The NTC (ABN 67 890 861 578) leads national land transport reform in support of Australian governments.
Where the collection or handling of personal information by the NTC is subject to the Privacy Act, the NTC must comply with the requirements of that Act. The Privacy Act regulates the manner in which personal information is handled throughout its life cycle, from collection to use, storage, accessibility and disposal.
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.
Special provisions apply to the collection of personal information which is sensitive such as health information and information about a person's race, ethnic origin, political opinions, membership of political, professional or trade associations, religious or philosophical beliefs, sexual preferences and criminal history.
In the course of business, the NTC may collect personal information that is reasonably necessary for, or directly related to, our functions or activities. The NTC will only collect personal information by lawful and fair means and not in an unreasonably intrusive manner.
The NTC may collect personal information about:
Our functions and activities and our range of services may change from time to time.
The types of personal information we may collect and hold may vary depending on the nature of our interaction with the individual and may include:
Through our website, we may also collect de-identified information about a user’s computer which may include IP address, type of browser, operating system, domain name and the details of any website which has referred the user to the NTC's website. We may also collect de-identified information about the user’s activities on our website (for example, tracking which areas of the website are visited and the content viewed).
The Privacy Act generally requires the NTC to use personal information only for the primary purpose for which it is collected, or for secondary purposes which are related (or directly related in the case of sensitive information) to the primary purpose.
In general, the NTC collects, holds, uses and discloses personal information for the following purposes:
If anyone provides the NTC with their email address, telephone and/or mobile phone number, they also consent to the NTC using that email address, telephone and/or mobile phone number for contact purposes (including by telephone call, SMS or email) for any of the above reasons.
The NTC may collect personal information in a number of ways, including:
The NTC will store personal information securely in its systems providing restricted access to staff for work purposes only. The personal information is maintained and disposed in accordance with the NTC’s information management policy.
To carry out the above purposes, the NTC may disclose personal information:
The NTC may disclose personal information to service providers located overseas including online survey platform providers located overseas.
If the NTC transfers personal information to another party outside Australia, we will take such steps as are reasonable in the circumstances to ensure that the overseas recipient will not breach the privacy principles set out in the Privacy Act in relation to the information.
The NTC also utilises Google Analytics in the USA to provide us with information, reports and analysis about the usage and browsing patterns of users of our website. All information provided is de-identified.
The NTC may use personal information for contact purposes (including by telephone call, SMS or email) in relation to publications, surveys, notifications about public consultations or other such initiatives.
Opting-out of receiving such marketing information from the NTC can be done at any time by contacting us using the contact details which appear immediately below under the heading "How can you access or correct your personal information and contact the NTC?" or clicking the unsubscribe link found at the bottom of any electronic newsletter, news alert or promotional email that may be received from us.
Contact the NTC’s Privacy Officer – see contact details section – to seek access to or request that we correct personal information held by the NTC.
The NTC will generally provide access to personal information if practicable, and will take reasonable steps to amend any inaccurate or out-of-date personal information. In some circumstances and in accordance with the Privacy Act, the NTC may not permit access, or may refuse to correct personal information, in which case reasons will be provided for this decision.
The access and correction requirements in the Privacy Act operate alongside and do not replace other informal or legal procedures by which access to, or correction of, personal information can be made including the Freedom of Information Act 1982 (Cth).
Following a risk assessment, the NTC will invoke its notifiable data breach plan and will notify affected individuals where the breach has been assessed as likely to cause a real risk of serious harm to the individual.
Notification will include:
Any concerns or complaints about the manner in which personal information has been collected or handled by the NTC, should be advised to the NTC in writing to the NTC’s Privacy Officer – see contact details section. Concerns or complaints will be considered or investigated and will be responded to within 30 days from the day of request.
Any complaint not resolved to the complainant’s satisfaction can be referred to the Office of the Australian Information Commissioner who may investigate the complaint further.
NTC Privacy Officer
Executive Leader, Business and Resources
+61 3 9236 5000
Level 3/600 Bourke Street Melbourne VIC 3000.
More information about the application of the Privacy Act is available on the Office of the Australian Information Commissioner website.