Purpose first
State why information is needed before collecting it.
Privacy principles
Privacy is a practice, not a badge
Practice Prism cannot accept case information. Its Privacy Window helps adults ask better process questions before information enters an authorised system.
Minimise
Request only what directly supports the authorised purpose.
Explain
Make collection, use, access and choices understandable.
Limit access
Keep information with roles that genuinely need it.
Check accuracy
Confirm source, context and currency before relying on a record.
Retain deliberately
Use the approved retention and disposal process.
Escalate incidents
Stop reflection and use the real privacy-incident route promptly.