Privacy

The Water Corporation is committed to protecting the privacy of individuals’ personal information, including sensitive information, in accordance with the Privacy Act 1988 (Cth) (the Privacy Act) This document outlines how we collect, use, disclose and otherwise handle and maintain personal and sensitive.

There is currently no legislated privacy regime that applies to Western Australian statutory authorities (including the Water Corporation). The Water Corporation is however, committed to protecting personal and sensitive information in a manner that is consistent with the requirements of the Privacy Act and the Australian Privacy Principles (APPs).

The Water Corporation collects personal and sensitive information about individuals in order to provide services, to compile statistical data and to perform research and evaluation programs to improve its services in the future.

The Water Corporation only collects personal and sensitive information that is reasonably necessary for, or directly related to, one or more of the Water Corporation’s objectives and functions, and ensures that all personal and sensitive information held by the Water Corporation, including information contained in documents and electronic or other devices, is handled in accordance with our Privacy Policy and Standard and in a manner that is consistent with the APPs and the Privacy Act.

The Water Corporation has adopted the Office of the Australian Information Commissioner’s (OAIC) Privacy Management Framework. The OAIC Privacy Management Framework provides steps to:

1. Embed a culture that enables compliance;
2. Establish robust and effective privacy practices, procedures and systems;
3. Evaluate privacy practises, procedures and systems to ensure continued effectiveness; and
4. Enhance responses to privacy issues.

Although the Water Corporation is not formally bound by the Privacy Act, the Water Corporation is committed to protecting personal and sensitive information in a manner, where practicable, that is consistent with the requirements of the Privacy Act and the Australian Privacy Principles. The purpose of this Policy is to outline how the Corporation deals with personal and sensitive information in the manner described within the context of the Privacy Act, the Australian Privacy Principles and the OAIC Privacy Management Framework.

This policy applies to all personal information, including sensitive information, with relation to our customers, internal and external suppliers, contractors, employees, potential employees, internal and external stakeholders and any other solicited or unsolicited personal information collected, used, disclosed and stored by the Water Corporation. It also covers all media in which information is collected and stored e.g. paper, electronic, film and recording (e.g. CCTV). The General Data Protection Regulation does not apply to the Water Corporation, therefore is not covered in this policy.

The Water Corporation will not collect personal and sensitive information unless the information is reasonably necessary for, or directly related to, one or more of the Water Corporation’s functions, powers or activities.

The Water Corporation may ask individuals to provide information via various methods including telephone, fax and forms (hard copy and electronic, such as via a website) in support of an application by the individual for a particular service from the Water Corporation. The Water Corporation will collect Personal and sensitive information about an individual only from that individual, unless the individual consents to the collection of the information from someone else.

The Water Corporation collects the following types of personal and sensitive information:

• Customer information
• Supplier and contractor information
• Recruitment information
• Employee information
• Stakeholder information
• Credit history information
• Competition entrant details
• Personal information provided via our website
• Personal information provided via social media
• Personal information captured by our surveillance devices
• Personal information resulting from customer complaints, investigations, prosecutions and litigation

The personal and sensitive information collected from individuals may be used:

• To provide individuals with the service that they requested or to meet the purpose for which the information was submitted;
• To identify with whom the Water Corporation is communicating (if necessary);
• To create de-identified aggregate data about certain groups of individuals; or
• For any other purpose the Water Corporation considers necessary.

The Water Corporation will not collect or use Sensitive Information about an individual unless the individual consents to the collection of the information and the information is reasonably necessary for, or directly related to, one or more of the Water Corporation’s functions or activities. Where the personal information of an individual has been attained from a third party provider, the Water Corporation will confirm from the provider that the individual has consented to the use by and disclosure to a third party of that personal information.

The Water Corporation uses “cookies” and similar technology on its websites. The use of such technology is an industry standard, and will be used to monitor the effectiveness of Water Corporation advertising and how you use our websites. The Water Corporation also uses cookies to generate statistics, measure user activity, improve the website/applications and to enhance the customer experience. Water Corporation website user can opt-out of cookies if they adjust their internet browsers to refuse cookies or to notify them when cookies are being used. Certain features on the Water Corporation websites may not function properly or optimally if cookies have been turned off.

The Water Corporation’s collection, use or disclosure of Non Identifying Information is not subject to this policy.

The Water Corporation will disclose personal information collected from an individual to the extent that it is deemed necessary to provide the service that the individual has requested or to meet the purpose for which a request was submitted and the personal information provided.

The Water Corporation will only disclose personal information to third parties to the extent necessary to carry out the purposes outlined above. Whenever possible, the Water Corporation will ensure that third parties to whom personal information is disclosed have in place privacy practices that protect the confidentiality of personal information. The Water Corporation also takes reasonable steps to ensure that any contract it has with third parties to whom personal information is disclosed contains appropriate contractual obligations on those third parties regarding the use of that personal information.

The Water Corporation is involved in information sharing with a number of government agencies and all local government authorities. These include, but not limited to, the Department of Water and Environmental Regulation, the Department of Communities, the Valuer General’s Office and Landgate. The Water Corporation may also provide aggregate de-identified data (such as water usage patterns) to other parties on request.

When someone approaches the media or their member of parliament to discuss their particular situation, and the Water Corporation are then contacted by this third party for more information or for advice about that situation, that individual has provided implied consent for the Water Corporation to disclose information to that third party that will identify the individual or situation.

The Water Corporation will not disclose sensitive information or confidential information about an individual unless the individual consents to the disclosure of the information or the Water Corporation is required by law.

The Water Corporation uses social networking platforms such as Facebook, Twitter, LinkedIn and YouTube to connect with customers. We recommend that customers read any terms and conditions (including any privacy statements or policies) that apply to any third-party web service, especially the terms and conditions relating to the handling of personal information, when using these social media platforms to interact with the Water Corporation. These third-party privacy statements and conditions may allow those third parties to use personal information in ways that will be different to the way the Water Corporation uses and discloses personal information. They will prevail over this privacy statement to the extent of any inconsistency but will not change the way in which the Water Corporation uses personal information.

We recommend that customers do not use a public-facing social media channel, such as Facebook, to provide us with personal details or disclose these personal details in any query or issue raised through that forum. This is necessary in protecting customer’s privacy and keeping account details private, preventing identity theft or unauthorised people accessing Water Corporation accounts. Examples of personal details that should not be published on these social media channels include home addresses, birth dates, middle or maiden names, Water Corporation account numbers or any details used in an ID check by Water Corporation for verification purposes. We encourage customers to keep this personal information away from the public eye by contacting Water Corporation through direct or private messages, email, our website enquiry email form, by post or by phone.

We send customers, potential customers, suppliers, contractors and stakeholders information about our products and services that we consider may be of interest to them. These communications are sent in various forms, including mail, SMS and email, in accordance with applicable marketing laws, including but not limited to the Spam Act 2003 (Cth). Where an individual has indicated a preference in regards to a method of communication, we endeavour to use that method if practical to do so. Individuals can opt‑out of receiving marketing communications at any time by lodging a request with our Privacy Officer or by using opt‑out facilities provided in marketing communications. We do not rent or sell personal information under any circumstances.

The Water Corporation may disclose personal information locally and overseas to other parties including any agent, contractor or third party who provides administrative or other services to the Water Corporation. The countries in which these third parties are located will depend on the circumstances. The Water Corporation will take such steps that are reasonable to ensure that the overseas recipient does not breach the Australian Privacy Principles.

The Water Corporation will take reasonable steps to:

• ensure that personal information it collects is accurate, complete and up-to-date;
• ensure that the personal information it uses or discloses is, having regard to the purpose of the use or disclosure, accurate, up-to-date, complete and relevant;
• protect personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure; and
• destroy or permanently de-identify personal information which it no longer needs to use or disclose, unless the information is contained in a Commonwealth record or the Water Corporation is required to retain the information by law or by a court/tribunal order.

If at any time an individual wishes to find out more about the Water Corporation’s privacy practices, or access or correct personal information, the individual may contact the Water Corporation’s Privacy Officer by email – privacy@watercorporation.com.au.

If at any time an individual believes that Water Corporation has not adhered to this policy, the individual may lodge a complaint with the Water Corporation’s Privacy Officer by email – privacy@watercorporation.com.au.

As per the Privacy Amendment (Notifiable Data Breaches) Act 2017, the Corporation will take reasonable steps to notify individuals impacted by eligible data breaches (as defined under the Privacy Act), as soon as possible after it becomes aware of the breach.

We may amend this policy from time to time in order to ensure that it remains accurate in view of any alterations to our information handling practices due to new technologies and changed business practices. Any updated policy will be published on our website.

If you would like any further information about how we handle personal information, please email our Privacy Officer - privacy@watercorporation.com.au

Privacy Act 1988
Freedom of Information Act 1992
OAIC Privacy Management Framework
S513 Privacy

Australian Privacy Principles

• Australian Privacy Principle 1 – Open and transparent management of personal information
• Australian Privacy Principle 2 – Anonymity and pseudonymity
• Australian Privacy Principle 3 – Collection of solicited personal information
• Australian Privacy Principle 4 – Dealing with unsolicited personal information
• Australian Privacy Principle 5 – Notification of the collection of personal information
• Australian Privacy Principle 6 – Use or disclosure of personal information
• Australian Privacy Principle 7 – Direct marketing
• Australian Privacy Principle 8 – Cross border disclosure of personal information
• Australian Privacy Principle 9 – Adoption, use or disclosure of government related identifiers
• Australian Privacy Principle 10 – Quality of personal information
• Australian Privacy Principle 11 – Security of personal information
• Australian Privacy Principle 12 – Access to personal information
• Australian Privacy Principle 13 – Correction of personal information