Versions Compared

Version Old Version 21 New Version 22
Changes made by

Sasanka Gayan

Sasanka Gayan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

APP 5 — Notification of the collection of personal information

Comments

Status

5.1

When APP entity collects personal information about an individual does take reasonable steps either to notify the individual of certain matters or to ensure the individual is aware of those matters

Education institute data: Octopus BI will always be guided by the direction given by the client with their PI. Octopus BI will not disclose any client data unless the client requests this in writing.

CRM marketing data: Octopus BI will not disclose any data to 3rd party companies ( Local or overseas). Octopus BI take the consent when a prospective client fills out a form to sign up for Octopus BI services.

3rd party application:

AWS/ Google GCP or any other 3rd party applications used by Octopus BI is covered by a similar laws as the APP.

FC

5.2

Does APP entity’s notification statement include following contents?

  • APP entity’s identity and contact details

  • The fact and circumstances of collection

  • Whether the collection is required or authorised by law

  • The purposes of collection

  • The consequences if personal information is not collected

  • The entity’s usual disclosures of personal information of the kind collected by the entity

  • Whether the entity is likely to disclose personal information to overseas recipients, and if practicable, the countries where they are located

Sasanka to check IP

APP 6 — Use or disclosure of personal information

Comments

Status

6.1

Does APP entity ensure that entity use or disclose personal data for the primary purpose for which it was collected?

Education institute data: Octopus BI will always be guided by the direction given by the client. Octopus BI will not disclose any client data unless the client requests this in writing.

CRM marketing data: Octopus BI will not disclose any data to 3rd party companies ( Local or overseas). Octopus BI take the consent when a prospective client fills out a form to sign up for Octopus BI services.

3rd party application:

AWS/ Google GCP or any other 3rd party applications used by Octopus BI is covered by a similar laws as the APP.

FC

6.2

Does entity disclose personal data for any secondary purpose?

If so, does entity check to see if entity hold the individual’s consent for the use and disclosure their personal data for the secondary purpose?

or

If else, does entity considered if the individual would reasonably expect entity to disclose the data for a secondary purpose? and, is that secondary purpose related to the primary purpose?

Education institute data: Octopus BI will always be guided by the direction given by the client. Octopus BI will not disclose any client data unless the client requests this in writing.

CRM marketing data: Octopus BI will not disclose any data to 3rd party companies ( Local or overseas). Octopus BI take the consent when a prospective client fills out a form to sign up for Octopus BI services.

3rd party application:

AWS/ Google GCP or any other 3rd party applications used by Octopus BI is covered by a similar laws as the APP.

FC

...