EC Connect Privacy Policy
Overview
This Privacy Statement explains how personal information is collected, used, stored, disclosed and protected through Early Childhood Connect (EC Connect), including the legislative framework that governs its management. This statement should be read together with the EC Connect Terms and Conditions of Use.
Your Privacy
EC Connect has been developed by the Office for Early Childhood Development (OECD), as an online platform that assists with collecting and managing data related to preschool services and child development across government and non-government organisations.
The OECD is committed to protecting the privacy and security of personal information collected, used, stored and disclosed through EC Connect.
OECD operates in compliance with the following requirements and practices:
- Government of South Australia's Information Privacy Principles (IPPs)
- Public Sector (Data Sharing) Act 2016 and Information Sharing Guidelines
- Freedom of Information Act 1991
- State Records Act 1997
Information Collected in EC Connect
EC Connect collects and stores data which may include information about:
- Children enrolled in early childhood education and care and related early childhood services.
- Parents, carers and guardians.
- Teachers, educators and authorised service staff.
- Service providers and approved users of the system.
Information collected may include names, contact details, demographic information, enrolment details, attendance information, funding eligibility information, and other information required to assess, administer and report on preschool funding.
Use of Cookies
EC Connect and related webpages may require the use of cookies. A cookie is a small piece of information that our web service can transfer to a user’s computer hard drive for record keeping purposes. OECD may use cookies to help users to access and use our services, and for service improvements. The use of cookies in this way is widespread and commonly accepted by the Internet community. Users can set browser preferences to reject a cookie the OECD attempts to place. However, users may then be limited in the use of this service.
Use of Personal Information
Personal information collected through EC Connect is used to:
- Verify user identity, authenticate authorised users and manage user access permissions, including through integrations with approved identity verification services.
- Assess and administer preschool funding and related programs.
- Meet reporting, audit, compliance and accountability requirements.
- Improve the delivery and administration of early childhood services and programs.
Personal information will only be used for authorised government purposes and will not be disclosed to third parties except where permitted or required by law, or as otherwise authorised under the Information Privacy Principles.
Identity Verification and myID
EC Connect uses the Australian Government's Digital ID System (AGDIS) myID to support secure user authentication. Where a user registers through myID, OECD may receive and store limited information required to identify and authenticate authorised users, including the user's legal name, myID and a unique identifier. Information collected and managed through myID is subject to the Digital ID framework and is not controlled by OECD. The OECD may disclose your personal information to the AGDIS System Administrator and several other authorised organisations, departments, regulators and other persons where it is reasonably necessary for the purposes of performing functions or exercising powers, such as responding to reported cyber security incidents. More information on myID and the Australian Government’s Digital ID System can be found here.
Fraud Prevention and Protection of Information
The OECD is committed to preventing, detecting and responding to fraud, corruption and other unlawful activities that may affect our organisation, our stakeholders, or the services we provide. Consistent with leading practice guidance from the Australian Government's Commonwealth Fraud Prevention Centre, we maintain risk-based controls, governance arrangements, monitoring processes and reporting mechanisms to identify and manage fraud risks. We may use personal information where reasonably necessary to verify identity, assess risk, investigate suspected fraudulent activity, protect organisational resources, comply with legal obligations, and support the prevention, detection and response to fraud and corruption.
Disclosure of Information
Information may be disclosed where necessary to:
- administer preschool funding and related programs;
- verify eligibility and compliance requirements;
- conduct audits, investigations and assurance activities;
- prevent, detect or investigate fraud, corruption, misuse of public resources or security incidents;
- comply with legal obligations, court orders, or requests from authorised government agencies; and
- support contracted service providers acting on behalf of OECD.
Any disclosure will occur in accordance with applicable legislation, the Information Privacy Principles and relevant information sharing authorities.
System Monitoring and Audit Logs
OECD may monitor, review and audit system activity to maintain the security, integrity and lawful use of EC Connect. Where suspicious, fraudulent, unlawful or unauthorised activity is detected, information collected through monitoring activities may be used for investigation, compliance or enforcement purposes.
Information collected may include:
- User login and logout activity.
- User account information.
- IP addresses and device information.
- Dates and times of system access.
- Actions performed within the system.
Privacy Risks and Responsibilities
While the OECD employs security measures to protect information, no electronic system can be guaranteed to be completely secure. Users are responsible for protecting their own devices, passwords and access credentials and should be aware that there are inherent risks associated with transmitting information electronically.
Changes to this Statement
This Privacy Statement may be updated from time to time to reflect changes to legislation, policy, business practices or system functionality. Users should review this statement periodically to remain informed about how their information is managed.
Contact Us
If you have questions about privacy, the collection or management of personal information, or your use of EC Connect, please contact the OECD. If you believe your personal information has been mishandled or you have concerns regarding privacy practices relating to EC Connect, you may lodge a privacy complaint, which will be investigated and managed in accordance with applicable privacy and public sector requirements.