Policy statement:

The Board of the KMCC Australia is committed to protecting the privacy of personal information which the organisation collects, holds and administers. Personal information is information which directly or indirectly identifies a person.

Rationale:

The credibility of KMCC Autralia  processes and decision making may be questioned if there is a reasonable perception that: 

• A member, their family, or close associates, could benefit personally from decisions of the Board.
• A member may be biased towards a particular outcome as a result of private or professional
  interests or associations.

Purpose and Objectives:

The purpose of this document is to provide a framework for the KMCC Australia in dealing with privacy
considerations.

Application:

This policy applies to the KMCC Australia.

Procedure

Use and Disclosure

The ICV will:

• Only use or disclose information for the primary purpose for which it was collected or
  a directly related secondary purpose.
• For other uses we will obtain consent from the affected person.

Data Security and Retention

The KMCC Australia will:

• Safeguard the information we collect and store against misuse, loss, unauthorised
  access and modification.
• Only destroy records in accordance with Administration & Records Management
  Policy.

Openness

The KMCC Australia will:

• Ensure stakeholders are aware of [name of organisation]’s Privacy Policy and its
  purposes.
• Make this information freely available in relevant publications and on the
  organisation’s website

Access and Correction

The KMCC Australia will:

• Ensure individuals have a right to seek access to information held about them and to
  correct it if it is inaccurate, incomplete, misleading or not up-to-date

Making information available to other service providers

The KMCC Australia will:

• Can only release personal information about a person with that person’s expressed
  permission. For personal information to be released, the person concerned must
  sign a release form.
• Can release information to third parties where it is requested by the person
  concerned.

Responsibility:

The organisation’s Board is responsible for adopting this policy.The organisation’s Board, General Manager and all staff members, contractors and volunteers are responsible for the implementation of this policy.

The organisation’s General Manager is responsible for monitoring changes in Privacy legislation and for reviewing this policy as and when the need arises.