Paper records are protected by:

• External door locks
• Intruder alarms with 24 hour monitoring
• Internal cabinet locks
• Access restricted to trained, “need-to-know” staff under the direction of the Data Manager and the Privacy Officer
• Encouraging a “clean desk” policy
• Destruction of out-of-date records.

Electronic records are protected by:

• Restricted access computer passwords and screensaver passwords
• Virus Checking
• Contracted IT support
• Complexity of database operation requiring staff training to operate.

Communications Security:

Other communications security in relation to personal information is reinforced by:

• Checking facsimile numbers before sending personal information, and confirming receipt
• Checking identity before giving out personal information over the telephone