Please answer the case study questions

Case Study: Practical Applications of an Information Privacy Plan XYZ University is a medium-sized tertiary educa- to admission, enrollment, course attendance. tion provider in the state of Queensland, Australia. assessment, and grades; medical records; In undertaking its normal business of teaching, details of student fees, fines, levies, and paylearning, and research, the university collects, ments, including bank details; tax file numbers stores, and uses "personal information," that is, and declaration forms; student personal history anything that identifies a person's identity. files; qualifications information; completed quesWith respect to students, this information may tionnaire and survey forms; records relating to include, among other things, records relating personal welfare, health, equity, counseling, stu- matters; records relating to academic references: concerned is aware of it and has consented and and records relating to discipline matters. The bulk of this information is retained in the stuthe disclosure is authorized or required by law. dent management information systems and in the file registry. Academic and administrative staff, at various levels, have access to these records only as required to carry out their duties. Portions of the information held in university student records you need to decide how to apply the privacy polare disclosed outside the university to various icy and principles. The following scenarios were the Department of Education, Employment and Plan lhttpsilf Workplace Relations; other universities; consul- corporate-gove tant student services providers; the Department of fith-university-priv sorship agencies. help you answer the case study questions. The university has a well-documented information privacy policy in accordance with the community standard for the collection, storage, use, and dis- Roger, a photocopier technician, has been asked to closure of personal information by public agencies repair an office photocopier that just broke down in Queensland. The policy relies on the 11 prin- while someone was copying a grievance matter ciples developed in the Commonwealth Privacy against an employee of the agency. The officer who Act of 1988. These principles broadly state the was copying the file takes the opportunity to grab following: a cup of coffee and leaves Roger in the photocopy room while the photocopier cools down. While Personal information is collected and used waiting, Roger flips through the file and realizes only for a lawful purpose that is directly that the person against whom the grievance was related to the collector's function. made lives on the same street as he does. Before the information is collected, the individual concerned should be made aware of Scenario 2 the purpose, whether it is required by law, and to whom the information will be passed on. Tom telephones a student at home about attending Fites containing personal information should a misconduct hearing. The student is not at home; be held securely and protected against loss; - however, the student's partner, Christine, answers unauthorized access, use, modification, or the phone. She states that she knows all about the disclosure; or any other misuse. misconduct hearing but asks for clarification of the allegations. When pressed, Tom provides furto another person or agency if the person ther details. Tom feels comfortable about providing this information to Christine because she is the student's partner, and she has already told Tom the student information system to find out Janet's that she knows all about her partner's misconduct date of birth and home address. A few weeks later, hearing. Janet receives a birthday card from Brad sent to Scenario 3 her home address. Brad works in a student administration center, Case Study Questions and Janet is a student. They know each other, as With regard to the above scenarios, you need to they used to attend the same high school. Occa- decide sionally, they get together at the university to have coffee and chat about mutual friends. Brad knows 1. what information privacy principles (IPPs) that Janet's birthday is coming up because Janet have been breached, happened to mention that she'll be another year 2. how, and older in the near future. Brad decides to access 3. what you would do to address the situation