When this collection notice applies
This privacy notice applies when you create an account as a Government Provider Management System (GPMS) user, or when an Organisational Administrator at your organisation creates an account for you. It also applies when you use your GPMS account.
This collection notice does not apply to the personal information you or someone in your organisation discloses to the Aged Care Quality and Safety Commission (Commission) using features within GPMS.
When you provide information to the Commission within GPMS, you will receive a separate notice at the time of collection.
Information we collect
We will collect the following information:
- Your name
- The organisation you work for
- Your role at the organisation
- Your phone number
- Your email address
- Your date of birth
- Your GPMS access role
- Audit logs of your GPMS activity
- Browser
- IP Address
Why we collect this information
We collect most of the information listed above so that we can contact you, administer your GPMS user account, and understand your role within your organisation (or across multiple organisations).
As multiple people with the same name may create accounts as GPMS users, we need your date of birth to help us uniquely identify you.
We collect audit logs of activity within GPMS to identify inappropriate or unauthorised use or disclosure of personal information.
How we collect this information
We collect this information in 3 ways:
- If you are setting up your own account as a GPMS user, we collect the information when you enter it while creating your account,
- If an Organisational Administrator at your organisation creates a GPMS user account for you, we will collect the information when they enter it while creating your account,
- When you use your GPMS account, via audit logging.
When an Organisational Administrator creates an account for you, they:
- are bound by the GPMS terms of use
- must have your consent to provide us with your information.
Who will be able to see this information
This information will be visible to:
- staff of the Department of Health and Aged Care
- staff of the Aged Care Quality and Safety Commission
- Organisational Administrators at your organisation.
Disclosure of your information to our IT support vendors
We may disclose your information to our IT support vendors to help us operate and support the GPMS. Those IT support vendors may use personnel located outside of Australia, and those personnel may have access to your information. The overseas recipient of your information may not be bound by the Australian Privacy Act, but will be subject to other privacy, security and confidentiality obligations.
How we store your information
We store your personal information in one or more data centres managed by Amazon Web Services. These data centres are in Australia.
How you can access or correct your information
Any Organisational Administrator at your organisation can access and correct your user profile information. Alternatively, you can contact the My Aged Care Service Provider and Assessor Helpline on 1800 836 799.
Concerns and complaints
Our privacy policy explains how you can make a complaint if you think we have breached:
- the Australian Privacy Principles
- the Australian Government Agencies Privacy Code.
The privacy policy also explains how we will manage your complaint.
More on privacy
To find out more see our privacy page and our full privacy policy.