Worker Passports, Medical Notes and Group Chats: What Should a Farm Host Receive?
• Hari Yellina
Featured image: AI-generated fictional illustration of restricted worker document handling.
A host asks for a worker’s passport, a medical note and bank details so that “everything is on file”. Before forwarding the documents, the provider should ask what decision the host needs to make and which information is needed for that decision.
A supervisor may need to know a relevant work restriction. That does not automatically mean the supervisor needs the worker’s full medical history or that the information belongs in a crew group chat.
Check which privacy rules apply
Privacy Act coverage needs to be assessed for each organisation. The OAIC’s small business guidance explains that many businesses with annual turnover of $3 million or less are exempt, but exceptions apply. Other rules, including tax file number obligations, can still be relevant.
The employee-records exemption is limited. For a private-sector employer it concerns acts or practices directly related to a current or former employment relationship and an employee record held by that employer. It does not cover contractors or subcontractors handling another employer’s employees’ personal information. A host should not assume the provider’s employment relationship automatically exempts the host’s handling.
Start with the purpose, recipient and minimum information
For organisations subject to the Australian Privacy Principles, APP 3 limits collection to information reasonably necessary for the organisation’s functions or activities. Sensitive information generally also needs consent unless an exception applies. Consent alone does not remove the necessity requirement.
APP 6 and APP 11 address permitted use and disclosure and reasonable protection of held information. Treat collection, sharing and storage as separate decisions.
The following is a recommended starting point for a host-provider discussion. It is not permission to disclose information without checking the actual purpose, authority and applicable rules.
| Work need | Useful information to consider | Handling question |
|---|---|---|
| Identify the assigned crew | Worker name and assignment details | Which coordinator or supervisor needs the list? |
| Confirm work eligibility | Appropriate verification evidence and relevant work conditions | Does the recipient need an entire passport copy, or a narrower record? |
| Allocate safe duties | Relevant functional restrictions and review dates | Can the needed instruction be provided without unrelated diagnoses? |
| Run payroll | Required payroll details for the actual employer | Why would a host supervisor or crew chat need bank or tax details? |
| Arrange transport | Pickup information and contact arrangements | Can it be shared only with the responsible coordinator? |
Keep personal documents out of routine crew chats
Use a controlled channel for documents, with access limited to the people who need them. A chat used to announce tomorrow’s block is a poor place to store passports, medical certificates or payroll records: membership changes, messages are forwarded and copies can remain on personal devices.
In a hypothetical case, the provider confirms that a worker can perform specified duties subject to a temporary restriction. The designated host manager receives the restriction and review date through the agreed process. The general crew message only allocates tasks. No diagnosis or certificate is posted to the group.
If the host needs more information for a legitimate purpose, identify that purpose and the appropriate recipient before extending the disclosure. Keep the worker informed through the applicable process.
Tax file numbers require particular care
The OAIC’s Tax File Number Rule guidance explains that TFN collection, use and disclosure must be permitted under taxation, personal assistance or superannuation law. Access must be restricted to staff who need to handle the information for those purposes. A TFN should not become a general crew identifier.
Review access when the assignment changes
Nominate a record owner, check recipients before sending and remove unnecessary access when staff or assignments change. Set a retention process that accounts for required records and lawful purposes; do not automatically erase payroll or other required evidence when a placement ends.
Our work-right checks guide and payroll records handover guide cover related operational responsibilities. Keep the evidence needed for each responsibility within an appropriate record, with a clear reason for each recipient’s access.
Research checked 2 October 2026. General information; Privacy Act coverage, exemptions and lawful disclosure need to be assessed for the actual organisations and circumstances. The scenario is fictional.
About the author
Hari Yellina is Chief Executive Officer at Orchard Tech. View his profile and more articles.
