Standards Australia is bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act). The APPs are designed to protect the confidentiality of information and the privacy of individuals by regulating the way personal information is collected, used, disclosed and managed. Personal information is, generally speaking, information or an opinion relating to an identified, or reasonably identifiable, individual.This policy explains the types of personal information that we may collect and hold, how that information is used and with whom the information is shared. It also sets out how you can contact us if you have any queries or concerns about this information.
Why do we collect personal information?We collect personal information about our Members, Councillors, stakeholders, nominating organisations and committee members who are involved in standards development, customers, suppliers, contractors, job applicants and other contacts to understand and meet their needs, to conduct our activities and meet legal obligations.
What personal information do we collect? The types of personal information we may collect include contact information (such as your name, address, email address, fax and telephone number), passport details (if you are a delegate participating in overseas forums), information about your employer or the organisation that nominated you (if you are a committee member), your newsletter preferences, your committee affiliations and any feedback that you provide to us about our products and services, our website, or other matters.
Sometimes our activities require us to collect sensitive information. For more details, see the section ‘Sensitive information is subject to greater restrictions’, below.
Standards Australia also collects statistical information about visitors to our website. Generally, this information cannot be used to identify particular individuals but in some circumstances it may include a visitor's internet protocol address, which could be linked to the individual.
Personal information may be collected by way of forms filled out by individuals (including via online forms), emails, telephone conversations, online user-generated content and market research, face-to-face meetings and interviews. Where necessary and with your consent, we supplement the information we receive from you with information from third party sources, such as your employer or nominating organisation (if you are a committee member).
You may in some circumstances have the option of not identifying yourself or using a pseudonym when you deal with us. However, if you choose not to provide the information we need to fulfill your request for a specific product or service or to participate in standards development activities we may not be able to provide you with the requested product or service or we may not be able to allow you to participate in our activities as a committee member.
How might Standards Australia use and disclose your personal information?Standards Australia may use and disclose your personal information for the primary purpose of collection, or for reasonably expected secondary purposes which are related to the primary purpose, or for purposes to which you have consented, and in other circumstances authorised by the Privacy Act.
Generally, Standards Australia may use and disclose your personal information for a range of purposes, including to:
Disclosure of personal information to other partiesStandards Australia may disclose your personal information to third parties such as our members, our professional advisers, our external service providers that provide services to us (such as distribution of newsletters, standards and other publications developed by Standards Australia, and market research), other standards development organisations, your employer or nominating organisation, government, statutory or regulatory bodies and other committee members. We may disclose your personal information for the purposes set out above.
We may also disclose your personal information if it is required or authorised by law, where disclosure is necessary to prevent a threat to life, health or safety, or where we are otherwise permitted by the Privacy Act.We do not sell or license your personal information to third parties.
Sensitive information is subject to greater restrictionsSome of the information we collect may be ‘sensitive information’, including information or an opinion about an individual's health, racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or membership of a trade union that is also personal information, among other things.
Standards Australia may use and disclose your sensitive information for the primary purpose of collection, or for reasonably expected secondary purposes which are directly related to the primary purpose, or for purposes to which you have consented and in other circumstances authorised by the Privacy Act (eg where required or authorised by law to be disclosed, or where disclosure is necessary to prevent a threat to life, health or safety).
Personal information may be included in documents that are identified as Committee-in-Confidence such as:
Documents labelled as Committee-in-Confidence may be circulated within the committee or to the responsible parent committee.
Security and management of personal informationStandards Australia will take reasonable steps to protect the personal information we hold from misuse and loss and from unauthorised access, modification or disclosure. The ways we do this include:
If we no longer require your personal information and are not legally required to retain it, Standards Australia will take reasonable steps to destroy or permanently de-identify the personal information.
Links from our website to other websitesOur website may contain links to third party websites. We do not operate these websites and therefore are not responsible for the collection or handling of personal information by the operators of these websites.
Accessing the information we hold about youUnder the APPs, you may be able to obtain a copy of the personal information that we hold about you. The APPs provide some exceptions to your rights in this regard. To make a request to access this information, please contact us in writing. We will require you to verify your identity and specify what information you require. We may charge a fee to cover the cost of verifying the application and locating, retrieving, reviewing and copying any material requested.
Updating your personal informationWe endeavour to ensure that the personal information we hold about you is accurate, complete and up-to-date. Please contact Standards Australia at the contact address set out below if you believe that the information we hold about you requires correction or is out-of-date.
Sending information overseasPersonal information is sent overseas in limited circumstances, including to:
Standards Australia will not send your personal information to a recipient outside Australia without obtaining your consent or otherwise complying with the APPs.The countries in which recipients are likely to be located include New Zealand, Switzerland, Luxembourg and the United States.
International Organization for Standardization and International Electrotechnical CommissionStandards Australia is a member of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). If you are involved in international standardisation activities (including as a delegate to any ISO or IEC committee) then Standards Australia may also use and disclose to ISO and the IEC your personal information (including a name, email address, physical address, telephone number and role) for the purposes of the development of standards and related activities in the world with a view to:
ISO and IEC may disclose your personal information to other countries such as those listed at:
If your personal information is sent to ISO and you have any questions or concerns, you can also contact the ISO Data Protection Officer at the following email address: DataProtectionOfficer@iso.org. If your personal information is sent to IEC and you have any questions or concerns, you can also contact the IEC Data Protection Officer at the following email address: firstname.lastname@example.org.
Complaints If you are concerned that we have not complied with your legal rights or applicable privacy laws, you may bring a complaint internally through our complaints process or you may decide to make a formal complaint with the Office of the Australian Information Commissioner (www.oaic.gov.au) (which is the regulator responsible for privacy in Australia). We will deal with complaints as follows:
Step 1: let us know
Step 2: investigation of complaint
Step 3: contact OAIC
Office of the Australian Information Commissioner (OAIC)
Complaints must be made in writing
1300 363 992
Director of Compliance Office of the Australian Information Commissioner GPO Box 5218 Sydney NSW 2001