RANZCOG Privacy Policy
Introduction
This Policy details the Royal Australian and New Zealand College of Obstetricians and Gynaecologists’ (RANZCOG; the College) Privacy Policy and related information handling practices and gives guidelines for access to any personal information retained by the College, particularly in relation to its members. This includes information collected in relation to the RANZCOG website and platforms.
RANZCOG is committed to ensuring the privacy of individuals, in accordance with applicable privacy principles, such as the Australian Privacy Principles set out in the Australian Privacy Act 1988 and the Information Privacy Principles contained in the New Zealand Privacy Act 2020, and the EU General Data Protection Regulation.
The Freedom of Information Act 1982 (FOI Act) applies to Australian government departments and agencies or State public sector agencies. As RANZCOG is a company limited by guarantee, the FOI Act does not apply. The Official Information Act (OIA) applies to New Zealand government agencies. As RANZCOG is registered with the New Zealand Companies Office as an Overseas ASIC Company, the OIA does not apply.
When information is collected directly from individuals, RANZCOG may provide further relevant privacy information to the individual at the point of collection, in which case, such information should be read in conjunction with this Policy.
This Policy encompasses requests for personal information that are explicitly considered in College privacy statements and consent to release forms, as well as other personal information.
This Policy is also subject to the terms of other College policies that explicitly deal with the use of personal information by the College in particular circumstances, and in the event of conflict, the terms of those other policies will apply. (For example, the College has an explicit policy on the recording of some assessments and examinations.)
1. Why do we collect personal information?
RANZCOG routinely collects personal information about individuals and those persons who use, access, provide or participate in the College’s services, events and activities.
The collection of this information enables the College to effectively carry out its principal roles as a provider of medical training, a membership organisation and an employer. It also allows the provision of College services such as training and Continuing Professional Development (CPD), enables the College to procure goods and services from suppliers and generally interact with third parties, allows the College to contact individuals and others, and ensures access to member only services on the RANZCOG website.
2. What personal information do we collect?
RANZCOG may collect personal, health and sensitive information about members, trainees, prospective trainees, Specialist International Medical Graduates (SIMGs), applicants for registration, suppliers, conference delegates, College Staff and other individuals who interact with the College.
The information RANZCOG collects about individuals includes name, address, contact details, training records, financial records and other information relevant to their relationship to RANZCOG functions and activities. RANZCOG may also collect information indirectly through such means as assessments, verifications of completion of training, confirmation of education requirements and similar.
Except where it is unreasonable or impracticable to do so or where it occurs with an individual’s permission, RANZCOG will collect this information only from the individual concerned. In addition, unless permitted or required to do so by law, RANZCOG will not collect sensitive information about an individual without their consent.
The full details of personal information that the College collects can be found in the questions the College asks, and in the forms individuals complete when dealing with the College, its agents and contractors.
A RANZCOG employee will be designated as the College’s Privacy Officer. RANZCOG will ensure that this person has received appropriate training in privacy legislation and can act as the primary College source of information regarding privacy matters.
3. How is personal information collected?
Ordinarily, personal information will be collected from an individual directly, either in person, by telephone, in writing or via the internet.
However, in some situations the College may need to collect personal information about an individual from a third party such as:
- the College’s consultants, auditors, lawyers, contractors and contracted staff or service providers that provide goods or administrative or other services in connection with the activities of the College;
- entities and institutions who provide services or undertake activities in conjunction with, or in association with, the College;
- regulatory authorities and bodies, professional or specialist societies and associations, hospitals and health centres and relevant complaints tribunals and government departments and agencies; and
- an individual’s agent (with an individual’s authority).
If the College needs to collect personal information about you from a third party not mentioned in this Policy, then the College will first endeavour to obtain your consent. If that is not practicable then the College will only obtain personal information from a third party if it is necessary for us to perform our functions or comply with applicable laws. In any event, the College will inform you about such third-party personal information and only use that information in accordance with this Policy.
Where the College receives personal information about you, which was not solicited, then that information will be dealt with in accordance with this Policy and applicable Privacy Principles.
The main points at which personal information is collected include, but are not limited to:
- On joining RANZCOG as a trainee or member.
- On applying for specialist assessment and/or assessment for an Area of Need position or specialist-in-training purposes.
- On applying to and joining RANZCOG as an employee or non-FRANZCOG member of the Board or other RANZCOG governing body or entity.
- On registering for RANZCOG events such as a scientific meeting, conferences and webinars.
- On visiting RANZCOG’s website.
4. How is personal information used?
RANZCOG will only collect information needed for a particular function or activity. The information collected will depend on the individual’s relationship with the College. RANZCOG will use personal information to carry out its functions and activities.
Functions and activities of the College include, but are not limited to:
- providing membership services and benefits and maintaining associated records;
- assisting, supporting, providing and improving CPD, education and training;
- enabling planning, policy and service development and marketing, advertising or otherwise promoting the College;
- monitoring, dealing with, reporting and investigating potential misconduct;
- providing workplace and training environments that are free from discrimination, bullying and sexual harassment;
- effectively operating a complaints resolution process;
- providing assessment processes for SIMGs;
- appropriately interacting with government and regulatory bodies relating to the profession;
- implementing, monitoring and maintaining quality assurance processes and systems, as well as processes and systems concerning regulatory matters, registrations, accreditation, audits, risk and claims management (including dealings with insurers);
- procuring funding, donations or other support for the activities of the College;
- enabling internal administration, training, assessments, reviews of any processes, and Appeals Procedures;
- providing or undertaking any of the other activities referred to in this Policy; and
- conducting or facilitating research or surveys for purposes related to the College and/or one or more of the above activities.
Information may also be used for secondary purposes which directly relate to the primary purpose of collection or any other purpose which is authorised by the individual, or which is required or authorised by law.
RANZCOG may also make ancillary use of your personal information for purposes other than those described above where an individual would reasonably expect the College to use such information.
5. How is personal information disclosed?
RANZCOG will share personal information amongst its staff, officers, committees and bodies where appropriate to better achieve the College’s primary, secondary or ancillary purpose.
From time to time, RANZCOG may disclose your personal information to certain third parties. If the College does this, it will require the third party to protect your personal information in the same way and to the same standards as the College.
The types of third parties to whom your personal information may be disclosed includes, but is not limited to:
- providers of goods and services to the College;
- entities and institutions who provide services or undertake activities in conjunction with or in association with the College;
- regulatory authorities and bodies, professional or specialist societies and associations, hospitals and health centres, relevant complaints tribunals, and government departments and agencies;
- where the College collects an individual’s information from someone else, or another entity, to that person or entity;
- where the law requires or permits the College to do so;
- an individual’s agent (with an individual’s authority); and
- to assist with mail-outs to members, trainees or SIMGs.
Information supplied in such circumstances is disclosed to suppliers for the contracted purpose. Failure by the third party to act in accordance with this policy and other contractual and legal obligations may result in termination of the relationship with RANZCOG. RANZCOG takes no responsibility or incurs any liability for the errors or omissions of third parties.
All specific requests for information from a third party will be documented.
6. Special uses and disclosures
This clause sets out additional provisions relating to special purposes for which your personal information may be collected, used or disclosed by RANZCOG. It is in addition to all other provisions in the Policy.
7. How is personal information kept?
The College undertakes to protect personal information from unauthorised use, access, disclosure and alteration. Staff are mandated to adhere to the privacy principles and must comply with the handling of personal information as per this policy. IT security systems and internal procedures such as policy on use of third-party applications (i.e. AI and Large Language Model Technologies) are also utilised to protect the personal information held by the College.
Consistent with contemporary business practices, the College contracts its infrastructure hosting to resilient and reliable outsourced data centres. The data centres are usually located in Australia or New Zealand. However, the nature of cloud computing means that occasionally data may be stored on servers in other jurisdictions. In the rare occasions where data is stored in other jurisdictions, the College aims to ensure that the service provider has adequate security and complies with all relevant Australian and New Zealand Privacy legislation.
Wherever practicable the College will hold all personal information in electronic form. In the case that personal information is retained in hard copy, these documents will be securely stored.
8. Accessing personal information
An individual may contact the Privacy Officer at any time to access their personal information held by the College unless the personal information is expressly to remain confidential as stated in other College Regulation or policy. They will be required to provide their request in the form available at www.ranzcog.edu.au. The request will be addressed in accordance with privacy legislation. Access will not be provided where the request does not relate to personal information or where the applicable privacy laws permit or require the College to decline that access. As permitted by law, a fee may be requested to cover the cost of access.
All of the identified information that the College has used to grant member access can be viewed by members via the members’ portal on Integrate.
9. Correction of personal information
RANZCOG seeks to maintain the accuracy of personal information. Individuals are encouraged to contact the College if the information held is incorrect or to notify the College if personal information has changed (reference should also be made to any additional privacy policies or collection statements). This should be directed to the appropriate person who routinely manages that data, and who may be contacted on +61 3 9417 1699 or at privacy@ranzcog.edu.au. Changes to personal details can also be made on the RANZCOG website via the members’ portal on Integrate.
10. Anonymity
An individual may elect not to identify, or to ask RANZCOG to not use or disclose, the individual or their personal information. However, doing so may limit the services the College can reasonably provide to the individual.
For example, RANZCOG cannot practically provide membership services to a person who wishes to be a member of the College but who does not provide their personal information or who does not consent to their personal information being used or disclosed.
11. Sensitive information
RANZCOG may collect sensitive information from time to time in accordance with applicable laws.
‘Sensitive information’ means information about an individual’s attributes, such as racial or ethnic origin, political opinions, membership of a political, professional or trade association, philosophical beliefs or affiliations, membership of a trade union, sexual preferences or practices, or criminal record.
Wherever practicable the College will hold all sensitive information in electronic form. In the case that sensitive information is retained in hard copy, these documents will be securely stored.
12. Concerns
Any inquiries or concerns about the College’s handling of personal information should be directed to the Privacy Officer on +61 3 9417 1699 or at privacy@ranzcog.edu.au. Concerns may be required to be formally made in writing.
Concerns will be resolved in a timely manner by reference to this Policy and applicable laws. The person raising the concern will be notified of the College’s response to the concerns, including any remedial action RANZCOG will take to resolve the concern, in writing.
The websites of the Office of the Australian Information Commissioner and the Office of the New Zealand Privacy Commissioner are an additional source of information.
13. Amendments to this policy
The College may modify or amend this Policy at any time provided the Policy still complies with applicable laws. Formal notice of amendments to this Policy will not ordinarily be given, but the current version of this Policy will be available via the RANZCOG website.