Purpose and Scope
Ownership of Personal Information
Ignorance of the existence of any privacy policies and procedures will not be an acceptable excuse for non-compliance.
ASCC will ensure that all contractual arrangements with third parties adequately addresses privacy issues.
Collection of Information
Collection of personal information by ASCC will be reasonable, lawful and not intrusive. A person from whom personal information is requested must be told:
• the company’s name (if external to the company)
• the purpose of collection
• that they can get access to their personal information in order to check its accuracy; and
• what will be done with the information
Use and Disclosure
ASCC will only use or disclose information for the purpose for which it was collected unless the person has consented, or the secondary purpose is related to the primary purpose and a person would reasonably expect such use or disclosure, or the use is for direct marketing in specified circumstances and with the permission of the person, or in circumstances related to public interest such as law enforcement and public or individual health and safety.
ASCC will take all reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure.
Access to Personal Information
Any person who has provided personal information to ASCC for whatever reason may gain access to that information by contacting firstname.lastname@example.org.