The Victorian Pharmacy Authority (VPA) is committed to protecting the privacy of personal information.

The VPA collects and handles a range of personal information to enable it to carry out its statutory functions.  It may also collect some personal information for planning and monitoring but where practicable identifying details are removed from information collected and used for these purposes.

In accordance with its obligations under the Pharmacy Regulation Act 2010 (the Act), the VPA’s functions relate primarily to the licensing of pharmacy owners and registration of pharmacies, pharmacy departments and pharmacy depots in Victoria.

The VPA recognises that the nature of its role is such that much of the information it collects is also sensitive from a commercial and/or financial perspective.

The VPA is bound by the Privacy and Data Protection Act 2014 which imposes specific obligations in regard to handling information.

The VPA recognises that the Information Privacy Principles (IPPs) protect personal information as a matter of individual right but also allow it to collect the information it needs to serve the public interest by discharging its duties under the Act.  The Authority recognises the essential right of individuals to have their information handled in ways which they would reasonably expect – protected on the one hand and made accessible to them on the other.

The VPA manages personal information according to IPPs. This means that the Authority:

• Collects only information needed for a specified primary purpose;
• Makes it clear to individuals why personal information is collected and how it will be handled;
• Uses and discloses personal information only for the primary or a directly related purpose, or for another purpose with the person’s consent (unless otherwise authorised by law);
• Stores it securely and protects it from unauthorised access;
• Retains it for the period authorised by the Public Records Act 1973;
• Provides persons with access to their own information, and the right to seek its correction and the right to access personal information in the VPA’s possession is available through privacy legislation and the Freedom of Information Act 1982;
• Has developed a Privacy Collection Notice which is provided when specific information is collected, in compliance with the Information Privacy Principles.

The VPA has developed a Privacy Collection Notice which is referred to when specific information is collected, in compliance with the Information Privacy Principles.

This policy statement, along with the VPA’s Privacy Collection Notice, is available on the VPA’s website www.pharmacy.vic.gov.au.