3 questions you should ask about data privacy
1 Do you collect data about people who reside outside of Australia?
3. Do you have a data breach and response plan?
Data privacy is a key concern for businesses today. If you aren't sure of the answers to these questions, the AMAA's Privacy Review Service can assist your team to manage operational risk and meet the Australian law requirements. The AMAA’s new Privacy Review allows marketers to understand how they comply with Australian requirements, where they excel and where if any the risks are.
The review primarily focuses on the Australian Privacy Principles (Privacy Act 1988) and the Notifiable Breaches amendments (Feb 2018), but can be expanded to include a review against the GDPR for marketing actions.
The AMAA is working in partnership with the AMI (Australian Marketing Institute) to deliver this unique marketing focussed service to allow Australian marketing teams to minimise privacy risk to their businesses.
How it works
Consultation and Information Collection
In the first step the AMAA consults with the business to meet the team, learn more about their approach to privacy, how Personal Information is collected and used and to discuss the process and agree outcomes, documented in a project outline. The AMAA requests information including: privacy policies (both internal and external), examples of marketing use of personal information and details about who has access to information.
Compliance Customisation, On-Site Workshop and Reporting
In the second step the AMAA reviews provided information and customises the review to the specific client environment. An on-site workshop is scheduled to enable the review team to meet the marketers and discuss privacy in practice, review systems and practices and follow-up questions etc.
AMAA completes the review process and presents the key review findings and outcomes and completes the review with a detailed Report. The report identifies:
• Documents how the business implements Australia requirements in its marketing;
• Discusses the privacy procedure in practice in the business; and
• Identifies potential risks and opportunities for improvement
Date: 11 Apr 2019