The objective of this policy is to provide a code of conduct in relation to the use of information about individuals which may be collected, stored, and used by CSSC. This Policy applies the ten National Privacy Principles (NPP) as scheduled in the Privacy Amendment Act (Act No. 155 of 2000) – www.privacy.gov.au If any part of this policy conflicts with the NPP then the NPP shall take precedence.

1. Collection of Personal Information

• CSSC will not collect personal information on any individual, unless that information is necessary to perform our normal business functions and activities.
• CSSC will collect information only by lawful and unobtrusive means.
• Any individual from whom personal information is collected may access their personal information upon request.

2. Use and Disclosure of Personal Information

• CSSC will not use or disclose personal information for any other purpose than the purpose for which it was collected.
• CSSC will not disclose personal information to any other organisation or individual unless required to do so.

3. Data Quality

• CSSC will take all reasonable steps to ensure that all information held is accurate and up-to-date.

4. Data Security and Disposal

• CSSC will protect any personal information from misuse and unauthorised access.
• CSSC will take steps to destroy any information no longer required for the purpose it was originally collected.

5. Openness

• CSSC will outline in this policy document, or other documents as required, our clearly expressed policy and procedures on the collection, storage and use of personal information.

6. Access and Correction of Information

• CSSC will take all reasonable steps to allow organisations access to their information on request so as to allow for requested changes to be made to that information if the information is inaccurate or incomplete.

7. Identifiers

• CSSC will not adopt any identifiers used by a commonwealth agency (eg. tax file numbers, ABN's, license numbers) for an individual.

8. Anonymity

• Any organisation or individual requiring confidential access to data held may contact CSSC to restrict their identification.

9. Transborder flow of data

• CSSC will not transfer an individual's information to foreign countries in circumstances where the information will not have appropriate privacy protection.

10. Sensitive information

• Sensitive information will not be collected without the consent of the organisation.
• Information provided to CSSC will be deemed to be provided with consent.This information will not be disclosed to any person or organisation without the written approval of the individual.