The Privacy Commissioner has found that a school breached the Privacy Act when it displayed sensitive medical information about a child in its staff room.  The information displayed was part of a medical action plan, so that teachers would be aware of the information and have instant access to it.

The Privacy Commissioner found that people other than staff could access the staff room, including students and other visitors, and that displaying sensitive medical information in that manner was a breach of privacy.

The school removed the medical information from the staff room and agreed to review its practices and policies for storage of such information.

Alan Knowsley
Education & Privacy Lawyer