Use of Cloud Services for storage of Client Records

Overview

Providers are required to ensure compliance with the Privacy Act 1988. Section 26(2)(c) of the Hearing Services Program (Voucher) Instrument 2019 requires providers to ensure all client records are managed in accordance with any requirements set out in guidance issued by the Hearing Services Program (the program) that is published on the program website.

The Management of Client Records factsheet and Frequently Asked Questions outlines program requirements about client records including use of cloud services. Providers were required to only use cloud services providers which had been certified by the Australian Signals Directorate (ASD).

As of 27 July 2020, the ASD ceased the Certified Cloud Services List and new arrangements are being established.

Why your views matter

To assist in its development of requirements for cloud services, the department is asking providers for information on the cloud services they are using.

If you are currently using cloud services for the storage of client records, please complete this survey.

Please contact your cloud services provider and confirm the appropriate responses to each question before starting the survey. Refer to CSPN 20## for the list of questions.

Please ensure the responses are specific to the arrangements in place for your business. The better the information provided to the department, the more suitable the requirements will be for all providers.

What happens next

This survey is now closed.

The department will use the information provided to develop its policy for the use of cloud services for the storage of client records.

Further information will be provided via CSPN and updates to the Management of Client Records factsheet and FAQs.