1 Our Commitment to Privacy
2 CRA’s Privacy Principles
When we talk about personal information, we are referring to any information or an opinion whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. CRA needs to collect the following personal information from you: your name and various personal contact details details of your assets and liabilities, including details of your financier’s. Without all of this information, CRA may be unable to adequately provide you with its services. Whenever it is lawful and practicable, you will have the option of not identifying yourself. CRA handles your personal information in accordance with the following principles:
2.1 Collection of Personal Information
Your personal information will only be collected if it is necessary to enable us to provide our service to you. We will only collect your personal information by lawful and fair means. When we collect your personal information, the purpose of collection will be identified and it will only be collected with your consent. In general, you may be asked to provide CRA with personal information when you: apply to us for any of our services make a general inquiry (if your personal details are required to fulfil your query) wish to contact us online at email@example.com request sales and advertising information.
2.2 Use and Disclosure of Personal Information
Your personal information will only be used for: the purpose for which it was collected or for a directly related purpose that you would reasonably expect from us to improve our service to you to derive or aggregate anonymous information to prevent or lessen a threat to your life or health or that of another person purposes permitted, required or authorised by or under law the enforcement of legal proceedings, where disclosure is reasonably necessary or any other purpose, where you have consented to its use for that purpose.
Your personal information will not be disclosed to a third party unless: you have consented to the disclosure the third party is our agent or contractor, in which case we will require them to keep your personal information confidential and to use it only for the purpose for which it was disclosed there are reasonable grounds to believe that disclosure is necessary to prevent or lessen a threat to your life or health or that of another person the disclosure is permitted, required or authorised by or under law, or the disclosure is reasonably necessary for the enforcement of legal proceedings.
2.3 Access and Correction
Where we hold personal information about you, we will provide you with access to that information on request. We will allow you access in a form or manner suitable to your needs, unless: providing access would pose a serious and imminent threat to the life or health of any individual providing access would have an unreasonable impact upon the privacy of other individuals the request for access is frivolous or vexatious the information relates to an existing legal dispute between CRA and you, and the information would not be accessible by the process of discovery in those proceedings providing access would reveal the intentions of CRA in relation to negotiations with the individual in such a way as to prejudice those negotiations providing access would be unlawful denying access is specifically authorised by law providing access would be likely to prejudice an investigation, prevention, detection or prosecution of unlawful activity or suspected unlawful activity.
2.4 Restrictions on Access
Where providing access would reveal evaluative information generated within CRA in connection with a commercially sensitive decision-making process, CRA may give you an explanation for the decision, rather than direct access to the information. If CRA has given you such an explanation and you believe that direct access to the evaluative information is necessary to provide a reasonable explanation of the reasons for the decision, CRA will, at your request, undertake a review of the decision. The review will be undertaken by personnel other than the original decision maker. Wherever direct access by you is impractical or inappropriate, CRA and you should consider whether the use of mutually agreed intermediaries would allow sufficient access to meet the needs of both parties. If CRA levies charges for providing access to personal information, those charges: (a) will be reasonable and will not be excessive; and (b) will not apply to lodging a request for access. If CRA holds personal information about you and you notify us that the information is not accurate, complete or up-to-date, CRA will take reasonable steps to correct the information in the manner you have requested.
2.5 Data Security and Openness
CRA will maintain safeguards to protect your personal information against unauthorised use, disclosure, access, alteration, destruction and accidental loss. Any personal information that you submit to us is held with the strictest confidence. CRA has internal policies on management of personal information and is committed to staff training to ensure compliance with these policies.
CRA will not use or disclose any identifier (such as a tax file number) that has been assigned by a government agency (or by an agent or contractor of a government agency), except where required by law.
2.7 Transborder data flows
We will not transfer personal data outside Australia unless we have your consent to do so.
2.8 Sensitive Information
CRA will not collect sensitive personal information that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or details of health, disability or sexual activity or orientation.
2.9 Compliance Audit