AIAST currently falls into the exempt category in relation to the Privacy Act. As the Institute continually gathers members information, AIAST has introduced an internal privacy policy as follows:

Collection of Information

The type of information collected by AIAST regarding individuals generally includes the following:

The information held by AIAST may come from a number of sources including:

Some information AIAST receives may be sensitive —information“

Sensitive information or opinion about an individual‘s:

AIAST will only collect sensitive information with the individual‘s consent.

AIAST will not collect personal information unless the information is necessary for one or more of its functions or activities. AIAST will collect the personal information only by lawful and fair means and not in an unreasonably intrusive way. Whenever AIAST collects personal information about an individual, AIAST will take reasonable steps to ensure that the individual is aware of:

The identity of AIAST;

If it is reasonable and practical to do so, AIAST will collect personal information about an individual only from that individual. If however this information is collected from someone else, AIAST will act reasonably to ensure the individual is or has been made aware of the matters listed above, unless certain exemptions apply.

The purposes of which AIAST uses this information.

The purposes of which AIAST uses the personal information referred to above include the following:

Use and Disclose

As a general rule, AIAST will not use or disclose personal information about an individual other than for its primary purpose of collection unless:

AIAST will use the information for our own direct marketing purposes only where:

Data Quality
 
AIAST will take reasonable steps to make sure that the personal information it collects, uses or discloses is accurate, complete and up to date.

Data Security
 
AIAST will take reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modifications or disclosure.
 
AIAST will take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed.

Openness
 
AIAST has set out in this document is policies of management of personal information and will make this document available to anyone who asks for it.

On request by a person, AIAST will take reasonable steps to let the person know, generally, what sort of personal information we hold, for what purposes, and how we collect, hold, use and disclose that information.

Access and Correction

As a general rule, AIAST will, on request by an individual, provide them with access to their personal information. AIAST may however choose not to provide individuals with access to such information. This will include cases where:

AIAST may decide to impose a charge upon the individual to cover the cost of verifying a request for information and locating, retrieving, reviewing and copying any material requested.

Identifiers

AIAST will not adopt a government agency identifier as its identifier of an individual.

Anonymity

Wherever it is lawful and practical, AIAST will allow individuals the option of not identifying themselves when entering into transactions with us.