Privacy and confidentiality for independent support workers
How to handle personal information as an independent support worker: consent, secure records, social media, and the Privacy Act principles at a practical level.
Why privacy is non-negotiable
The difference between privacy and confidentiality
The Privacy Act principles, in plain terms
Consent: the key that unlocks sharing
Keeping records securely
What you can and can't share
Social media and photos
Building privacy into how you work
Frequently asked questions
Does the Privacy Act apply to independent support workers?
Whether the Privacy Act strictly binds you can depend on your circumstances as a small sole trader, but you handle sensitive health and disability information, so working to the Australian Privacy Principles is best practice regardless. The NDIS Code of Conduct also independently requires you to respect participants'…
Can I share information about a participant with their family?
Only with the participant's consent, or where someone has legal authority such as a guardian, or where safety requires it. Even close family are not automatically entitled to a participant's private information. Agree at the start who you may talk to, and when in doubt, check with the participant first.
Can I post about my work with clients on social media?
No. Never post identifying information, photos, locations or stories about participants, even positive ones and even without names. It can breach their privacy and the Code of Conduct. If you market yourself online, describe your skills and approach in general terms and never reference specific clients.
How should I store client records securely?
Keep devices password-protected and encrypted, use a reputable locked app rather than loose files, don't leave notes or phones visible in cars or homes, back up securely, and dispose of old records by shredding or proper deletion. Keep client information separate from your personal files.
When can I break confidentiality?
Confidentiality gives way when there is a serious risk of harm. You may and should share information to report abuse or neglect, to respond to a serious and imminent threat to safety, or to comply with a lawful requirement such as a subpoena. Safeguarding obligations override confidentiality when someone is at risk.
Can I take photos of participants?
Only with a clear, agreed purpose and the participant's consent — for example, documenting something specific they have asked for. Keep any such photos secure and never post them online. As a default, avoid taking photos of participants, their homes or belongings unless there is a genuine, consented reason.