Microchips and tattoos aside, there is a good privacy reason why teachers and schools cannot use particular numbers and from memory it has to do with data-linking and matching. I am just thinking this through aloud and I am not a lawyer so this is not to be taken as any form of legal advice. Still, have a glance at my concerns below.<div>
<br></div><div>By illustration, whilst the Ultranet uses a VSN number to identify students and assist with record sharing between schools, it cannot be viewed or easily extracted. Instead, an different login code is generated for use by teachers and students. If a student changes schools, their login might change but at least their details and records will follow.<div>
<div><br></div><div><div><a href="http://www.vcaa.vic.edu.au/Documents/vsn/information_for_student.pdf" target="_blank"> http://www.vcaa.vic.edu.au/Documents/vsn/information_for_student.pdf </a></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
"The information will be used only for educational purposes and the ways in which the VSN can be used is prescribed by legislation. The legislation also includes criminal offences for use of the data for other than the prescribed purposes. Commonwealth and State Privacy Principles have also been used to guide the design of the VSN system."</blockquote>
<div><br></div><div>When I mentioned this to my wife who works as a nurse, she remarked about the security around the patient identify number system that is in use by hospitals and the strict provisions governing its use.</div>
<div><br></div><div><a href="http://www.privacy.vic.gov.au/privacy/web2.nsf/pages/frequently-asked-questions-general-public">http://www.privacy.vic.gov.au/privacy/web2.nsf/pages/frequently-asked-questions-general-public</a></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span style="background-color:rgb(255,255,255);color:rgb(54,54,54);font-family:Arial,Helvetica,sans-serif">IPP 7 Unique identifiers: </span><span style="background-color:rgb(255,255,255);color:rgb(54,54,54);font-family:Arial,Helvetica,sans-serif">A unique identifier is usually a number assigned to an individual in order to identify the person for the purposes of an organisation's operations. Tax File Numbers and Driver's Licence Numbers are examples. Unique identifiers can facilitate data matching. Data matching can diminish privacy. IPP 7 limits the adoption and sharing of unique identifiers.</span><span style="background-color:rgb(255,255,255);color:rgb(54,54,54);font-family:Arial,Helvetica,sans-serif"> </span></blockquote>
<div><br>
</div><div>Now it has me thinking that perhaps the current practice for schools to use a student CASES identity number may be in breach of just this information privacy principle. The CASES identifier is often regularly published, freely shared, used by other school databases and provided to TSSP contractors to set up these systems such as local network accounts or email addresses. It could be used to provide access to sensitive information about user access, notes or files. I suspect that this is a usage that should probably be discouraged as it edges well beyond the scope of the original reason and database for the identification number. By illustration, some schools use a locally generated timetable initial, not a teachers payroll or 'T0 number' to identify teachers and similarly, edumail uses a locally generated user name (sometimes with a middle initial tweak) not the T0 identifier to generate an email address. </div>
<div><br></div><div><div>Perhaps the Paula or the privacy commissioner could provide some advice about this.</div></div><div name="sig_194b3349ad" style="margin:2em 0pt">
<b>Roland Gesthuizen</b> | eLearning Leader <br>
Keysborough College <br>
Acacia Campus | T <a href="tel:%2B61%203%209798%201877" value="+61397981877" target="_blank">+61 3 9798 1877</a> <br>
<a href="http://www.keysboroughsc.vic.edu.au" target="_blank">www.keysboroughsc.vic.edu.au</a><br></div><div name="sig_194b3349ad" style="margin:2em 0pt">Regards Roland<br>
<br>
<b>Roland Gesthuizen</b> | eLearning Leader <br>
Keysborough College <br>
Acacia Campus | T +61 3 9798 1877 <br>
<a href="http://www.keysboroughsc.vic.edu.au" target="new">www.keysboroughsc.vic.edu.au</a><br></div><div class="gmail_quote">On 4 September 2012 16:39, Robert Timmer-Arends <span dir="ltr"><<a href="mailto:timmer@westnet.com.au" target="_blank">timmer@westnet.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div lang="EN-AU" vlink="purple" link="blue" bgcolor="#ffffff">
<div><font face="Arial">Hello Damien</font></div>
<div><font face="Arial"></font> </div>
<div><font face="Arial">I have had this quoted to me in the context of a
query regarding the use of students' VSN. The VCAA bulletin ran an article
suggesting we could <strong>not</strong> use the VSN internally in the school (I
was interested in doing this because the CASES code can change so there is
no way of tracking students over time).</font></div>
<div><font face="Arial"></font> </div>
<div><font face="Arial">I think the 'out' for VCAA and VCAT might
be 7.2a (and 7.1A sounds like another opportunity for an out - are either
or both VCAA and VCAT 'prescribed organisations'?)</font></div>
<div><font face="Arial"></font> </div>
<div><font face="Arial">Also, while they are separate entities they are
both govenment agencies and I vaguely remember reading something in the NPPs
that could allow you to interpret that as a single organisation???</font></div>
<div><font face="Arial"></font> </div>
<div><font face="Arial"></font><font face="Arial"></font> </div>
<div><font face="Arial">Regards</font></div>
<div><font face="Arial">Robert T-A</font></div>
<div><font face="Arial">Brighton SC</font></div>
<div><font face="Arial"></font> </div>
<div><font face="Arial"></font> </div>
<div>----- Original Message ----- </div>
<blockquote style="PADDING-RIGHT:0px;PADDING-LEFT:5px;MARGIN-LEFT:5px;BORDER-LEFT:#000000 2px solid;MARGIN-RIGHT:0px">
<div style="BACKGROUND:#e4e4e4;FONT:10pt arial"><b>From:</b>
<a title="Damien.ATKINSON-BUCK@ivanhoe.com.au" href="mailto:Damien.ATKINSON-BUCK@ivanhoe.com.au" target="_blank">ATKINSON-BUCK, Damien</a>
</div>
<div style="FONT:10pt arial"><b>To:</b> <a title="itapps@edulists.com.au" href="mailto:itapps@edulists.com.au" target="_blank">Year 12 IT Applications Teachers' Mailing
List</a> </div>
<div style="FONT:10pt arial"><b>Sent:</b> Tuesday, September 04, 2012 2:49
PM</div>
<div style="FONT:10pt arial"><b>Subject:</b> [Year 12 IT Apps] VCAA vs VCAA
and the NPP's</div><div><div>
<div><br></div>
<div>
<p class="MsoNormal"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">Hi
folks,</span></p>
<p class="MsoNormal" style="BACKGROUND:white"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">
I was going through the NPP’s with my year 12’s today. When we were discussing
NPP 7 Identifiers (see below) one of my students asked why VCAA and VTAC both
use their student numbers as the primary identifier. Does anyone out there
know if this is indeed the case and if so, how they are allowed to do it, they
are separate entities aren’t they? </span></p>
<p class="MsoNormal" style="BACKGROUND:white"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">Thanks</span></p>
<p class="MsoNormal" style="BACKGROUND:white"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">Damien</span></p>
<p class="MsoNormal" style="BACKGROUND:white"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'"></span> </p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">7.1 An
organisation must not adopt as its own identifier of an individual an
identifier of the individual that has been assigned by: </span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">(a) an agency;
or</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">(b) an agent of
an agency acting in its capacity as agent; or</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">(c) a contracted
service provider for a Commonwealth contract acting in its capacity as
contracted service provider for that contract</span></i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">. </span></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">7.1A However,
subclause 7.1 does not apply to the adoption by a prescribed organisation of a
prescribed identifier in prescribed circumstances. </span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">Note: There are
prerequisites that must be satisfied before those matters are prescribed: see
subsection 100(2).</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">7.2 An
organisation must not use or disclose an identifier assigned to an individual
by an agency, or by an agent or contracted service provider mentioned in
subclause 7.1, unless: </span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">(a) the use or
disclosure is necessary for the organisation to fulfil its obligations to the
agency; or</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">(b) one or more
of paragraphs 2.1(e) to 2.1(h) (inclusive) apply to the use or disclosure;
or</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">(c) the use or
disclosure is by a prescribed organisation of a prescribed identifier in
prescribed circumstances.</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">Note: There are
prerequisites that must be satisfied before the matters mentioned in paragraph
(c) are prescribed: see subsection 100(2). </span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">7.3 In this
clause:</span></i></p>
<p class="MsoNormal" style="BACKGROUND:white"><i><span lang="EN-GB" style="FONT-SIZE:9.5pt;FONT-FAMILY:'Verdana','sans-serif'">identifier
includes a number assigned by an organisation to an individual to identify
uniquely the individual for the purposes of the organisation's operations.
However, an individual's name or ABN (as defined in the A New Tax System
(Australian Business Number) Act 1999) is not an identifier. </span></i></p>
<p class="MsoNormal"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'"></span> </p>
<p class="MsoNormal"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'"></span> </p>
<table cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;BACKGROUND:#f5f2dd;PADDING-BOTTOM:0cm;WIDTH:450pt;PADDING-TOP:0cm" nowrap width="600">
<div align="center">
<table style="WIDTH:100%" cellspacing="5" cellpadding="0" width="100%" border="0">
<tbody>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:315pt;PADDING-TOP:0cm" width="420">
<p class="MsoNormal"><b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">Damien
Atkinson-Buck</span></b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'"><br>KLA
Head - MYP Technology & SYP Info Tech</span><span></span></p>
<table style="WIDTH:311.25pt" cellspacing="0" cellpadding="0" width="415" border="0">
<tbody>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:118.5pt;PADDING-TOP:0cm" width="158">
<table cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:15pt;PADDING-TOP:0cm" width="20">
<p class="MsoNormal"><b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">p:</span></b><span style="FONT-SIZE:12pt"></span></p></td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<p class="MsoNormal"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">+61
3 9490 3848</span><span style="FONT-SIZE:12pt"></span></p></td></tr>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:15pt;PADDING-TOP:0cm" width="20">
<p class="MsoNormal"><b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">f:</span></b><span style="FONT-SIZE:12pt"></span></p></td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<p class="MsoNormal"><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">+61
3 9490 3490</span><span style="FONT-SIZE:12pt"></span></p></td></tr></tbody></table></td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<table style="WIDTH:100%" cellspacing="0" cellpadding="0" width="100%" border="0">
<tbody>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:15pt;PADDING-TOP:0cm" width="20">
<p class="MsoNormal"><b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">e:</span></b><span style="FONT-SIZE:12pt"></span></p></td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<p class="MsoNormal"><span style="FONT-FAMILY:'Arial','sans-serif'"><a href="mailto:damien.atkinson-buck@ivanhoe.com.au" target="_blank"><span style="FONT-SIZE:10pt;COLOR:blue">damien.atkinson-buck@ivanhoe.com.au</span></a></span><span style="FONT-SIZE:12pt"></span></p>
</td></tr>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:15pt;PADDING-TOP:0cm" width="20">
<p class="MsoNormal"><b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">w:</span></b><span style="FONT-SIZE:12pt"></span></p></td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<p class="MsoNormal"><span><a href="http://myivanhoe.net/" target="_blank"><span style="FONT-SIZE:10pt;COLOR:blue;FONT-FAMILY:'Arial','sans-serif'">http://myivanhoe.net</span></a></span><span style="FONT-SIZE:12pt"></span></p>
</td></tr></tbody></table></td></tr></tbody></table></td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<p class="MsoNormal" style="TEXT-ALIGN:right" align="right"><b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'">The
Ridgeway Campus</span></b><span style="FONT-SIZE:10pt;FONT-FAMILY:'Arial','sans-serif'"><br>PO
Box 91 The Ridgeway<br>Ivanhoe Victoria<br>3079
Australia</span><span style="FONT-SIZE:12pt"></span></p></td></tr></tbody></table></div></td></tr>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:450pt;PADDING-TOP:0cm" width="600">
<table style="WIDTH:100%" cellspacing="0" cellpadding="0" width="100%" border="0">
<tbody>
<tr>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;WIDTH:318pt;PADDING-TOP:0cm" width="424">
<p class="MsoNormal"><span style="MARGIN-TOP:1px;MARGIN-LEFT:0px;WIDTH:418px;min-height:126px"><img height="126" width="418"></span><a href="http://myivanhoe.net/" target="_blank"><span style="COLOR:blue;TEXT-DECORATION:none"><img height="130" alt="Description: Description: Description: Description: cid:image002.gif@01CA7CC2.074C48E0" width="422" border="0"></span></a><span style="FONT-SIZE:12pt"></span></p>
</td>
<td style="PADDING-RIGHT:0cm;PADDING-LEFT:0cm;PADDING-BOTTOM:0cm;PADDING-TOP:0cm">
<p class="MsoNormal" style="TEXT-ALIGN:right" align="right"><a href="http://myivanhoe.net/" target="_blank"><span style="COLOR:blue;TEXT-DECORATION:none"><img height="130" alt="Description: Description: Description: Description: cid:image003.gif@01CA7CC2.074C48E0" width="178" border="0"></span></a><span style="FONT-SIZE:12pt"></span></p>
</td></tr></tbody></table></td></tr></tbody></table>
<p class="MsoNormal"><span></span> </p>
<p class="MsoNormal"> </p></div><br><br><br><br>Privacy, Virus and
Copyright Warning<br><br>The information contained in this electronic message
(e-mail), and any files transmitted with it:<br><br>* is intended for the
named recipients only. If you have received this in error, please advise the
sender and delete it and any copies immediately;<br>* Any personal information
in this email must be used in accordance with the Privacy Act 1988 and this
always applies even if it has been sent to you in error.<br>* represents the
views of the sender and does not necessarily represent the views or formal
advice of Ivanhoe Grammar School;<br>* may be subject to Copyright, so no
further use should be made of it without the author's permission.<br><br>The
School does not represent or warrant that the email or any files attached do
not contain errors or are free from computer viruses or other defects nor does
it accept responsibility for any loss or damage resulting directly or
indirectly from the use of the email or any attached files.
</div></div><p>
</p><hr><div>
<p></p>_______________________________________________<br><a href="http://www.edulists.com.au" target="_blank">http://www.edulists.com.au</a>
- FAQ, resources, subscribe, unsubscribe<br>IT Applications Mailing List
kindly supported
by<br><a href="http://www.vcaa.vic.edu.au/vce/studies/infotech/itapplications3-4.html" target="_blank">http://www.vcaa.vic.edu.au/vce/studies/infotech/itapplications3-4.html</a> -
Victorian Curriculum and Assessment Authority
<br><br><a href="http://www.vitta.org.au" target="_blank">http://www.vitta.org.au</a> - VITTA Victorian Information
Technology Teachers Association Inc
<br><br><a href="http://www.swinburne.edu.au/ict/schools" target="_blank">http://www.swinburne.edu.au/ict/schools</a> - Swinburne
University</div><p></p></blockquote></div>
<br>_______________________________________________<br>
<a href="http://www.edulists.com.au" target="_blank">http://www.edulists.com.au</a> - FAQ, resources, subscribe, unsubscribe<br>
IT Applications Mailing List kindly supported by<br>
<a href="http://www.vcaa.vic.edu.au/vce/studies/infotech/itapplications3-4.html" target="_blank">http://www.vcaa.vic.edu.au/vce/studies/infotech/itapplications3-4.html</a> - Victorian Curriculum and Assessment Authority <br><br>
<a href="http://www.vitta.org.au" target="_blank">http://www.vitta.org.au</a> - VITTA Victorian Information Technology Teachers Association Inc <br><br>
<a href="http://www.swinburne.edu.au/ict/schools" target="_blank">http://www.swinburne.edu.au/ict/schools</a> - Swinburne University<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>--<br>Roland Gesthuizen - eLearning Coordinator - Keysborough Secondary College<br>
<br>"Never doubt that a small group of thoughtful, committed citizens can change the world; indeed it is the only thing that ever has." --Margaret Mead<br>
</div></div>
</div>