C.09 Prisoner internal information

Print

All requests by prisoners for all or part of personal information retained by Custodial Services relating to them is to be managed and processed in accordance with the [Privacy Act 2020].

Watch Point

Prisoners are now able to request personal information via the Kiosk using the request/complaint button.

This request will then appear in the Kiosk notification screen in IOMS the request must be triaged as a request - Privacy within 24 hours to stop the request becoming a complaint.

C.09.01 Prisoner internal information criteria

  1. Personal information can only be collected if it is for a lawful and necessary purpose connected with a function of the Department.
  2. The collection of prisoners' personal information by the Department of Corrections will at all times comply with the [Privacy Act 2020 and, in particular, with Privacy Principles 2, 3, 4, and 5].

C.09.02 Prisoner rights relating to personal information

  1. Prisoners have the following rights in relation to their personal information:
    1. confirmation of what personal information is held about them
    2. access to that information
    3. the right to request corrections to the personal information held, or (when a correction is requested but not made) the right to attach to that information a statement from the prisoner noting that a request to correct was sought but not made
    4. an ‘authorised agent’, i.e. someone authorised in writing (or having the proper authority) by the prisoner to make the request on their behalf.
  2. Staff should confirm with the person whose information is being requested that they have authorised this person to act as their agent.
  3. Requests made by persons without authority to be an agent, or who are requesting personal information about other individuals are to be treated as requests under the [Official Information Act 1982].
  4. Prisoners and/or their authorised agent are to be informed of the steps taken in response to their request.

C.09.03 Request by a prisoner for prisoner personal information

  1. All requests by a prisoner or their authorised agent (either orally, electronically (via Kiosk) or in writing) for a prisoner’s personal information will be managed using [C.09.Form.01 Prisoner request for personal information] or the issue/complaint button available in Kiosk.
    Watch Point

    Where any request is made by a prisoner that requires CCTV footage the override is to be disabled and the footage saved. This includes footage that has been reviewed by staff due to an allegation or complaint made by the prisoner and determined not to support the allegation or complaint.

    The footage must be retained until the allegation or complaint has been resolved including investigation by the Ombudsman, Inspector or Police.

  2. All requests for personal information will be answered as soon as reasonably practicable, but not later than 20 working days after the date of the request.
  3. These procedures do not apply if the request for information relates to evidence in relation to a disciplinary offence charge (e.g. incident report), as full disclosure is generally always required.
  4. Prisoners requesting personal information are encouraged to use the Kiosk but, if the Kiosk is not available, then they can give a verbal request, complete a [C.09.Form.01 Prisoner request for personal information] or complete a [PC.01.Form.01 Prisoner complaint]. The Officer receiving / completing the request will acknowledge receipt of the request by signing and dating the form. The Officer will then enter the information into IOMS using the "add request/complaint" button in the prisoner summary page in IOMS. The timeframe for completing the request (20 working days) commences from the time the form is acknowledged by the Officer.
  5. The form is copied and the copy given to the prisoner as a receipt. The original is handed to the PCO to undertake the required checks to consider if the information requested can be released fully, partially or should be refused. The general manager custodial must decide if any information request is to be refused or partially completed.
  6. The PCO will then:
    1. enter the request on the site register
    2. complete the final section of the form (including adding the registration number)
    3. advise the prisoner of the outcome
    4. arrange for the provision of the information, or
    5. provide a written explanation as to why it is been withheld (following general manager custodial's decision)
    6. note the outcome in IOMS file note
    7. place the completed form in the prisoner file
    8. update the register.
  7. A prisoner may contact any agency in writing or orally to request personal information without using [C.09.Form.01 Prisoner request for personal information].
  8. Any issues relating to the refusal to provide personal information should be referred to:

    National Office CHIEF PRIVACY OFFICER

C.09.04 Review of information prior to release

  1. Prior to releasing any personal information to the prisoner and or their authorised agent, all information subject to a request for disclosure must be carefully examined by an officer authorised by the general manager custodial to identify:
    1. any information that is prohibited from being released pursuant to [sections 49-53 of the Privacy Act 2020] (refer [C.04.Res.01 Privacy Act grounds for refusing disclosure of personal information])
    2. if staff name(s) appear on incident reports and whether or not staff name(s) can be deleted from the copy of the incident report.
  2. If staff name(s) appear on the report, the authorised officer must consider whether the identity of the staff member(s) whose name(s) are in the report is already known to the prisoner requester.
  3. If the staff name(s) are known to the prisoner, their names cannot be deleted on the basis that disclosure would be likely to endanger their safety, as release of the report would not be disclosing their identity because it is already known to the prisoner requester.
  4. In most cases, it will be clear from the incident report whether or not the identity of the staff member(s) is already known to the prisoner requester.
  5. However, when it is not obvious if the staff name(s) are known to the prisoner, the authorised officer must inform the staff about the refusal provision under [section 49(1)(a) of the Privacy Act 2020] and give them an opportunity to outline what, if any, concerns they have for their safety if the incident report is released without their name(s) being deleted.

C.09.05 Decision to make full or partial disclosure

  1. Access to personal information cannot lawfully be refused for any reason other than those in the [Privacy Act 2020].
  2. The general manager custodial must consider all the grounds for refusing disclosure of personal information contained in [sections 49-53 of the Privacy Act 2020] (refer [C.09.Res.01 Privacy Act grounds for refusing disclosure of personal information]) before any information is released.
  3. The general manager custodial must determine whether or not the concerns outlined by each staff member amount to a sufficient basis to justify deleting his/her name being released form the incident reports.
  4. The general manager custodial may approve disclosure of all or part of a prisoner’s personal information, i.e. releasing information not covered by [sections 49-53 of the Privacy Act 2020], while refusing to release information covered by these sections.
  5. The general manager custodial must provide written reasons to the prisoner for refusing disclosure of all or part of a prisoner’s file or a particular document unless this would prejudice the interests being protected.
  6. If the general manager custodial has any concerns relating to the release of information or complying with the [Privacy Act 2020] they should refer the request and their concerns immediately to one of the Legal Advisers at National Office.

C.09.06 Review of decision to refuse or make partial disclosure

  1. The prisoner must be advised of their right to complain to the Privacy Commissioner to seek an investigation and review of the general manager custodial's decision to refuse disclosure of all or part of the personal information requested.

C.09.07 Copying / providing personal information

  1. Prisoners or their authorised agents cannot be charged for the disclosure of their personal information.
  2. The prisoner can request to have disclosure of their personal information by:
    1. receiving a copy of it
    2. inspecting the original (a prisoner is not to be left unsupervised with a file)
    3. hearing oral information about its contents
    4. being provided with a summary.
  3. The general manager custodial must consider, when determining what form the disclosure of the information to the prisoner will take, whether it is:
    1. administratively inefficient
    2. contrary to the legal duty of the agency
    3. prejudicial as set out in [sections 49-53 of the Privacy Act 2020].
  4. The general manager custodial must provide reasons to the prisoner if the form of disclosure is not in the form the prisoner requested.
  5. If a prisoner chooses no particular form of disclosure, the most appropriate form in the circumstances is to be chosen.
  6. A record of all requests by prisoners for disclosure of personal information is maintained at a central location at each site / unit. A full record of the information that is disclosed / withheld is kept, and the date on which disclosure is made is recorded. If a further request is made for another copy of the entire file, it is justifiable for only a copy of information gathered since the first request to be provided.
Watch Point

Staff can reference [Access request for Personal Information quick guide] and [Privacy and Personal Information Guide] under Related Links / Resources to help assess the requested personal information for release.