Privacy

Parishes are permitted to collect personal information for the purposes of:

maintaining the Parish Electoral and Pastoral Roll;
collecting information to complete Annual Parish Returns, including;
- Lay Officer’s Declarations
- Return of Services, Attendance and Other Statistics
- Parish Leadership Return
maintaining baptism, marriage and death registers
managing persons of concern in accordance with Policy

Access to this information must be limited to those who need to know.

People have the right to request access to their personal information.

The information must be stored in a secure manner. This may mean it is stored on a computer, which is password protected and located in a secure room or safe.

In the event of information being lost (e.g., the computer is stolen) every effort should be made to limit the damage.

If a data breach has occurred, the Notifiable Data Breach (NDB) Scheme mandates the obligation to notify individuals affected by data breaches that are likely to result in serious harm. Examples of serious harm include:

a likely risk of physical harm;
financial loss through fraud;
identity theft, which can affect an individual’s finances and credit report;
serious psychological harm; or,
serious reputational harm.

Further Advice:

Policy 42 – Privacy
The Diocesan Operations Manager is the Diocesan Privacy Officer