Policy Corporate Governance General Data Protection Regulation (GDPR) Procedure
General Data Protection Regulation (GDPR) Procedure
- Future Students
- 番茄社区 Global Experience
- International Students
- Open Day
- How to apply
- Pathways to university
- Virtual Open Day
- Living on Campus
- Courses
- Publications
- Scholarships
- Parents and Partners
- 番茄社区 Heroes Programs
- Aboriginal and Torres Strait Islander in Marine Science
- Elite Athletes
- Defence
- 番茄社区
- New students
- 番茄社区 Orientation
- Learn番茄社区
- Placements
- CEE
- Unicare Centre and Unicampus Kids
- Graduation
- Off-Campus Students
- 番茄社区 Job Ready
- Safety and Wellbeing
- 番茄社区 Prizes
- Professional Experience Placement
- Employability Edge
- Art of Academic Writing
- Art of Academic Editing
- Careers and Employability
- Student Equity and Wellbeing
- Career Ready Plan
- Careers at 番茄社区
- Partners and Community
- 番茄社区-CSIRO Partnership
- Alumni
- About 番茄社区
- Reputation and Experience
- Chancellery
- Governance
- Celebrating 50 Years
- Academy
- Indigenous Engagement
- Education Division
- Graduate Research School
- Research and Teaching
- Research Division
- Research and Innovation Services
- CASE
- College of Business, Law and Governance
- College of Healthcare Sciences
- College of Medicine and Dentistry
- College of Science and Engineering
- CPHMVS
- Anthropological Laboratory for Tropical Audiovisual Research (ALTAR)
- Anton Breinl Research Centre
- Agriculture Technology and Adoption Centre (AgTAC)
- Advanced Analytical Centre
- AMHHEC
- Aquaculture Solutions
- AusAsian Mental Health Research Group
- ARCSTA
- Area 61
- Lions Marine Research Trust
- Australian Tropical Herbarium
- Australian Quantum & Classical Transport Physics Group
- Boating and Diving
- Clinical Psychedelic Research Lab
- Centre for Tropical Biosecurity
- Centre for Tropical Bioinformatics and Molecular Biology
- CITBA
- CMT
- Centre for Disaster Solutions
- CSTFA
- Cyclone Testing Station
- The Centre for Disaster Studies
- Daintree Rainforest Observatory
- Fletcherview
- 番茄社区 Eduquarium
- 番茄社区 Turtle Health Research
- Language and Culture Research Centre
- MARF
- Orpheus
- TESS
- 番茄社区 Ideas Lab
- TARL
- eResearch
- Indigenous Education and Research Centre
- Estate
- Work Health and Safety
- Staff
- Discover Nature at 番茄社区
- Cyber Security Hub
- Association of Australian University Secretaries
- Services and Resources Division
- Environmental Research Complex [ERC]
- Foundation for Australian Literary Studies
- Gender Equity Action and Research
- Give to 番茄社区
- Indigenous Legal Needs Project
- Inherent Requirements
- IsoTropics Geochemistry Lab
- IT Services
- 番茄社区 Webinars
- 番茄社区 Events
- 番茄社区 Motorsports
- 番茄社区 Sport
- Library
- Mabo Decision: 30 years on
- Marine Geophysics Laboratory
- Office of the Vice Chancellor and President
- Outstanding Alumni
- Pharmacy Full Scope
- Planning for your future
- Policy
- PAHL
- Queensland Research Centre for Peripheral Vascular Disease
- Rapid Assessment Unit
- RDIM
- Researcher Development Portal
- Roderick Centre for Australian Literature and Creative Writing
- Contextual Science for Tropical Coastal Ecosystems
- State of the Tropics
- Strategic Procurement
- Student profiles
- SWIRLnet
- TREAD
- TropEco for Staff and Students
- TQ Maths Hub
- TUDLab
- VAVS Home
- WHOCC for Vector-borne & NTDs
- Media
- Copyright and Terms of Use
- Australian Institute of Tropical Health & Medicine
- Pay review
Intent
This procedure describes the specific administrative arrangements in relation to the European Union’s (EU) General Data Protection Regulation (GDPR) and should be read in conjunction with the Information Privacy Policy and Information Privacy Statement - Collection, Use and disclosure of personal information.
Scope
This procedure applies to the personal data of all natural persons within the European Union (EU) or European Economic Area (EEA) and have specific rights afforded under the GDPR.
Definitions
Except as otherwise specified below, the meaning of terms used in this procedure are as per the Information Privacy Policy. Other terms used in this procedure may also be found in the Policy Glossary
Procedure
- In addition to the protections under the Information Privacy Act 2009 (Qld) and the Information Privacy Principles, if you are a EU or EEA resident you have a number of additional rights under the GDPR including the right to request access to, a copy of, correction of, restriction in the use of, erasure of or transfer to another data controller in an accessible format of personal information in accordance with all applicable laws, and subject to the limitations outlined in the GDPR.
- For individuals outside the EU/EEA and for data that was not collected within the EU/EEA, the erasure of your information shall be subject to the retention periods of applicable State and Federal law.
- If you have provided consent to the use of your information, you have the right to withdraw consent without affecting the lawfulness of the University's use of the information prior to receipt of your request. Please note we may not be able to grant your request in all circumstances.
- 番茄社区 will assist data subjects that are EU/EEA residents to exercise these rights, unless we have compelling and legitimate legal grounds not to (e.g. a legal obligation under Australian legislation, or if the Personal Data has been fully anonymised).
- To exercise any of the above rights, complete the form at Appendix 1 and return it to the Privacy and Data Protection Officer at secretariat@jcu.edu.au
Related policy instruments
Information Privacy Statement - Collection, Use and disclosure of personal information
Schedules/Appendices
Appendix 1 – GDPR Form - Information Access, Amendment and Other Rights
Related documents and legislation
Administration
Approval Details
Policy Domain | Corporate Governance |
Policy Sub-domain | Risk, Assurance, Regulatory and Compliance |
Policy Custodian | Vice Chancellor |
Approval Authority | Council |
Date for next major review | 12/06/2024 |
Revision History
Version | Approval date | Implementation date | Details | Author |
19-1 | 12/06/2019 | 25/07/2019 | Procedure established to provide for EU GDPR obligations | Chief of Staff |
Keywords | Information, privacy, personal information, data breach, GDPR |
Contact person | Chief of Staff, Vanessa Cannon |