Your examples could include: Record keeping policy, Access policy for confidential information, Record disposal policy, Confidentiality policy or Privacy policy.

You may have listed other policies relating to document storage.

Your organisation may have different storage systems.

The correct answer is a.  A database can be any structured collection of data, whether it is paper-based or saved on a computer.

Both a and c are true statements. These are important factors in maintaining database records.

To access, use, share or pass on personal information without a legitimate purpose is a breach of confidentiality. A situation where confidential information can be viewed, copied or tampered with by unauthorised persons is a breach of security.

Note: Confidentiality and information security are very important in maintaining clients’ privacy.

Your responses could include:

• identity cards
• procedures for bringing visitors into the workplace
• computer passwords and user permissions
• rules about storage, access and disposal of documents
• any other procedures in place in your organisation.

You must have a legitimate purpose before you can access, use, share or pass on any identifying information or personal details relating to clients, co-workers or others.

Note: Disclosing private information or details without legitimate purpose is a breach of privacy.

The correct response is a. Queensland is governed by the Commonwealth privacy legislation.

The correct response is b. You need to first establish whether the worker has a legitimate purpose for wanting the information.