Privacy

      Privacy 

      We (the Queensland Human Rights Commission) want you to feel confident and informed about how we handle your personal information. This page explains how we collect, use, disclose and store your personal information.

      If you want to know more about our privacy practices, you can read our Privacy Policy.

      What is personal information

      Personal information is any information that can identify you. It doesn’t matter if the information isn’t true, or isn’t recorded in a document, it is still your personal information.

      Sensitive information is personal information that is particularly private. Examples of sensitive information include information about an individuals':

      • health
      • political opinions
      • religious beliefs; or
      • sexual orientation or practices.

      The rules surrounding what we do with sensitive information are often more restrictive.

      What rules do we need to follow when we handle your personal information?

      We need to follow the Queensland Privacy Principles when we handle your personal information.

      These are a set of rules in the Information Privacy Act 2009 that direct what information we can collect about you and how we can use, disclose and store it.

      We also have responsibilities under the Anti-Discrimination Act 1991 (Qld) and Human Rights Act 2019 (Qld) for how we collect, use and disclose your personal information and protect your privacy.


      How do we collect personal information?

      We only collect personal information from you when we need it. Generally, we collect information directly from you. However, occasionally we may need to collect information about you from someone else. We will only do this if:

      • you consent; or
      • we can’t collect the information from you; or
      • we must collect the information under a law or legal order.

      There are some situations where you can choose to chat with us anonymously or use a different name. There may be times when we’re legally required to know who we’re dealing with, or when it’s not practical for us to help without knowing your identity. If that’s the case, we’ll let you know. We look at these requests on a case-by-case basis.

      How will you know if we are collecting personal information about you?

      We will take reasonable steps to let you know if we are collecting personal information about you at the time we collect it or soon afterward. If it is relevant, we may also tell you some of the following information:

      • who we are and how to contact us;
      • why we are collecting your information and what might happen if we can’t collect it;
      • how we collected your information and from who;
      • entities and countries we typically share your information with;
      • details of any law or order which allows us to collect the information;
      • how you can access or change your information and make a complaint if you don’t think we have followed the privacy rules.

      How do we use or disclose your personal information?

      We may need to use or disclose your information to perform our functions. We will only do this to fulfil the reason we collected the information.

      However, we may use or disclose your information for another purpose if:

      • you consent or expect us to use or disclose the information for the other purpose
      • it is required by law or an order
      • we can’t get your consent and we need to disclose the information to prevent serious harm
      • we suspect inappropriate activity and the information will enable us to act
      • it may help us find a missing person or support a legal claim; or
      • it is needed for dispute resolution, law enforcement or limited ASIO or research purposes.


      Refer to the table below for examples

      How do we use or disclose your personal information?

      We take reasonable steps to protect your information from misuse, interference or loss, unauthorised access, modification or disclosure. If we don’t need your information anymore, we will destroy it or deidentify it. However, we can’t do this if it is a public record or we must keep the information under a law or legal order.

      We are subject to, and comply with, the mandatory notification of data breach scheme under the Information Privacy Act 2009 (Qld) which sets out the steps an agency must undertake in the event of a data breach. The Commission's data breach policy is available here.

      We encourage people to be aware of the risk posed by cyber-attacks. For information and resources on how to protect your personal information, visit the learning centre on the IDCare website which includes fact sheets, how-to videos, and other tools.

      How to access or amend your personal information

      Visit our page on accessing information to find out how to access or amend your personal information.

      How to make a privacy complaint to us

      If you believe that we have not handled your personal information in accordance with the Information Privacy Act 2009 (Qld), you may make a complaint to us.

      For information on how to make a complaint, and how your complaint will be handled, please visit our website here.

      Information we collect when you use our website

      When you visit our site to read or download information, our web measurement tool (Google Analytics) and Internet Service Providers record only anonymous information for statistical purposes including:

      Our web measurement tool will also collect, and share with us, anonymised data around your age, gender, and interests if you are logged into your Google account and have ads personalisation turned on.

      Our website may make use of cookies, which are text files that are used to enhance website accessibility and user experience through remembering preferences and personalisation, managing browsing sessions and to assist in gathering anonymous analytics data (as above).

      These statistics provide information to assist us to make improvements to the content and structure of our website and for reporting.

      We may collect personal information from you if you choose to give us information through our website, for example, by completing forms, registering for online training (through a third-party service provider), or subscribing to electronic mailing lists.

      Policies and information sheets

      For more information please see our:

      Last updated: