Consent for Information Sharing

Purpose and Legal Basis for Information Sharing:

The information provided herein shall be utilised for the purposes of assessing the suitability of the services offered by Xyston Pty Ltd for the needs of the participant, and for ensuring the safe and effective delivery of such services. The collection, use, storage, and disclosure of personal information shall be conducted in strict compliance with the Privacy Act 1988 (Cth) and the National Disability Insurance Scheme (NDIS) Act 2013, which collectively govern the management of personal information.

Scope and Nature of Information to be Collected:

Xyston Pty Ltd may collect, use, and disclose the following types of personal information, as necessary:

• Identifying information (including but not limited to name, date of birth, residential address)
• Health-related information and medical history
• Information regarding support needs and service preferences
• Details pertaining to behavioural concerns and management strategies
• Legal and compliance-related information, including but not limited to guardianship details and restrictive practices authorisations

Disclosure to Third Parties:

The personal information collected may be disclosed to the following entities, where relevant and necessary:

• Healthcare professionals and allied health providers involved in the participant’s care
• Support workers and service providers engaged by Xyston Pty Ltd
• NDIS planners, Local Area Coordinators (LACs), and other NDIS-affiliated entities
• Government agencies as required by law
• Emergency contacts in situations necessitating immediate intervention

All disclosures shall be carried out in accordance with the Australian Privacy Principles (APPs) set out under the Privacy Act 1988 and relevant provisions of the NDIS Act 2013.

Storage, Security, and Retention of Information:

Xyston Pty Ltd shall ensure that all personal information is stored securely, in a manner that complies with the Privacy Act 1988 and the NDIS Act 2013. Adequate physical, electronic, and procedural safeguards shall be employed to protect personal information from unauthorised access, misuse, or loss. Personal information shall be retained for as long as is necessary to fulfil the purposes outlined herein, or as required by law.

Access to and Correction of Personal Information:

Pursuant to the Privacy Act 1988, the participant or their authorised representative has the right to request access to and correction of personal information held by Xyston Pty Ltd. Requests for access or correction should be made in writing and shall be addressed in accordance with statutory timeframes and procedures.

Withdrawal of Consent:

The participant or their authorised representative retains the right to withdraw consent to the collection, use, and disclosure of personal information at any time. Such withdrawal must be communicated in writing to Xyston Pty Ltd. Upon receipt of such notice, Xyston Pty Ltd shall cease the use and disclosure of personal information, except where continued use or disclosure is required by law or is necessary to protect the health, safety, or welfare of the participant or others.

Duration of Consent:

This consent shall remain in effect for the duration of the participant’s engagement with Xyston Pty Ltd, or until such time as consent is withdrawn in accordance with the procedures outlined herein.

Complaints and Dispute Resolution:

Should the participant or their authorised representative have concerns regarding the handling of personal information, a formal complaint may be lodged with Xyston Pty Ltd. Complaints shall be addressed expeditiously in accordance with Xyston Pty Ltd’s internal dispute resolution process. The participant or their authorised representative also retains the right to escalate complaints to the Office of the Australian Information Commissioner (OAIC) or the NDIS Quality and Safeguards Commission if they believe their privacy rights have been infringed.

Confirmation of Consent:

By executing this document, the undersigned hereby acknowledges that they have read and understood the contents herein and consent to the collection, use, and disclosure of personal information by Xyston Pty Ltd as specified. The undersigned further acknowledges their understanding of their rights to access, correct, and withdraw consent, and the procedures available for lodging complaints.

Signature of Participant or Authorised Representative: ______________________
Date: ______________________

Printed Name of Participant or Authorised Representative: ______________________

Relationship to Participant (if applicable): ______________________