HEALTH, WELLBEING & SAFETY –

Public Health Compliance –

Records documenting attendees at a premises to enable contact tracing if required for public health reasons. Includes a register or record of the names of all persons (including staff) attending an agency premises, their contact information, and the date and time they visited the premises.

Records of staff attestations, which attest staff are fit and healthy to work prior to commencing a shift or day’s Status Disposal Action work, such as indications they are free from symptoms. Attestations may be presented in verbal or written form and can include results from testing.

Notifications that staff are temporarily unable to attend the workplace due to infectious disease.  

2.3

Temporary –
Destroy 28 days after last action or in accordance with the Directions issued by the public health authority (e.g. Department of Health), whichever is longer

Disposal coverage for attendance records that the Department of Health (DoH) requires organisations to create - i.e. name and phone number of people (staff and visitors) at a premise - to support contact tracing (if required).

Also includes logs created by government agencies sighting ‘vaccine passports’ of site visitors.

Also includes staff attestations. Health and aged care providers may require daily attestations from staff, which are needed to show that staff are symptom-free prior to commencing a shift or day’s work.

EMPLOYMENT MANAGEMENT –

Short-term Records -

Records documenting:

• authorised work permits

1.4

Temporary –
Destroy 7 years after action completed.

EMPLOYMENT MANAGEMENT –

Short-term Records -

Records documenting:

• evidence of compliance with employment conditions mandated by an employer or relevant legislation, such as public health orders 

1.4

Temporary –
Destroy 7 years after action completed.

EMPLOYMENT MANAGEMENT –

Employment conditions verification -

Records collected relating to conditions of employment that are mandated by an employer or mandated by relevant legislation (excluding security vetting or police checks), for example, public health orders.  This class includes documentary evidence of staff vaccine certification, medical exemptions, and any other records which are provided by an employee to an employer to demonstrate compliance with public health orders. 

1.8

Temporary –
Destroy after compliance with employment condition is verified.

POLICY – 

Agency-wide policy – 

Records documenting a policy, including its formulation, or functional activities, strategic planning and management matters affecting the whole agency.

AND

13.1.1

PERMANENT

STRATEGIC MANAGEMENT – 

Planning – 

Final version of agency-wide strategic or corporate plans

18.2.1

PERMANENT

COMMUNITY SERVICES –

Immunisation Management –

Records of the administration of vaccines to children including consent forms where there is a central Commonwealth register of the administration of vaccinations.

Includes records of patients subsequently added to the Australian Childhood Immunisation Register.

Includes records of consent of patients and records of patients where the patient suffers a significant adverse reaction and the matter is referred to another agency for support and continuing care.

Includes records of the handling of vaccines, vaccine preparation and administration, storage and cold chain management.

4.4.2

Temporary –
Destroy 7 years after administration of the vaccine.

COMMUNITY SERVICES –

Immunisation Management –

Records of the administration of vaccines to children including consent forms where there is no central Commonwealth register of the administration of vaccinations.  

Includes all vaccination records of vaccinations administered prior to the introduction of the Australian Childhood Immunisation Register.  

Includes records of consent of patients and records of patients where the patient suffers a significant adverse reaction and the matter is referred to another agency for support and continuing care.  

Includes records of the handling of vaccines, vaccine preparation and administration, storage and cold chain management.

4.4.1

Temporary –
Destroy 25 years after administration of the vaccine.

COMMUNITY SERVICES –

Immunisation Management –

Records of the administration of vaccines to adults including consent forms.

Includes records of consent of patients and records of patients where the patient suffers a significant adverse reaction and the matter is referred to another agency for support and continuing care.

Includes records of the handling of vaccines, vaccine preparation and administration, storage and cold chain management.

4.4.3

Temporary –
Destroy 7 years after administration of the vaccine.

COMMUNITY SERVICES –

Immunisation Management –

Records of the administration and facilitation of immunisation programs.

4.4.4

Temporary –
Destroy after administrative use has concluded.

COMMUNICABLE DISEASE CONTROL –

The control and prevention of the spread of communicable infectious diseases in the community by the State’s health authority

Disposal coverage for records of the State’s health authority (currently the Department of Health).

NB: PROS 08/15 is currently under review

Records collected or generated through the operation of the COVIDSafe application (i.e. COVIDSafe app data) which is downloaded/extracted to the Department's Secure Data Store established to separate the COVIDSafe app data from the departmental contact tracing records.

This class does NOT refer to the Department's contact tracing records and data, see class 3.1.3

3.1.6

Temporary –
Destroy as soon as practicable when no longer required for contact tracing purposes, or immediately following the declaration of the end of the COVIDSafe data period, whichever is sooner.

Records from customer and agency interactions –

Records documenting customer and service agency interactions, including customer applications and transactions with Service Victoria, where the information is not saved to an account.

Includes:
- records of customer transactions where Service Victoria received all the information the customer was required to provide
- records of customer transactions where customers didn’t provide all the information needed, and the customer has abandoned the transaction or not returned in time to complete it
- records of information retrieved from the systems of a service agency to display to a customer
- records of a request from a service agency for support to customers, and information collected or generated in response to that request.

1.3

Temporary –
Destroy after administrative use has concluded, but no later than specified by legislation.

Service Victoria receives requests to generate QR codes for customer check-in purposes related to contact tracing.  Service Victoria receives the required information, generates the code, and then delivers it to the service agency.  Class 1.3 covers the requests to generate QR codes, the generating of the code, and the delivery of it to the applicable agency.

This class also covers records relating to COVID-19 vaccine certificates linked to the Service Victoria app.  Actual copies of certificates are not stored by Service Victoria – they are stored on the customer’s device only. There are some back-end system records that are stored that record the customer interaction of linking the vaccine certificate to a certain device.  These logging records are covered by this class - as a record of a customer interaction, where the information is not saved to an account.