Version 1.0 Restricted Page 6 of 31
Table of Contents
1. INTRODUCTION ................................................................................................................................................................. 8
2. SCOPE ................................................................................................................................................................................ 8
3. PURPOSE ....................................................................................................................... ERROR! BOOKMARK NOT DEFINED.
4. GOVERNANCE .................................................................................................................................................................... 9
5. DATA PRIVACY POLICY ROLES AND RESPONSIBILITIES ....................................................................................................... 9
5.1. BOARD OF DIRECTORS AND CEO ........................................................................................................................................ 9
5.2. RISK MANAGEMENT COMMITTEE ..................................................................................................................................... 10
5.3. DATA PROTECTION OFFICER/DESIGNEE .............................................................................................................................. 10
5.4. HEAD OF DEPARTMENT .................................................................................................................................................. 12
5.5. HEAD OF IT DEPARTMENT .............................................................................................................................................. 13
5.6. INCIDENT MANAGEMENT TEAM ....................................................................................................................................... 13
5.7. INTERNAL AUDIT TEAM .................................................................................................................................................. 14
5.8. MARKETING DEPARTMENT.............................................................................................................................................. 14
5.9. HEAD OF LEGAL DEPARTMENT ......................................................................................................................................... 14
5.10. IT DEPARTMENT........................................................................................................................................................... 15
5.11. HUMAN RESOURCE (HR) DEPARTMENT ............................................................................................................................. 16
5.12. EMPLOYEES AND AUTHORIZED THIRD PARTIES ..................................................................................................................... 16
6. DATA PRIVACY BY DESIGN ............................................................................................................................................... 16
7. OWNERSHIP AND REVIEW ............................................................................................................................................... 18
8. POLICY COMPLIANCE ....................................................................................................................................................... 18
9. PRIVACY POLICY STATEMENT .......................................................................................................................................... 18
9.1. NOTICE ...................................................................................................................................................................... 18
9.2. CHOICE AND CONSENT ................................................................................................................................................... 19
9.3. COLLECTION ................................................................................................................................................................ 20
9.4. USE, RETENTION AND DISPOSAL ....................................................................................................................................... 21
9.5. ACCESS AND CORRECTION............................................................................................................................................... 22