This policy has been adopted by the Uniting Business Network in order to comply with the requirements of the Privacy Amendment (Private Sector) Act No 155 of 2000.
The policy should be read together with the National Privacy Principles (NPPs) set out in the Privacy Act.
- in this policy, a reference to
- “Church” means The Uniting Church in Australia;
- “Organisation” means the organisation of the Church which has adopted this policy.
- The Organisation will comply with the NPPs. If there is any inconsistency between this policy and the NPPs, then the NPPs prevail.
- Subject to paragraph 4, the Organisation will only use personal information for the primary purpose for which it is collected. In most cases, the purpose will relate the administrative functions of the Organisation.
- Those functions include maintaining personal information for the purpose of analysing the role of the Church in society and recording the family histories of its members. The information may be disclosed to scholars studying the Church and to relatives of Church members.
- The Organisation will only use personal information about an individual for a secondary purpose (i.e. something beyond the scope of the primary purpose) if that individual has consented or the use is otherwise permitted by the NPPs.
- The Organisation will take reasonable steps to keep personal information secure and will, subject to the NPPs, comply with any request from a person to correct or remove his or her information. The Organisation will appoint a Privacy Officer who will be responsible for storing, correcting and giving people access to personal information collected about them.
The Organisation may charge fees for access to personal information. - Personal information collected by the Organisation may be sensitive information for the purpose of the NPPs (e.g. information about a person’s religious beliefs). As a non-profit organisation, the Organisation is permitted to collect sensitive information without a person’s express consent. However, the Organisation will endeavour to seek consent from a person if sensitive information is sought for something other than the primary functions of the Organisation described in paragraph 3.
- The operating procedures (whether or not they are formalised in a manual) of the Organisation will comply with this policy and the NPPs.
- The Organisation will appoint a Privacy Officer who will be empowered to receive and deal with any complaint that the Organisation has not complied with this policy or the NPP’s.
If you have any questions about this Policy, please contact the Uniting Business Network Privacy Officer.
The Privacy Officer for this organisation is Philip Bickerstaff who can be contacted on via the contact page.
June 2012