As a parish of the Anglican Church of Southern Queensland, we operate under the Diocesan Privacy Policy.
Why have a privacy policy?
Privacy policies are an important part of any organization’s approach to data protection, including churches. Privacy policies serve as a statement of how the organization handles the personal information of its members, staff, volunteers, and other stakeholders. In this article, we’ll explore the reasons why privacy policies are important for churches and some of the key elements that should be included in such policies.
First and foremost, a privacy policy is important for churches because it is a legal requirement. Churches are subject to data protection laws like any other organization, and failure to comply with these laws can result in significant fines and reputational damage. A privacy policy is a key element of an organization’s compliance with data protection regulations, as it sets out the organization’s approach to data protection and privacy.
Secondly, a privacy policy can help build trust with members and other stakeholders. Churches often hold sensitive personal information about their members, such as contact details, family information, and pastoral concerns. A clear and transparent privacy policy can help reassure members that their information is being handled responsibly and can help build trust between the church and its community.
Thirdly, a privacy policy can help prevent data breaches and other data protection incidents. A privacy policy sets out the procedures that the church has in place to protect personal information, such as password protection, encryption, and access controls. By following these procedures, the risk of a data breach or other incident is reduced, which can help protect the church’s reputation and avoid the significant costs associated with such incidents.
So what should a privacy policy for a church include?
Here are some key elements that should be considered:
1. An explanation of the types of personal information that the church collects, how it is collected, and why it is collected. At St Phil’s we use Elvanto to record all contact details. Church members can view and edit their own records.
2. A description of how the personal information is used, including any third-party organizations that the church may share the information with. We use the information in Elvanto to contact people, record attendance, plan services and rosters.
3. Details of the security measures that the church has in place to protect personal information, including access controls, encryption, and password protection. Elvanto takes security seriously to ensure that all details are stored securely.
4. An explanation of the legal basis for processing personal information, such as consent, legitimate interest, or legal obligation. Each person has their own login and can edit their personal information. See also the Diocesan privacy policy for more information.
5. Information on how individuals can exercise their rights under data protection laws, such as the right to access, rectify, or erase their personal information. See point #4 above.
6. Details of any international transfers of personal information that the church undertakes, and how these transfers are safeguarded. There are no international transfers of information.
7. A statement on how long personal information will be retained, and how it will be securely destroyed once it is no longer needed. If a person or family leaves St Phil’s or is deceased, the record is archived and can only be accessed by a high level admin. Every 5 years, archived records are deleted.
8. Details of any data protection incidents that the church has experienced, and how these incidents were addressed. There have been none. Government Notifiable data breaches scheme
Conclusion
In conclusion, a privacy policy is an essential tool for any church that handles personal information. It not only ensures compliance with data protection laws, but also helps build trust with members and other stakeholders, and reduces the risk of data breaches and other incidents. By taking the time to develop a clear and transparent privacy policy, churches can demonstrate their commitment to protecting the privacy of their community and help build a culture of trust and transparency.
Jesus – All About Life!
Childrens and Youth Ministry privacy