HR Data Protection and Privacy Policy

Effective Date: [DATE] Version: [VERSION NUMBER]

1. Purpose

The purpose of this policy is to set out how [BUSINESS NAME] collects, uses, stores, and discloses personal information. We are committed to protecting the privacy of our employees, contractors, and job applicants. This policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Scope

This policy applies to:

• All employees of [BUSINESS NAME]
• Contractors and subcontractors
• Job applicants
• Volunteers and interns
• Anyone whose personal information we hold in our HR systems.

3. Collection of Personal Information

3.1 What information do we collect?

We collect the following types of information:

• Identity Information: Name, date of birth, address, and contact details.
• Employment Information: Resume, employment contract, performance reviews, and salary details.
• Financial Information: Bank account details, superannuation fund details, and Tax File Numbers (TFN).
• Sensitive Information: Medical information, worker's compensation claims, and criminal record checks (if relevant).

3.2 How do we collect it?

We collect information directly from you. This happens when you:

• Apply for a job
• Fill out employment forms
• Provide information to our payroll or HR team

We only collect information that is reasonably necessary for our business functions or activities.

4. Use and Disclosure of Personal Information

4.1 Use of Information

We use your personal information to:

• Pay your wages and superannuation
• Manage your employment relationship
• Provide a safe workplace
• Comply with legal obligations like tax and workers compensation laws.

4.2 Disclosure of Information

We may disclose your information to:

• Government bodies like the Australian Taxation Office (ATO)
• Our accountant, bookkeeper, or payroll provider
• Our insurance company or workers compensation insurer
• A potential employer if you provide a reference (with your consent).

We will not sell your personal information to third parties.

5. Data Security

5.1 Storage

We take reasonable steps to keep your personal information safe.

• Physical Records: Paper files are kept in locked cabinets when not in use. Access is restricted to authorised staff.
• Digital Records: Electronic files are protected by passwords and secure networks. We use security software to protect against hacking and malware.

5.2 Access

Only authorised personnel can access your personal information. This includes the business owner, the payroll manager, and HR staff. All staff must sign a confidentiality agreement.

6. Data Quality and Access

6.1 Your Rights

You have the right to:

• Access the personal information we hold about you
• Ask us to correct information if it is inaccurate, out of date, or incomplete.

6.2 Making a Request

To access your records, please contact [CONTACT PERSON]. We will respond to your request within [NUMBER] days. We may charge a reasonable fee to cover administrative costs.

7. Data Retention

We keep employee records for as long as required by law. Generally, this is seven years after your employment ends. After this time, we will securely destroy or de-identify the records.

8. Data Breaches

If we suspect a data breach has occurred that may cause you serious harm, we will:

1. Assess the risk
2. Notify you as soon as practicable
3. Take steps to minimise the harm
4. Notify the Office of the Australian Information Commissioner (OAIC) if required.

9. Policy Review

We review this policy regularly to ensure it remains compliant with Australian law. Changes will be communicated to all staff.

10. Contact Us

If you have a question or complaint about this policy, please contact:

Name: [CONTACT PERSON NAME] Role: [JOB TITLE] Phone: [PHONE NUMBER] Email: [EMAIL ADDRESS]