|
Rural Press Privacy Policy
Scope
and Objectives
The Privacy Policies and
Procedures implemented by Rural Press Limited (Rural Press) extend
to and cover all operations and functions of the organisation. All directors,
management, employees, contractors, sub-contractors, vendors, service providers,
customers, agents or any other third parties that have access to and/or utilise
personal information collected and/or held by Rural Press will seek to abide
by these Privacy Policies and Procedures. The
objectives of these Privacy Policies and Procedures are intended to establish
and maintain a privacy foundation and framework for Rural Press. (Privacy
Policies are defined as the broad statements describing required privacy objectives
and incorporate the 'National Privacy Principles'. Privacy Procedures are defined
as the measures intended to ensure that the Privacy Policies or objectives are
met.)
Ownership
All personal information
collected, held or shared by Rural Press is done so in accordance with its Privacy
Policies and Procedures. Rural Press retain the right to take reasonable steps
to ensure that its Privacy Policies and Procedures are properly adhered to.
For every operation or function
of Rural Press where personal information is collected, the profit centre manager
is appointed to be responsible for ensuring compliance with these Privacy Policies
and Procedures.
Responsibilities
It is the responsibility
of management to inform employees and other relevant parties that Privacy Policies
and Procedures are established, maintained and enforced. Management will periodically
advise Rural Press employees and other relevant parties of any changes or any
new Privacy Policies and Procedures in a timely manner. It
is the responsibility of all employees and other relevant parties to make sure
that they understand and adhere to all Privacy Policies and Procedures implemented
by Rural Press and that they maintain up-to-date knowledge of changes or any
new Privacy Policies and Procedures. Ignorance
of the existence of any Privacy Policies or Procedures will not be an acceptable
excuse for non-compliance.
Privacy
Training
All new employees will be
provided with timely and appropriate access to Rural Press Privacy Policies
and Procedures. All employees, when appropriate, will be provided with the opportunity
to attend appropriate and periodic Privacy awareness training to understand
the Privacy related issues that could adversely affect Rural Press position
if not properly adhered to.
Non-compliance
& Disciplinary Action
Any Rural Press employee
or relevant third party that identifies, knows about or suspects a Privacy breach
must immediately report the matter to senior management. Employees
or other relevant parties that contravene or do not comply with Rural Press
Privacy Policies and Procedures may be subject to disciplinary action.
Incidents/Complaints
Handling
Rural Press will
seek to introduce an incidents/complaints handling process to manage privacy
risks and issues. The incidents/complaints handling process will:
| * |
Identify
(and address) any ongoing compliance problems; |
| * |
Increase
consumer confidence in Rural Press privacy procedures; and |
| * |
Help
build and preserve Rural Press reputation and business. |
Contractual
Arrangements
Rural Press will seek to
ensure that all contractual arrangements with third parties adequately address
privacy issues.
Information
Classification
All Rural Press data and
personal information will be classified and secured according to its level of
sensitivity.
Privacy
Audits
Rural Press will
seek to conduct periodic privacy audits in order to ascertain:
| * |
What sort of
personal/sensitive information is collected and held; |
| * |
How that information
is collected; |
| * |
What the reasons
are for collection of that information; |
| * |
Where and how
that information is stored; |
| * |
How that information
is secured; |
| * |
Who has access
to that information; |
| * |
Whether that
information is shared with anyone; |
| * |
Whether the intended
use of collection is communicated; and |
| * |
Whether that
information is current and necessary. |
Privacy
Statements
The statements and/or comments
that are either required to be or are made about privacy or privacy related
issues will be in accordance with Rural Press Privacy Policies and Procedures.
Collection
(NPP 1)
Collection of personal information
by Rural Press will seek to be fair, lawful and not intrusive. A person will
be told our organisation's name, the purpose of collection, that the person
can get access to their personal information and what happens if the person
does not give the information.
Use
and Disclosure (NPP
2)
Rural Press should only
use or disclose information for the purpose for which it was collected unless
the person has consented, or the secondary purpose is related to the primary
purpose and a person would reasonably expect such use or disclosure, or the
use is for direct marketing in specified circumstances, or in circumstances
related to public interest such as law enforcement and public or individual
health and safety.
Data
Quality (NPP
3)
Rural Press will seek to
take reasonable steps to make sure that the personal information it collects,
uses or discloses is accurate, complete and up-to date.
Data
Security (NPP
4)
Rural Press will take reasonable
steps to protect the personal information it holds from misuse and loss and
from unauthorised access modification or disclosure.
Openness
(NPP 5)
Rural Press will seek to
have a policy document outlining its information handling practices and make
this available to anyone who requests a copy in writing.
Access
and Correction (NPP
6)
Generally speaking, on written
request, Rural Press seeks to give an individual access to personal information
it holds about that individual in accordance with the relevant Privacy Act legislation.
Identifiers
(NPP 7)
Generally speaking, Rural
Press will not adopt, use or disclose an identifier that has been assigned by
a Commonwealth government agency.
Anonymity
(NPP 8)
Rural Press will seek to
give people the option to interact anonymously whenever it is lawful and practicable
to do.
Transborder
Data Flows (NPP
9)
Rural Press will seek to
only transfer personal information to a recipient in a foreign country in circumstances
where the information will have appropriate protection.
Sensitive
Information (NPP 10)
Rural Press will seek not to collect sensitive information unless
the individual has consented, it is required by law - or in other special specified
circumstances, for example, information relating to health services provision
and individual or public health or safety.
|