies of the University;
  4. to a returning officer or other appointed electoral body for conducting elections of representatives to official University panels, committees, boards and associations;
  5. in publications about examination results and the award of prizes and scholarships;
  6. when requested, the fact graduation from the University (the record graduation from the University is a public document);
  7. releasing information in accordance with University Statutes, Rules, Orders, policies and procedures, or pursuant to a contractual obligation to which you have agreed;
  8. in publications about research activities at or involving ANU in which you have choosen to be involved;
  9. releasing statistical information to Australian Government Departments who are authorised to require it, and the Tertiary Education Quality and Standards Agency (TEQSA), state and territory governments, Tertiary Admissions Centres (TACs), Higher Education providers for the purposes of the Higher Education Support Act 2003 (Cth) (‘HESA’) or the Education Services for Overseas Students Act 2000 (Cth) (‘ESOS’), and Universities Australia;
  10. reporting to the Australian Tax Office about Commonwealth supported fee liabilities or to facilitate income tax assessment;
  11. reporting to Australian Government Departments with portfolio responsibility for income support and/or veterans’ entitlement matters about a person’s income or a student’s attendance when we are legally required to do so;
  12. reporting to Australian Government Departments with portfolio responsibility for child support matters about a person’s income when we are legally required to do so;
  13. if you are not an Australian citizen, reporting to Australian Government Departments with portfolio responsibility for migration and immigration, employment, higher education, research and technology, and related matters;
  • to the Australian National Audit Office for auditing purposes;
  • when we are required by law to disclose the information.
  1. If you seek an external review of an ANU decision or make a complaint to an external complaint handling body we are usually required to disclose some personal information to the external review body, as part of the external review process.
  2. If you make a complaint or report an incident, or seek internal review of an ANU decision, in most circumstances we need to disclose some of your personal information to other people involved, in the incident or decision, in order to act on your complaint or request. We may be unable to act on a complaint or allegation unless without your consent to this kind of disclosure.

Overseas disclosure

  1. If you are involved in a mobility, exchange, cross-institutional or joint program with an institution in another country, or transferring to another institution overseas, we disclose personal information about you to your home or host institution overseas.
  2. In performing and managing our functions and activities, we sometimes need to make personal information available to third party service providers, such as cloud services and website hosts, for example to enable access to University systems and software. These third parties are sometimes located overseas. We take reasonable steps to ensure that any third parties located overseas that engage to handle personal information are bound by substantially similar privacy standards and obligations as ANU.

Disclosure of sensitive information

  1. We only disclose your sensitive information
  1. for the purposes for which you gave it to us, or
  2. for directly related purposes you would reasonably expect, or
  3. if the Privacy Act allows us to disclose it, or
  4. if you agree.

This includes disclosures made in accordance with ANU Statutes, Rules, policies and procedures, and applicable laws

Quality of personal information

  1. We take reasonable steps to ensure that the personal information we hold is accurate, up to date and complete by:
  1. asking you from time to time to confirm or update your details are correct when you use our University systems;
  2. recording information in a consistent format;
  3. where necessary, confirming the accuracy of information collected from a third party or a public source;
  4. adding updated or new personal information to existing records.

Storage and security of personal information

  1. We take reasonable physical, electronic, and procedural steps to protect the security of the personal information we hold from both internal and external threats by regularly assess the risk of misuse, interference, loss, and unauthorised access, modification or disclosure of personal information. Measures taken may be physical, electronic, or procedural. ANU staff are trained to treat personal information with care, and in accordance with this Privacy policy and other applicable laws.
  2. We take reasonable steps to destroy or de-identify personal information in a secure manner when it is no longer required. Most of the information ANU creates or handles forms part of a Commonwealth Record and we are required to deal with most of our records in accordance with the Archives Act 1983 (Cth), and Disposal Authorities issued under that Act.

Access and correction of your personal information

  1. You have the right under the Privacy Act to ask for access to the personal information that we hold, and ask that we correct that personal information we hold about you, and to ask us to correct it. You can ask for access or correction by contacting the Privacy Officer, who will respond within 30 days. Contact information for inquires is at the end of this policy.
  2. If you ask to, we will give you access to your personal information unless there is a law that allows or requires us not to give you access. We will take reasonable steps to correct your personal information if we agree it is incorrect, unless there is a law that allows or requires us not to correct it. We will ask you to verify your identity before we give you access or correct it. If we refuse to give you access to, or to correct it, we will tell you in writing why we made that decision. Contact information for inquiries is at the end of this policy.
  3. If we do make a correction and we have disclosed the incorrect information to others, you can ask us to tell them about the correction. We will do so unless there is a valid reason not to. If we refuse to correct your personal information, you can ask us to attach a statement to it stating that you believe the information is incorrect and why.
  4. You can also ask us under the Freedom Of Information Act 1982 (Cth) (FOI Act) for access to documents that we hold and to ask for information that we to be changed or annotated if it is incomplete, incorrect, out-of-date or misleading. For further information about this process, see requests for personal information under the FOI Act at http://foi.anu.edu.au/personal_information/personal_information.php.

How to make a complaint

  1. If you wish to complain to us about how we have handled your personal information you should complain in writing.
  2. If we receive a complaint from you about how we have handled your personal information we will determine what (if any) action we should take to investigate and resolve the complaint.
  3. We will acknowledge receipt of complaints promptly and will notify you of our proposed response within 30 days.
  4. If you are not satisfied with our response you may ask for a review by a more senior officer within ANU (if that has not already happened) or you can complain to the Privacy Commissioner.
  5. For any assistance in lodging a privacy complain, you can contact us using the details below. For further information refer to the University’s internal complaint handling policies and procedures.

Information

Printable version (PDF)
Title Privacy
Document Type Policy
Document Number ANUP_010007
Version
Purpose This privacy policy outlines the personal information handling practices of The Australian National University.
Audience Staff, Students
Category Administrative
Topic/ SubTopic Information Management - Privacy
 
Effective Date 6 May 2022
Next Review Date 6 May 2027
 
Responsible Officer: University Librarian and Director, Scholarly Information Services
Approved By: Vice-Chancellor
Contact Area Library, Archives and University Records
Authority: Privacy Act 1988
Archives Act 1983
Delegations 0

Information generated and received by ANU staff in the course of conducting business on behalf of ANU is a record and should be captured by an authorised recordkeeping system. To learn more about University records and recordkeeping practice at ANU, see ANU recordkeeping and Policy: Records and archives management.