About this policy
This policy explains how the Department of Energy and Economic Diversification (DEED), a public authority of the Government of Western Australia, collects, uses, discloses and protects personal information. It sets out the kinds of personal information that is collected, why it is collected, and how it is managed once it is collected. It also sets out how to access and correct your personal information.
In addition to its obligations under this Privacy Policy, DEED is subject to a number of legal requirements that affect how it collects, uses and discloses personal information. Those legal requirements include legislative frameworks including the Privacy and Responsible Information Sharing Act 2024 (WA) (PRIS Act), the Freedom of Information Act 1992 (WA) (FOI Act) and the State Records Act 2000 (WA).
The Department's role
If you have been directed to this page, that means that DEED may be collecting your data when carrying out its functions and role. DEED leads Western Australia’s economic development, international trade and investment, and promotes the international education, science and innovation sectors. You can find more information about DEED and its functions on our homepage.
To see how DEED deals with your data in accordance with Western Australian law, visit the DEED Privacy Policy webpage.
If you are accessing the websites managed by DEED, and you are a citizen of a member state of the European Union, click on the accordion sections below to see how DEED deals with your data in accordance with EU and Australian laws.
GDPR Data Subject
The Department of Energy and Economic Diversification (DEED) is a government agency in Western Australia. DEED leads Western Australia’s economic development, energy transition, international trade and investment, and promotes international education and science and innovation sectors.
This portion of the Privacy Policy relates to citizens of a member state of the European Union accessing any of our websites.
This Privacy Policy outlines the way DEED deals with your data that is consistent with the General Data Protection Regulation (GDPR), otherwise in a way that is consistent with the Privacy and Responsible Information Sharing Act 2024 (WA), and the Western Australian Information Privacy Principles.
DEED is committed to protecting your privacy and the confidentiality of your:
- Personal Information and Sensitive Personal Information as defined within the Western Australian Privacy Laws; and
- your Personal Data as defined in the GDPR,
together, your (Information).
This Privacy Policy explains, in further detail, the types of Information we collect, how we collect and use this Information, who we may disclose it to, how you can access and change your Information and how you can make a privacy complaint.
Data controller and contact details
The Department is the data controller for the purposes of the GDPR.
Privacy Officer / Data Protection Officer:
Department of Energy and Economic Diversification
Level 11, 1 William Street, Perth, WA 6000
Email: privacy@DEED.wa.gov.au
Telephone: +61 8 9262 1700
What kind of Information do we collect?
Show more- The types of Information that DEED may collect and hold includes the following:
- full name, postal address, e-mail address, and telephone numbers;
- occupation;
- date of birth, gender and marital status;
- any other information you provide to us by any means;
- information associated with web browsing, such as your IP address and web cookies; and
- information relating to a child under 16 if parental consent has been given.
- DEED may collect the Information of anyone over the age of 16 years. If DEED wishes to collect the information of anyone under 16 years of age (child), DEED will seek the consent of such collection from a person who has parental responsibility over the child.
- You can browse the general content of DEED’s website anonymously through the use of an anonymised web browser function, without disclosing your personal information. However, some functionality on this website may require you to provide personal information.
- Generally, the kinds of information that DEED will collect and/or hold will depend on the nature of our interaction with you – essentially, the purpose of the activity we are conducting. Accordingly, the kinds of information we record will usually extend to your name, address, contact details (including email addresses), payment information (such as credit card and bank account details) and cookie data.
- On occasion, we may collect and/or hold other kinds of Information – such as when we run a promotional event or an awards program. When we do this, we will disclose our intention to do so to you.
- At all times, DEED will take reasonable steps to inform you of the kinds of Information it collects and holds when you are engaged with it, and how this may vary from project to project.
What kind of information can we hold?
Show more- We are permitted to collect and/or hold, with your consent, the following kinds of Information:
- Personal Information, being information or an opinion about an identified individual, or an individual who is reasonably identifiable.
- Personal Data, being any information which is related to an identified or identifiable natural person that resides within the European Union.
- Sensitive Personal Information, being information or an opinion about an individual’s personal preferences or characteristics (such as race, ethnicity, political views, memberships, religious or philosophical beliefs and sexual preference), health information and/or biometric information.
- Special Categories of Personal Data, being personal data revealing racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union memberships, genetic data, biometric data, health status, or sexual orientation.
- Sensitive Personal Information (as defined in the PRIS Act) and Special Categories of Personal Data (as defined within the GDPR) are afforded a higher level of protection than other kinds of information under the PRIS Act and GDPR. We will only collect and hold Sensitive Personal Information, and Special Categories of Personal Data when you have given explicit consent for the processing of such data for one or more specified purposes.
How do we collect your information?
Show more- DEED is bound by the State Records Act 2000 (WA) (the State Records Act) and the DEED Record Keeping Plan (the DEED RKP), which is made pursuant to that legislation. The State Records Act and the DEED RKP apply to all records generated by DEED.
- DEED may collect Information from or about you in a number of circumstances, including:
- from publicly available sources of information;
- when you use our services or contact us directly;
- when you sign up to receive information from us;
- when you take part in one of our competitions and/or promotions;
- when you use our website and/or via software, such as cookies and web/tracking pixels (also known as “web beacons”);
- when you provide or offer services to us;
- from third parties;
- from our own records at DEED;
- when legally required to do so; and
- when you explicitly provide it to us for the purpose of DEED providing services to you.
Means of collection
Show more- DEED only collects (and holds) Information when knowingly and voluntarily submitted by you. When you register your interest or otherwise in the course of us providing services to you, DEED may need to collect Information which may include your name, address, telephone/mobile phone number, e-mail address, credit card details, your business name, your user ID or password.
- DEED only collects (and holds) Sensitive Personal Information (as defined in the PRIS Act) and Special Categories of Personal Data (as defined within the GDPR) when knowingly and voluntarily submitted by you. Although DEED will rarely hold and/or collect this kind of information, the information DEED may hold includes your racial or ethnic background, your family status and/or financial information about you, such as your tax file number.
- DEED will, at all times, take reasonable steps to collect your Information directly from you, unless:
- it is unreasonable or impracticable for us to do so; or
- you consent to the collection of the Information from someone other than you; or
- we are required or authorised by or under the GDPR or Australian law, or a court/tribunal order, to collect the Information from someone other than you.
- In the event we receive your Information from a third party, via referral and/or via a purchase list, we will take reasonable steps to inform you of that and seek your consent to our collection of that Information. Should you refuse to consent to that collection, we will take reasonable steps to destroy or de-identify that Information.
How we use your information
Show more- We will only use your Information to the extent permitted by the law. We may use the Information you provide to us or which we collect for the following range of purposes, including:
- To register you on our databases.
- To process and deliver your order/booking/purchase including:
- manage payments, fees and charges; and
- collect and recover money owed to us.
- To respond to any of your enquiries, including those submitted online, by telephone or in person.
- To organise and provide you with a product or service you have requested, or ensuring that you benefit from any relevant special offer or promotion (and to fulfil our obligations under any other agreement we may have with you).
- To manage our relationship with you which will include:
- notifying you about changes to our terms and conditions or Privacy Policy; and
- asking you to leave a review or take a survey.
- To enable you to partake in a prize draw, competition, or complete a survey.
- To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
- To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
- To use data analytics to improve and enhance our existing products, services and applications and develop new offerings, recommendations, advertisements and other communications and learn more about customers’ preferences in general.
- To make suggestions and recommendations to you about goods or services that may be of interest to you, including carrying out surveys to better understand your preferences.
- To provide your Information to our advertising, marketing, social media and promotional agencies.
- To send information, marketing materials and newsletters to you.
- To prevent fraud and for investigation purposes, for example, using device information such as device ID(s) to ensure that any vouchers or discounts relating to any promotions or campaigns are not being redeemed fraudulently, checking that a payment is not made fraudulently.
- To create and manage customer database(s). As part of our ongoing customer relationship management activities, we may consolidate several databases into one or otherwise link separate databases to more effectively manage your accounts. Information may be linked via a unique identifier, such as a cookie or account number. Alternatively, we may decide to combine two or more databases into a single database of customer information. We may do this for your and/or our convenience (for example, to allow you to more easily register for a new service), to allow us to provide more seamless customer support whenever you contact us and to provide you with better, personalised services, content, marketing and adverts.
- To share your Information with entities throughout Australia and internationally (such as venture capital firms, innovation hubs, grant funders, or researchers). However, DEED will get your express consent prior to sharing any of your information externally. Further, DEED will endeavour to ensure that any third party that it shares your personal information with (including those who are overseas), will deal with your information in a way that is consistent with Australian Privacy Laws.
- We will only use your Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us using the details set out at the bottom of this Privacy Policy.
- If we need to use your Information for an unrelated purpose, we will notify you and we will explain the legal basis that allows us to do so.
- Please note that we may process your Information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
How do we hold and store your information?
Show more- All of the information we collect is stored securely in digital formats with strict security measures. Information collected via hard copy formats is transferred to digital storage, and the hard copies destroyed securely through confidential waste management.
- All information you provide to us is stored on our (or contracted third party) secure servers. DEED collects your Information online when you perform the following tasks:
- create a ‘user profile’ on a DEED portal; and
- sign up to receive email communications from DEED.
- DEED will keep your information only for as long as you want us to. You can opt-out or unsubscribe from our email communications at any time via the "unsubscribe" link in any of the marketing emails you receive from us.
- If you'd like to delete your user profile on DEED’s website or portals, you can do so by logging in to your account and clicking the "delete my profile" link. If you have any problems with attempting to delete your information, please contact us and we will happily remove it for you.
Security
- DEED strives to ensure the security, integrity and privacy of the Information of its clients. DEED takes reasonable steps to protect the security of all Information.
- DEED personnel are required to respect the confidentiality of Information and the privacy of individuals.
- We use a variety of physical and electronic security measures, including restricting physical access to our offices and firewalls and secure databases to keep Information secure from misuse, loss or unauthorised use or disclosure.
- DEED continually reviews its various security measures in order to ensure that they are up to date and fit for purpose.
Information retention and destruction practices or obligations
- The State Records Act and the approved disposal authority defines how long DEED will retain information and when to destroy records.
- If your information is not subject to the State Records Act and the DEED disposal authority, then:
- DEED will only retain your information as long as it is necessary for it to do so (for example, this may be until the end of a given project or the end of a period of time for expressing interest in a development) or where and when it is required to do so by legislation or a court or tribunal order.
- DEED periodically reviews and removes information that is no longer necessary to retain.
- Once the purpose for which the information was collected expires or no longer required, DEED will take reasonable steps to destroy the information or to de-identify the information, so that it can be retained for statistical purposes.
- Information retained for statistical purposes may be used to improve our services and to make them more responsive to the needs of our customers. This statistical compilation and analysis of information may also be used by us or provided to others as a summary report for marketing, advertising or research purposes.
Unsolicited personal information
- DEED may receive your Information as unsolicited personal information.
- Unsolicited personal information is received by an organisation, such as DEED, where it took no active steps to collect that information.
- When DEED receives unsolicited information, DEED will destroy the information as soon as practicable, so long as it is lawful and reasonable for it to do so.
The purpose of our collection, holding of, use or disclosure of information
Show moreHow and in what circumstances will DEED use or disclose of my Information?
- DEED may, in certain circumstances, collect, hold, use and/or disclose your Information.
- DEED will use and disclose your Information to provide our services to you or to fulfill administrative functions associated with these services. In general, we will use and disclose your Information for the following purposes:
- to notify you about an event you may wish to be involved in;
- to communicate with you with respect to an existing event or booking;
- to provide and market our services or the goods/services of our partners or affiliates;
- to help us manage and enhance our services;
- to purchase from you;
- for any purpose for which the information was provided; or
- any other purpose related to any of the above.
Primary purpose and secondary purposes
- Your Information will only be used and disclosed for the primary purpose for which it was submitted or for such other secondary purposes that are related to that purpose, unless we disclose other uses in this Privacy Policy or at the time of the collection of that Information.
- We will only make use of or disclose your Information for a secondary purpose if:
- you have consented to the use or disclosure of that Information; or
- you would reasonably expect DEED to use or disclose the Information for the secondary purpose; or
- the use or disclosure of that Information is required or authorised by or under legislation or a court/tribunal order; or
- a “permitted general situation” exists in relation to the use or disclosure of the Information by DEED; or
- DEED reasonably believes that the use of the Information is reasonably necessary for one or more enforcement related activities conducted by, or on behalf of, an enforcement body.
- In the event DEED discloses information pursuant to this policy, DEED will make a written record of the use or disclosure.
- When collecting your Information we will inform you of the primary purpose of our collection and/or any anticipated secondary purpose that may arise. The purpose of our collection will vary from project to project, depending on the nature of the project and the nature of your involvement and/or interest in the project.
Who can access my Information and what conditions apply to their use of my Information?
- As a general rule, your Information will only be accessed and/or viewed by DEED staff and officers, as and when it is appropriate or necessary. However, your Information may also be accessed, from time to time, by:
- DEED contractors;
- DEED project and/or marketing partners; or
- DEED suppliers.
- Where a party, other than an employee or officer of DEED, has access to the Information of individuals, they will be required to comply with any applicable Australian privacy legislation and the GDPR.
- The access and use of your Information by a third party will be restricted to the purpose for which it was first collected and/or to a closely related secondary purpose.
- We may share your Information with a third party where you have given us that Information for the purpose of sharing it with a third party (such as if you are interested in tendering for certain work, you are interested in making certain investments within Western Australia, or you request us to make various industry introductions on your behalf, etc).
- In some limited circumstances we may also need to use or disclose personal information for other specific purposes, including:
- where DEED reasonably believes that the use or disclosure of the information is reasonably necessary for one or more enforcement related activities conducted by or on behalf of an enforcement body; or
- where required to do so by or under a law of Western Australia, a law of the Commonwealth or a court or tribunal order, for example, pursuant to the FOI Act or in response to a subpoena.
Use of Aggregate Data
- DEED may use Information in aggregate form to improve services and make them more responsive to the needs of customers. This statistical compilation and analysis of information may also be used by us or provided to others as a summary report for marketing, advertising or research purposes.
Direct marketing
- DEED will not use or disclose your Information for the purpose of direct marketing, unless:
- we collected the Information from you;
- we obtained your consent to the use or disclosure of the Information for that purpose (except where it was impracticable to do so), including by your use of our website and the consent management platform, through which you chose to opt-in to the collection and use of cookies;
- you would reasonably expect DEED to use or disclose the Information for that purpose;
- we provide you with an easy-to-use means of opting out of receiving any further direct marketing communications; and
- you have not requested that we cease sending you direct marketing communications.
- DEED makes use of Google Analytics Advertising Features, including remarketing. The Remarketing feature allows DEED to reach people who have previously visited its website and to match users with appropriate advertising.
- If you would like to control or opt out of the application of the Google Analytics Advertising Features, you should refer to Google’s guide(s) on opting out of those features.
- DEED will only make use of your Sensitive Personal Information (as defined in the PRIS Act) and Special Categories of Personal Data (as defined within the GDPR) for direct marketing purposes if you have consented to the use or disclosure of that information for that purpose.
- If you receive direct marketing communications from DEED or from an associated entity, partner or affiliate, you are entitled to:
- request that you receive no further direct marketing communications from DEED
- and/or the associated entity, partner or affiliate; and
- request that DEED disclose the source of the information.
Opting-out
- DEED will facilitate any request by you to opt-out of receiving direct marketing communications. This may be a request to opt-out of receiving certain communications or to opt-out altogether.
- DEED will not charge you for making such a request or for giving effect to such a request.
- DEED will take reasonable steps to give effect to such a request within a reasonable period of time after the request is made and will reply to a request for the source of the information in a reasonable period of time (unless it is unreasonable or impracticable for us to do so).
- When visiting DEED’s websites, you may reject all (or some) cookies (except for strictly necessary cookies) by using the consent management platform. The consent management platform also allows you to request that your cookie data be destroyed or removed from processing, and DEED will take steps to facilitate such a request, to the extent that it is possible.
E-mails
- We may use your e-mail address to send you DEED publications, newsletters, marketing emails and information relating to seminars or events. We may also contact you by e-mail to seek your opinion or comment on our website and our service offerings.
- DEED, at all times, aims to comply with the terms of the Spam Act 2003 (Cth) and will not send unsolicited commercial electronic messages or “spam”.
- All commercial electronic messages sent by DEED include information about the individual or organisation that authorised the sending of the message.
- You can unsubscribe from our e-mails at any time. You can also contact us and instruct us not to send further information to you.
How can you access your Information and/or seek the correction of your Information?
Show more- You have a right to access the Information we hold about you and to request the correction of any Information we hold about you.
- DEED will take reasonable steps to ensure that the Information it collects and discloses is accurate, up to date, complete and relevant.
Access to your Information
- You can make a request for access to your Information informally in writing (including under Article 15 of the GDPR if you are an EU data subject), or under the FOI Act.
- Applications for access to your Information may be lodged by contacting:
FOI Coordinator
Level 11, 1 William Street
PERTH WA 6000
08 9262 1700
foi@deed.wa.gov.au
- DEED will take reasonable steps to respond to a request for access within a reasonable period of time (within one month) and to give access to your Information in the manner requested, if it is reasonable and practicable to do so.
- DEED reserves the right to charge you a minimal fee for providing you with your Information if it forms the view that your request is unfounded or excessive.
- In the event that DEED refuses to give you access to your Information requested by you, we will give you a written notice which sets out the reasons for the refusal (except to the extent that it would be unreasonable to do so) and the mechanisms available to you to complain about the refusal.
Retaining and deleting your Information
- This section sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of your Information.
- Information that we process for any purpose shall not be kept for longer than is necessary for that purpose.
- In some cases, it is not possible for us to specify in advance the periods for which your Information will be retained. In such cases, we will determine the period of retention by taking into consideration the period necessary for retention for its lawful purpose.
- Notwithstanding the other provisions of this section we may retain your Information where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Access to your Information and your rights under the GDPR
- In this section, we have provided a summary of the rights that you have under the GDPR and the Australian Privacy Laws. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
- Your principal rights under data protection law are:
- the right to be informed under the GDPR and the Australian Privacy Laws;
- the right to access under the GDPR and the Australian Privacy Laws;
- the right to rectification under the GDPR and the Australian Privacy Laws;
- the right to erasure, i.e. to be forgotten under the GDPR;
- the right to restrict processing under the GDPR;
- the right to object to processing under the GDPR;
- the right to data portability under the GDPR;
- the right to complain to a supervisory authority under the GDPR and the Australian Privacy Laws; and
- the right to withdraw consent under the GDPR.
The right to be informed and the right to access
- You have the right to confirmation as to whether or not we process your Information and, where we do, access to the Information, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of Information concerned and the recipients of the Information. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your Information. The first electronic copy will be provided free of charge, but additional copies in specific formats may be subject to a reasonable fee.
The right to rectification
- You have the right to rectify any inaccurate Information we hold about you and, taking into account the purposes of the processing, to have any incomplete Information about you completed.
- You can make a request for the correction and/or amendment of your Information.
- Applications to have Information held by DEED corrected or amended should:
- be made in writing to the Freedom of Information and Privacy Officer;
- provide enough information to determine what changes are required; and
- provide your current contact details.
- In the event DEED refuses to correct your Information, DEED will give you a written notice which sets out the reasons for the refusal (except to the extent it would be unreasonable to do so) and the mechanisms available to you to complain about the refusal.
- DEED will take reasonable steps to respond to a request for correction or amendment without undue delay and will not charge you for the making of the request or for the correction of your Information.
The right to erasure
- In some circumstances you have the right to the erasure of your Information without undue delay. Those circumstances include:
- the Information is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- you withdraw consent to consent-based processing;
- you object to the processing under certain rules of applicable data protection law;
- the processing is for direct marketing purposes; and
- the Information has been unlawfully processed.
- However, there are exclusions to the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
The right to restrict the processing of your Information
- In some circumstances you have the right to restrict the processing of your Information. Those circumstances are:
- you contest the accuracy of the Information;
- processing is unlawful but you oppose erasure;
- we no longer need the Information for the purposes of our processing, but you require Information for the establishment, exercise or defence of legal claims; and
- you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your Information. However, we will only otherwise process it:
- with your consent;
- for the establishment, exercise or defence of legal claims;
- for the protection of the rights of another natural or legal person; or for reasons of important public interest.
- You have the right to object to our processing of your Information on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for:
- the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or
- the purposes of the legitimate interests pursued by us or by a third party.
- If you make such an objection, we will cease to process the Information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
- You have the right to object to our processing of your Information for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
The right to data portability
- To the extent that the legal basis for our processing of your Information is:
- consent; or
- that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and such processing is carried out by automated means,
you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
The right to withdraw consent
- To the extent that the legal basis for our processing of your Information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
Notifiable data breaches
Show moreWhere we become aware of a potential data breach which is likely to result in serious harm to any individuals about whom we hold information, we will:
- investigate the suspected breach and determine the scope of any breach that has occurred and the risk of harm to affected individuals whose information may have been compromised;
- notify you of the potential breach; and
- take steps to minimise any harm caused to affected individuals as a result of the breach.
Disclosure of information to overseas recipients
Show more- Generally, DEED does not disclose the Information of its customers to overseas recipients.
- However, there is a possibility that, on occasion, your Information may be disclosed to an overseas recipient. The location of any recipients will vary depending on the project or purpose concerned.
- In the event that a particular project or development will or may involve the disclosure of Information to an overseas recipient, DEED will take reasonable steps to inform you of that potential use or disclosure as soon as possible. As part of our notification process, DEED will inform you of the location and/or identity of that recipient.
- Similarly with other third party recipients and/or partners of DEED, we will take reasonable steps to ensure that any overseas recipients comply with the Australian privacy legislation and the GDPR.
- Should you have any queries about the potential disclosure of your Information to an overseas recipient, please contact our Freedom of Information and Privacy Officer.
Definitions and specialised terms
Show more- In accordance with the PRIS Act, (and where applicable, the GDPR) this Privacy Statement uses the following definitions:
- An entity collects personal information only if the entity collects the personal information for inclusion in a record or generally available publication.
- That use cookies, embedded videos, and other tracking technologies.
- Direct marketing involves the use and/or disclosure of personal information to communicate directly with an individual to promote goods and services. A direct marketer may communicate with an individual through a variety of channels, including telephone, SMS, postal mail, e-mail and online advertising.
- An entity discloses personal information when it permits that information to become known outside the entity and releases it from its effective control.
- FOI Act means Freedom of Information Act 1992 (WA).
- GDPR means the General Data Protection Regulation.
- GDPR data subject means a person who is an identified or identifiable natural person located within the EU.
- An entity holds personal information if the entity has possession or control of a record that contains personal information.
- Your Information means Personal Information and Sensitive Personal Information as defined in the PRIS Act and your Personal Data as defined in the GDPR.
- Personal Data means any information that relates to an identified or identifiable living individual within the EU.
- Personal information
(a) means information or an opinion, whether true or not, and whether recorded in a material form or not, that relates to an individual, whether living or dead, whose identity is apparent or can reasonably be ascertained from the information or opinion; and
(b) includes information of the following kinds to which paragraph (a) applies —
(i) a name, date of birth or address;
(ii) a unique identifier, online identifier or pseudonym;
(iii) contact information;
(iv) information that relates to an individual’s location;
(v) technical or behavioural information in relation to an individual’s activities, preferences or identity;
(vi) inferred information that relates to an individual, including predictions in relation to an individual’s behaviour or preferences and profiles generated from aggregated information;
(vii) information that relates to 1 or more features specific to the physical, physiological, genetic, mental, behavioural, economic, cultural or social identity of an individual;
- Primary purpose refers to the particular purpose for which the information in question was collected.
- PRIS Act means Privacy and Responsible Information Sharing Act 2024 (WA).
- Privacy Officer also means the Data Protection Officer pursuant to Article 37 of the GDPR.
- Secondary purpose is any purpose other than the primary purpose for which we have collected your personal information.
- Sensitive Personal Information means personal information —
(a) that relates to an individual’s —
(i) racial or ethnic origin; or
(ii) gender identity, in a case where the individual’s gender identity does not correspond with their designated sex at birth; or
(iii) sexual orientation or practices; or
(iv) political opinions; or
(v) membership of a political association; or
(vi) religious beliefs or affiliations; or
(vii) philosophical beliefs; or
(viii) membership of a professional or trade association; or
(ix) membership of a trade union; or
(x) criminal record;
or
(b) that is health information; or
(c) that is genetic or genomic information (other than health information); or
(d) that is biometric information; or
(e) from which information of a kind referred to in any of paragraphs (a) to (d) can reasonably be inferred;
- State Records Act means the State Records Act 2000 (WA).