Information Classification Policy

Applicable to: This policy applies to all persons employed in WA Health including contractors, sub-contractors and agency personnel, incorporating the following entities:

  • Department of Health
  • Metropolitan Health Services
  • WA Country Health Service

Description: The Information Classification Policy is to establish a framework for classifying WA Health information based on sensitivity and risk profiles. The classification assigned places controls relating to the type of information and its needs to remain confidential and secure.

Information Classification Policy

WA Health creates and collects a vast amount of information in the form of data collections, paper and electronic documents, electronic transmissions and publications. WA Health has a responsibility to protect this organisational asset and ensure the confidentiality and integrity of all information within the organisation.

The purpose of the Information Classification Policy is to establish a framework for classifying WA Health information based on sensitivity and risk profiles. The classification assigned places controls relating to the type of information and its need to remain confidential and secure.

The policy encompasses all information (including data) owned, created, collected, managed, stored and disseminated (both internally and externally) by WA Health. The policy is mandatory and applies to all persons employed in WA Health, including contractors, students, volunteers and agency personnel.

The WA Health Information Classification Guidelines (Guidelines) are intended to be used in conjunction with the policy (Appendix A). The Guidelines have been developed to assist WA Health in implementing the classification profiles outlined in this policy.


Professor Bryant Stokes
A/DIRECTOR GENERAL
DEPARTMENT OF HEALTH WA

Date of effect: 30 June 2014 to 30 June 2019

Policy Framework

Related documents