P&P008 - Privacy

1. PURPOSE

The purpose of this P&P is to set out QPFA’s policy concerning personal information privacy.

2. APPLICABLE LAW

QPFA is not subject to the Privacy Act 1988 (Cth). Appling the OAIC “privacy checklist for small business”, QPFA does not need to comply with the Australian Privacy Principles (APPs) in schedule 1 of the Privacy Act 1998 (Cth) because it falls within the small business exception.

QPFA is not subject to any foreign privacy legislation, whether European, American, or otherwise. This includes the General Data Protection Regulation enacted by the European Union or any consumer information privacy statute enacted by a state within the United States. This website is not intended for use by foreign persons. If you are not a resident of Australia, do not visit this website, do not browse this website, do not download information form this website and do not use forms on this website.

Under section 16A of the Accociations Incorporation Act 1981 (Qld) and rule 14 of the QPFA Constitution, a person must not, without the approval of QPFA—

• (a) use information obtained from the register of an incorporated association to contact, or send material to, the association or a member of the association for the purpose of advertising for political, religious, charitable or commercial purposes; or

• (b) disclose information obtained from the register of an incorporated association to someone else, knowing that the information is likely to be used to contact, or send material to, the association or a member of the association for the purpose of advertising for political, religious, charitable or commercial purposes.

3. POLICY

In this section, terms used which are also used within the Privacy Act 1998 (Cth) have the meaning they have within the Privacy Act 1998 (Cth).

QPFA will try to comply with the Privacy Act 1998 (Cth) as the model for privacy best practise in Australia. QPFA will try to take steps to protect individuals’ personal information from misuse and unauthorised access, use and disclosure. However, because QPFA is run by volunteers, in many instances compliance will not be possible.

QPFA will try to implement the following practises in relation to the collection, use and/or disclosure of personal information in the course of QPFA business.

1. Collection:

• Only collect as much information as is necessary to perform the task that information is required for.

• Explain why the information is being collected and obtain express consent/permission at the point of collection.

• Store the information in a safe place that only those who need to use the information can access (e.g. QPFA google drive folder that only certain individuals can access).

2. Use:

• Only use information for the purpose it was collected.

• Only use information where necessary.

3. Disclosure:

• Limit the amount of personal information disclosed to others to the minimum necessary.

• Consent of the President, Vice-President or Treasurer is required to disclose personal information to any person outside of QPFA.

• Consent of the President, Vice-President or Treasurer is required to disclose sensitive information to any person.

4. Retention:

• Every year, review information stored and delete information that is more than seven years old where it is not required to be kept.

Note: Sensitive Information means information about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information about an individual, genetic information or biometric information.