Privacy at ONRSR

The APPs are a minimum set of standards, rights and obligations for how we handle and maintain people’s personal information. This includes how we collect, store, use, disclose, quality assure and secure personal information, as well as your rights to access or correct your personal information.

Your privacy

Personal information is information about an individual that can identify that individual, such as their name and contact details, training records, bank details or licence number. Non-personal information, such as information about organisations is not covered by privacy legislation but may be bound by confidentiality requirements under the Rail Safety National Law (RSNL).

Your rights

The Privacy Act provides you with rights, including:

• being told generally what kind of information we are collecting and how we collect it;

• being told the purpose for which your personal information is being collected;

• your personal information can only be collected for a lawful purpose;

• being given the opportunity to deal with us anonymously or using a pseudonym where it is not impracticable to do so;

• finding out what information we hold about you and have it corrected if you can show that it is incorrect, out of date or incomplete;

• providing that your personal information must be stored securely and protected from interference or misuse; and

• finding out how your personal information will be used.

If you have a concern about the way your personal information has been handled under the Privacy Act you can provide that information to us for our consideration, and response.

You are also able to contact the Office of the Australian Information Commissioner (OAIC) - an independent body able to investigate complaints about possible interferences with your privacy.

Privacy Policy and Collection Notice

ONRSR’s Privacy Policy sets out our approach to handling personal and sensitive information in accordance with the Privacy Act 1988, including:

• types of personal information collected and held by ONRSR;

• why and how ONRSR collects personal information;

• how ONRSR stores, uses and discloses personal information;

• how individuals can access and/or correct personal information that is held about them;

• how to make a complaint about the handling of your personal information.

When ONRSR collects personal information about an individual, APP5 requires us to notify that individual of certain matters, including:

• our identity and contact details;

• why and how their personal information is being collected;

• under what authority that information is collected;

• what happens if they refuse to provide that information;

• how their will be disclosed (if applicable);

• how to access and/or correct their information;

• information about our Privacy Policy;

• how to make a complaint about a breach of the APPs.

These matters are detailed in ONRSR’s Collection Notice APP5.