Review of Privacy Policy of ABC IT Company

IT Networking Design
Introduction:
As an IT consultant working for ABC IT Company the manager has assigned a task to review
the Privacy Policy of ABC IT Company. It is required to review this policy and report on its
compliance with the privacy legislation ( as per Australian Privacy Act, 1988).
Review:
It is the legal responsibility of the ABC IT Company to have a Corporate Privacy Policy if it
is a private sector company or a non-profit organisation having an annual turnover greater
than $3 million (Svantesson 2010). The 10 steps to protect other people’s personal
information include the collection, use and disclosure, information quality and security,
openness, access and correction, identifiers, anonymity, trans border data flows and sensitive
information (Tucker 1992). The data collected, stored and destroyed is as per the policy
requirement (Otlowski 2007). The information must not be disclosed, if it does not involve
business dealing related data. The employee responsibility is marked as per the policy, but
just Privacy Commissioner must be approached in case of any concern. There is no need of
signing the confidentiality agreement by the sub-contractor as per the Australian Privacy Act,
1988.
There are some alterations which can be made in the policy.
The organisation cannot collect any information if it is not necessary for any of its function or
activity. The data that ABC IT Company is collecting must be useful for any function or
activity. If it is not so, then the company cannot collect that information. The personal
information must be collected in lawful manner. The personal information of an individual
must be collected from him only and not from any other person or organisation.
The personal information of an individual can be disclosed by the organisation only under
certain restrictions like if the information is not a sensitive information. If any personal
information is of no use, it is the responsibility of the company to destroy it timely.