Privacy

Protecting your privacy, personal and health information is an important aspect of our operations. We understand the importance of protecting an individual’s personal information.

Privacy and Data protection Policy

Definitions

Commissioner means the Victorian Commissioner for Privacy and Data Protection.

Privacy legislation means the Privacy and Data Protection Act 2014.

Personal information (as per privacy legislation) means information or an opinion (including information or an opinion forming part of a database), that is recorded in any form and whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion, but does not include information of a kind to which the Health Records Act 2001 applies.

Privacy by Design is a specific approach to privacy, developed in Canada initially in the 1990s but continuing over the subsequent decades. Privacy by Design is a methodology that allows privacy to be ‘built-in’ to the design and architecture of information systems, business processes and networked infrastructure.

Privacy

The aim of privacy legislation is to give customers and individuals more control over the way organisations such as ours collect, use, secure and disclose personal information.

It also gives customers the right to know what information we hold about them. To assist with this, Lower Murray Water has developed and maintains a Privacy Charter that explains how we handle personal information.

We are bound to comply with the Victorian Information Privacy Principles contained in privacy legislation in the way we handle personal information about customers and other individuals. We have always had a strong commitment to ensuring that personal information is protected and used appropriately.

To assist our employees to comply with privacy legislation, we have developed and will maintain a Privacy Procedure that sets out the requirements of employees when handling personal information.

We have regard to the 7 foundational principles of Privacy by Design to ensure that privacy is integrated into the design and architecture of our systems and processes.

Data protection

The Commissioner is responsible for developing the Victorian protective data security framework for monitoring and assuring the security of public sector data.

The Commissioner may then issue protective data security standards for the security, confidentiality and integrity of public sector data and access to public sector data.

Lower Murray Water and our employees will not act or engage in a practice that contravenes a protective data security standard in respect of data collected, held, managed, used, disclosed or transferred by us and in respect of data systems kept by us.

Cookie policy

The purpose for this cookie policy is to inform when and why cookies are used by LMW on our websites, applications, advertisements and related network services.

Security risk profile assessment and protective data security plan

We commit to undertake a security risk profile assessment and the development of a protective data security plan in accordance with the obligations of the Privacy and Data Protection Act 2014.

Review and distribution

We will ensure that the protective data security plan prepared under privacy legislation is reviewed:

(a) if there is a significant change in the operating environment or the security risks relevant to us; or

(b) otherwise, every 2 years.

We will ensure that a copy of the protective data security plan is given to the Information Commissioner.

Exemption

Consistent with section 90 of the Privacy and Data Protection Act 2014, the Freedom of Information Act 1982 does not apply to a protective data security plan.

Video surveillance (CCTV) footage privacy notice

The personal information that we collect and hold about you from CCTV footage will only be used for the purpose of ensuring the safety of our buildings, assets and any occupants. Signage is in place at all our locations where CCTV cameras are installed.

If we do not collect this information, we will not be able to ensure the safety of our buildings, assets and any occupants at all times.

We will not disclose your personal information to a third party unless you consent, or we are required or authorised by law to do so.

Our Privacy and Data Protection Policy and Privacy Charter explains how you may access or seek correction of your personal information and how we will deal with privacy complaints.

Protection of privacy, personal and health information is an important aspect of our operations. If you have any questions about how your personal information will be managed, contact our Privacy Officer at privacy@lmw.vic.gov.au

Information privacy and our website

Any changes to our privacy charter will be published on our internet website lmw.vic.gov.au, and copies may be obtained from any of our offices.

When disclosing information using our website – for example, via email link or via an online form – an individual is deemed to have consented to us collecting, using, disclosing and handling any personal information or health information collected in accordance with our privacy and data collection policy.

We do not warrant the security of any information transmitted to our website and such information is transmitted at the individual’s own risk in respect of errors in transmission.

Enquiries

Requests for further information and enquiries about the way we handle personal and health information should be directed to our Privacy Officer:

• by email at privacy@lmw.vic.gov.au
• by mail to Lower Murray Water, PO Box 1438, Mildura 3502
• by phone on 1800 808 830