sec.32Content of privacy policy

sec.32 Content of privacy policy

A committee’s privacy policy must state the ways the committee, or a member of the committee, may do any of the following— acquire and compile relevant information; securely store relevant information; disclose relevant information; ask an individual for consent to disclose the individual’s identity under section 83 (2) of the Act . The privacy policy also must state the circumstances under which a record containing relevant information may be copied or destroyed. Nothing in this section affects the operation of the Information Privacy Act 2009 or the Privacy Act 1988 (Cwlth) . In this section— relevant information means information acquired or compiled by the committee in the performance of its functions. (sec.32-ssec.1) A committee’s privacy policy must state the ways the committee, or a member of the committee, may do any of the following— acquire and compile relevant information; securely store relevant information; disclose relevant information; ask an individual for consent to disclose the individual’s identity under section 83 (2) of the Act . (sec.32-ssec.2) The privacy policy also must state the circumstances under which a record containing relevant information may be copied or destroyed. (sec.32-ssec.3) Nothing in this section affects the operation of the Information Privacy Act 2009 or the Privacy Act 1988 (Cwlth) . (sec.32-ssec.4) In this section— relevant information means information acquired or compiled by the committee in the performance of its functions.

• (a) acquire and compile relevant information;
• (b) securely store relevant information;
• (c) disclose relevant information;
• (d) ask an individual for consent to disclose the individual’s identity under section 83 (2) of the Act .