Musicians Making a Difference (ABN 49 114 723 770) ("MMAD", "we", "our", "us") is committed to protecting the personal and sensitive information of all individuals we engage with - young people, families, staff, supporters, volunteers and partners. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and, where applicable, state and territory privacy laws, particularly in relation to health and sensitive information.

About This Policy

This Privacy Policy explains how MMAD collects, uses, stores, discloses and protects personal information. It also outlines how you can access or correct your personal information and how to raise concerns about privacy breaches.

Our Legal Obligations

MMAD is governed by the Australian Privacy Principles under the Privacy Act 1988 (Cth). In addition, we comply with state and territory legislation relevant to the handling of health or sensitive information in jurisdictions where we operate or store data.

• In New South Wales, we comply with the Health Records and Information Privacy Act 2002 (NSW). This law includes 15 Health Privacy Principles which govern how health information is collected, stored and disclosed.

• In Victoria, we are bound by the Health Records Act 2001 (VIC). This law includes 11 Health Privacy Principles that regulate the handling of health information by private and public sector organisations.

• In Queensland, although the Information Privacy Act 2009 (QLD) applies primarily to state government agencies, MMAD aligns its practices with the Information Privacy Principles when handling personal information of Queensland-based individuals, particularly health-related data.

• In the Australian Capital Territory (ACT), we follow the Health Records (Privacy and Access) Act 1997 (ACT), which outlines Territory Privacy Principles and gives individuals specific rights to access and correct their health records.

• In South Australia, while there is currently no comprehensive privacy law covering private organisations, we align with the South Australian Department of Health's Code of Fair Information Practice when handling health information.

• In Tasmania, we aim to comply with key principles from the Personal Information Protection Act 2004 (TAS), which governs how personal information is managed by public authorities and is used as a benchmark for best practice by MMAD in that jurisdiction.

• In Western Australia, there is no overarching privacy law as of 2025 for private organisations. However, MMAD voluntarily adopts Commonwealth privacy standards and implements consistent internal policies to manage personal and health information securely.

• In the Northern Territory, we align with the privacy principles set out in the Information Act 2002 (NT), which governs the handling of personal and sensitive information in the NT public sector.

We apply the highest applicable privacy standard when handling information in any jurisdiction, and ensure our staff and volunteers are aware of and trained in these obligations.

What Information We Collect

We may collect the following types of personal and sensitive information:

• Personal details such as name, date of birth, gender and contact information

• Emergency contacts and family or guardian information

• Cultural background, pronouns, and preferred communication styles

• Health-related information (e.g. medical history, assessments, disclosures)

• Details of participation in our services, workshops, or programs

• Creative submissions, survey responses, enquiry details

• Feedback, complaints, and information, including information collected through Access All Areas (AAA)

• Website activity (cookies, clickstream data)

How We Collect Information

We collect information in a variety of ways, including when you:

• Complete a form or survey

• Contact us via phone, email, online or in person

• Submit music, media, or feedback

• Participate in MMAD workshops or services

• Are referred to MMAD by a school, medical service, or community organisation (with your consent)

• Visit our website, which may collect cookies and analytics data

You should only provide someone else’s personal information to us if you have their permission to do so.

Why We Collect Information

MMAD collects, holds, and uses personal information to:

• Deliver and evaluate our programs and support services

• Respond to concerns for a young person’s safety or wellbeing

• Facilitate referrals and communication with health providers (with consent)

• Keep accurate and up-to-date records

• Meet our reporting obligations to government, philanthropic or funding partners

• Conduct social impact research and program improvement

• Provide promotional communications, unless you opt out

Who We Share Information With

We do not sell or rent your information. We may share information with:

• Parents, carers, or guardians (as appropriate)

• Health professionals and emergency responders where your wellbeing is at risk

• Program funders and evaluators (in de-identified or aggregate format)

• Legal, technical, and professional service providers

• Government agencies when required by law

• Partner organisations who co-deliver programs with MMAD (with consent)

Online Activity and Cookies

MMAD’s website collects usage data via cookies to enhance user experience. You may disable cookies in your browser settings if preferred. Some de-identified analytics data may be used to improve our services.

How We Protect Your Information

We take all reasonable steps to protect personal information through:

• Secure storage systems and restricted access

• Password-protected databases and encrypted communication

• Staff training and internal privacy procedures

• De-identifying or securely destroying data when it is no longer needed

Access and Correction

You may request access to or correction of your personal information by contacting us. We will respond promptly, and if we are unable to comply (e.g. for legal reasons), we will explain why.

Making a Complaint

If you believe MMAD has mishandled your personal information:

1. Contact us first using the details below.

2. We will investigate and respond as soon as possible.

3. If you are unsatisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au or call 1300 363 992.

If the issue involves health information in NSW, VIC, or the ACT, you may also contact the relevant Health Complaints Commissioner in your state or territory.

Contact MMAD

Compliance & Operations Manager
hello@mmad.org.au

Last updated: 2025