Introduction

United Credit Union is bound by the National Privacy Principles (NPPs). It is recognised that all members have rights and that their personal and other details should be treated in the strictest confidence.

The national privacy scheme is a legislatively based framework of privacy laws for the Australian private sector. It is designed to give appropriate privacy protection to individuals when private sector organisations seek to collect, hold, use, disclose, correct or transfer their personal information.

Authority

The Policy has been approved by the Chief Executive Officer.

Review Periods

The policy statement will be reviewed by the Executive Manager, Risk not less frequently than annually.

Monitoring and Supervision

Monitoring for compliance with this policy will be the responsibility of the Executive Manager, Sales & Service. Breaches of compliance will be reported to the Operational Risk Committee.

Related Documents

• Privacy Act 1988
• Privacy Amendment (Private Sector) Act 2000
• National Privacy Principle Guidelines (2001)
• Dispute Resolution Policy & Process

Definitions

Roles and Responsibilities

• Every staff member at United Credit Union is responsible for upholding this policy and for ensuring that the National Privacy Principles are understood and adhered to at all times.

National Privacy Principles

1. Information collected: Information is collected only when it is relevant to the specific need.
2. Use and Disclosure: Personal information will only be used and disclosed:
1. or the primary purpose for which it was collected
2. for reasonably expected secondary purposes
3. when the member has authorised it
4. for direct marketing, unless specified otherwise
5. where required or authorised by law
3. Data Quality: United is responsible for taking reasonable steps to ensure that the information collected, used or disclosed is accurate, complete and up to date.
4. Data Security: United is responsible for taking reasonable steps to protect the personal information held from misuse and loss and from unauthorised access, modification or disclosure.
5. Openness: Policies about the management of personal information must be freely available.
6. Access & correction: United must provide people with access to information about them on request except in certain circumstances relating to:
1. Health issues
2. An impact on the privacy of other people
3. The request is frivolous or vexatious
4. Legal matters
The Credit union must ensure that information held is accurate, complete and up to date before basing decisions on, or disclosing to others that information.
7. Identifiers: United must not adopt, use or disclose identifiers assigned by other organisations or agencies.
8. Anonymity: Where lawful and practical, individuals must have the option of not identifying themselves when entering transactions with an organisation
9. Transborder data flows: United may transfer personal information about an individual to someone (other than the organisation or individual) in another country only if:
1. The information is subject to law
2. The individual consents
3. It is necessary for the performance of a contract
10. Sensitive information: Must not be collected unless:
1. The individual has consented
2. It is required by law
3. The collection is necessary to prevent or lessen a serious and imminent threat to life or health of the individual who is incapable of giving consent
4. If the information relates to a non-profit organisation and it relates only to the members of the organisation and the organisation undertakes not to disclose the information without the individual's consent

Policy Statement

The information collected about individuals will depend on the product or facility required by that person or organisation. United will only collect information that is relevant to the specific needs of individuals. Information is generally collected during application for membership or loan facilities and will be stored within the core banking system database which is fully secure.

United will only disclose personal information:

United will hold information about individuals only when it is related to provision of banking and other financial services required. In some instances, United may be required to exchange personal information with external advisers, regulatory bodes, insurers and other organisations with which there are alliances or arrangements to promote or provide respective products and services.

Dispute Resolution: United has established a Dispute Resolution process which is readily accessible.

United is obliged to provide access to information held about individuals to them on request (with certain exceptions).