A parliamentary question regarding the Department of Communities' adherence to Auditor General recommendations on user access permissions for sensitive child protection cases, and the Department's response outlining existing protocols and restrictions.

AnsweredQoN 65Legislative Council
Asked
9 April 2025
Portfolio
Child Protection

QuestionView source ↗

I refer to the Auditor General’s recent recommendation that Communities should “review, document and update user access permissions to ensure information is accessible on a need-to-know basis as required by staff roles”, and that the Department’s response included that “staff are also well versed in initiating restrictions for sensitive cases to combat conflict of interest issues. Communities will review and update guidance on initiating restrictions for sensitive issues and where appropriate enhance and recommunicate to ensure a consistent application”, and I ask : (a) what sort of case is likely to be defined as a sensitive case with conflict of interest issues, requiring restricted access; (b) in reference to (a), what restrictions are initiated; (c) who is responsible for initiating the restrictions; (d) are the restrictions enforceable; and (e) what oversight exists to ensure that restrictions are adhered to?

AnswerView source ↗

Answered
20 May 2025
Responded by
Minister for Agriculture and Food representing the Minister for Child Protection
Response time
5 days
The Department of Communities (Communities) advises:
(a – e) Communities has a highly qualified and professional child protection workforce. All Communities’ staff are required to manage sensitive information responsibly and initiate restrictions when there is a valid and legitimate justification.
Restrictions on client files are made on a case-by-case basis, for example restrictions may be initiated where a family or child may be known personally to a case worker. In Districts these restrictions are most often initiated by Case Workers, Team Leaders or District Directors. When file access is restricted, the file can only be viewed by nominated and relevant Department officers and is no longer visible to other staff within the organisation.
All Communities’ employees are also required to comply with the Code of Conduct.
Communities Code of Conduct specifies staff members should not access databases or information without a legitimate work-related purpose and be able to demonstrate why the information was accessed if required. Under the Code of Conduct staff are reminded of their obligations around appropriate use of information obtained within the course of their daily duties, which includes not using information improperly for personal or commercial gain for themselves or others, or to do harm to others.

Explore WA Government Data

Search the full archive in the free dashboard, or query programmatically via API.

Explore more