EDMUND RICE CAMPS SA INC

PRIVACY POLICY

Edmund Rice Camps SA Inc respects the privacy rights of all those who participate in its work or its services.

In accordance with the Privacy Amendment (Private Sector) Act 2000, Edmund Rice Camps SA Inc has adopted and is bound by the ten (10) National Privacy Principles established by the Federal Privacy Commission as set out in the Act - see www.privacy.gov.au.

It is our intention that all personal, sensitive and health information of clients, volunteers, staff and prospective volunteers and employees (considered 'consumers' under the Act) is to be private and only to be used for those purposes for which the information was collected and recorded, so as to fulfil the mission and directions of Edmund Rice Camps SA Inc.

Edmund Rice Camps SA Inc intends to collect personal information in a fair and lawful manner. Prior to the collection of information, the purpose of the collection, access details and other information relating to the collection will be disclosed. Sensitive information will not be collected unless the consumer has consented, or it is required by law, or in other specified circumstances (eg health and safety). Information held in relation to consumers includes, but is not limited to, details of children and their parents and/or guardians, personal background matters, contribution to fundraising, and work history - including references.

This information may be held for a number of reasons, including ensuring all parties meet their obligations under relevant legislation; and work to be undertaken by staff or volunteers in Edmund Rice Camps SA Inc.

Edmund Rice Camps SA Inc will only use or disclose information for the purpose for which it was collected and will not disclose or distribute to a third party any such information that is supplied, without our consumer's specific consent or unless we are required to do so by law. Reasonable steps will be taken to protect personal, sensitive and health information from unauthorised access, loss, misuse, disclosure or alteration. We may distribute aggregated statistical information for reporting purposes, but personally identifying information will not be distributed to third parties.

Consumers may at any time request access to their personal, sensitive or health information. If a consumer believes that any of the personal, sensitive or health information held by us is incomplete or inaccurate, in accordance with the provisions of the Privacy legislation, they have the right to notify us and make any updates or corrections.

Individual privacy issues can be discussed in the first instance with Edmund Rice Camps SA Inc's Privacy Contact Person. Alternatively, if an individual believes that his or her privacy has been breached and this matter is unable to be resolved at Edmund Rice Camps SA Inc level, a complaint may be made in writing to an appropriate Staff or Board Member of Edmund Rice Camps SA Inc. In order for such a complaint to be properly investigated, it should identify the person whose privacy appears to have been breached. Anonymous complaints will not be dealt with.

From time to time this statement may be revised to ensure that it remains relevant and appropriate.

Summary of National Privacy Principles
Source - Office of the National Privacy Commissioner

NPP 1 - Collection

Collection of personal information must be fair, lawful and not intrusive. A person must be told the organisation's name, the purpose of collection, that the person can get access to their personal information and what happens if the person does not give the information.

NPP 2 - Use and Disclosure

An organisation should only use or disclose information for the purpose it was collected unless the person has consented or the secondary purpose is related to the primary purpose and a person would reasonably expect such use or disclosure, or in circumstances related to public interest such as law enforcement and public or individual health and safety.

NPP 3 - Data Quality

An organisation must take reasonable steps to make sure that the personal information it collects, uses or discloses is accurate, complete and up-to-date.

NPP 4 - Data Security

An organisation must take responsible steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification and disclosure.

NPP 5 - Openness

An organisation must have a policy document outlining its information handling practices and make this available to anyone who asks.

NPP 6 - Access and Correction

Generally speaking an organisation must give an individual access to personal information it holds about the individual on request.

NPP 7 - Identifiers

Generally speaking an organisation must not adopt, use or disclose an identifier that has been assigned by a Commonwealth government 'agency'.

NPP 8 - Anonymity

Organisations must give people the option to interact anonymously whenever it is lawful and practicable to do so.

NPP 9 - Transborder Data Flows

An organisation can only transfer personal information to a recipient in a foreign country in circumstances where the information will have appropriate protection.

NPP 10 - Sensitive Information

An organisation must not collect sensitive information unless the individual has consented, it is required by law - or in other special specified circumstances, for example, relating to health services provision and individual or public health or safety.