SRLA Privacy policy

The Suburban Rail Loop Authority (SRLA) is committed to collecting, using, disclosing and storing personal and health information in accordance with the law.

SRLA’s privacy policy and related processes ensure SRLA can collect information necessary for its functions and activities, while balancing a person’s rights and expectations that their information is treated legally, securely and respectfully.

To achieve this policy, SRLA is committed to:

  • Ensuring SRLA only collects, uses, discloses and stores personal and health information where necessary for its functions and activities
  • Recognising the right of individuals to know how SRLA collects, uses and discloses their information; to access and correct their information; and to interact anonymously with SRLA where lawful and practicable
  • Resolving privacy complaints and breaches in a timely and fair manner
  • Establishing a way of working which supports consistent application of SRLA’s privacy obligations under the Privacy and Data Protection Act 2014 and Health Records Act 2001, including the Information Privacy Principles (IPPs) and Health Privacy Principles (HPPs)
  • Providing training which gives our people the skills and knowledge to identify and appropriately handle personal and health information
  • Continually engaging across government to stay informed of and involved in relevant developments.

To realise these commitments, our people will:

  • Adhere to privacy procedures, processes and guidelines documenting our obligations under law, including the IPPs and HPPs
  • Monitor compliance with our privacy policy and procedures
  • Take reasonable steps to ensure that any personal and health information collected is accurate, complete, and up to date
  • Establish and maintain processes to ensure any de-identified data contained in a data release cannot be re-identified
  • Integrate security measures designed to protect personal information from misuse, loss, unauthorised access, modification, or disclosure
  • Securely store and dispose of personal information as required by law
  • Collaborate with government departments, authorities and agencies to further develop leading privacy practice
  • Review and update this policy and supporting frameworks, procedures, processes and guidelines when required to account for new laws, technology, and processes.

Authorised by:
Suburban Rail Loop Authority Board