This Notice should be read in conjunction with the Overview and the Definitions, including, in particular, the table of categories of information.

Business protection

What processing activities do you undertake that include my information?
We undertake processing activities during your employment which are designed to ensure that our business operations are protected.  These activities include monitoring both the behaviour and activity of our employees and the use of our systems.
This includes CCTV, email filtering and other monitoring activities, including the use of software or other tools.
This will also include investigations into security or compliance concerns, as appropriate.
What categories of information are included in these processing activities?
To run the processes set out above, we process staff related data, data related to your engagement with the Company, recruitment data, regulatory data, vetting data, remuneration and benefits data, leave information, HR processes data, monitoring data (to the extent permitted by applicable laws) and employment claims, complaints and disclosures data.
We may also process sensitive information (such as criminal records information) to the extent permitted by applicable laws.
What is the purpose of these activities?
We carry out these activities to protect our business.  In particular, we do so in order to ensure compliance with applicable laws and Company policies and procedures, to monitor use of the Company’s IT system and to manage the activities and behaviour of our employees including:
  • protecting our assets and the integrity of our systems;
  • detecting and preventing loss of our confidential information and proprietary information;
  • detecting and preventing crimes or criminal activity; 
  • ensuring compliance with export control and other legal requirements placed upon our Company (both by Australian and overseas laws); and
  • protecting the rights, freedoms and interests of individuals when processing information and ensuring compliance with privacy laws.
To the extent that you did not get this information from me, how did you collect it?
Some of the information processed in these activities may be generated by the Company.  This would usually include line management.
We may also receive information from our business partners and suppliers who help us to carry out this activity and from other sources as set out in this Notice. 
Who do you share this information with?
This information may be shared internally for the purposes described above.
In addition, some of your information will be shared externally with any suppliers or partners as needed and as otherwise set out in this Notice.