Privacy

RSU uses cookies to identify user traffic patterns on its website. Information collected from cookies is used for statistical analysis purposes so that RSU can provide you with a website that best meets your needs. It may also be used as a basis for targeting online advertising. A cookie in no way provides access to your computer or any information about you, other than the data you choose to share with RSU.

Some RSU sites may use cookies for authentication purposes or to personalise your web experience. For example, a cookie within the RSU Course Finder will remember the courses you previously viewed.

RSU also uses Google cookies for remarketing to advertise online. When you visit our website, our web server will drop a cookie on your browser. If you leave our website and visit another website which is part of the Google network, you may be served our advertisement.

How to disable cookies

Your web browser will have an option you may select that will block cookies. Below are links to information about popular web browsers and how to block cookies using them.

• Firefox
• Internet Explorer
• Google Chrome
• Safari

Information collected online by RSU

When you visit RSU’s website, our servers may collect the following information:

• your IP address
• browser type
• operating system
• pages viewed while browsing RSU’s website
• dates and times of the visit.

We use this information for statistical purposes and to help us improve our services. We may also use this information for marketing purposes.

Where your personal information is collected while visiting our site, we will provide you with details about the purpose for collecting it including how it will be used, whether it’s required by or under law and if it’s to be disclosed to any other party. We will only use your personal information for the purpose for which you provided it or a directly related purpose.

Online security

RSU has a number of security measures in place to protect against IT security risks. These include firewalls, network intrusion detection and virus scanning. Refer to RSU’s IT Policies for further information.

Some RSU sites can only be accessed with a login name and password to ensure that only authorised users are able to access personal information. You should ensure that your password is kept securely and not accessible by others.

Links to other websites

External sites that are linked to or from the RSU site are generally not under our control or responsibility. If you decide to access linked third-party websites, you are encouraged to review their privacy policy, terms of use and content.

• MyRSU App Privacy Statement
• Student Privacy and Disclosure Statement 
• Privacy Collection Statement for Recruitment and Employee Records
• Privacy Statement for RSU's alumni, donors and members of the community
• My eQuals Privacy Statement

RSU is committed to protecting the privacy of each individual’s personal and health information as required under the NSW Privacy and Personal Information Protection Act 1998 (PPIPA) and the Health Records and Information Privacy Act 2002 (HRIPA).  In addition to these obligations, RSU is actively taking steps to comply with the principles of the Privacy Act 1988 (Cth) and the European Union General Data Protection Regulation (GDPR) which may apply in certain circumstances in relation to RSU’s activities.

The management of personal and health information by RSU is detailed in its Privacy Policy and Privacy Management Plan which are available on RSU’s privacy homepage at https://www./privacy. These resources outline RSU’s privacy obligations and explain the various ways that the privacy principles are applied to our functions and activities.

 RSU's Privacy Information Sheet provides a summary of the information protection principles that RSU must comply with when handling your personal and health information.

Collection

RSU collects your personal and/or health information for lawful purposes that are directly related to RSU's functions or activities.  When RSU collects your personal and/or health information, you will be informed as to why it is being collected, what will be done with it, whether it's required by law or is voluntary and your rights of access to and correction of that information.

RSU prepares privacy statements when collecting information from you in order to outline the reasons for the collection and the way that RSU intends to handle that information. Please see the Privacy Statement section on this page for the relevant privacy statements. For example:

• The Student Privacy and Disclosure Statement lists the intended use/disclosure of personal and/or health information collected from students. This Statement also provides details of how students can request access or seek amendments to their personal and/or health information.
• The Privacy Collection Statement for Recruitment and Employee Records provides details of the types of information collected from employees and/or prospective employees, how that information is held and used by RSU,  circumstances where it may be disclosed and details of how the employee can access his/her record.
• The Privacy Statement for RSU's alumni, donors and members of the community provides details of the way that it connects with and handles the information of its alumni, donors and community when engaging with RSU.

Protection of information

RSU takes all reasonable steps to protect your personal and/or health information against loss, misuse, unauthorised access, modification or disclosure. 

RSU's Data Breach Response Plan provides a consistent set of procedures that RSU will follow in the event of a data breach. This plan will ensure that appropriate steps are taken to respond promptly and appropriately, in accordance with the NSW Information and Privacy Commission best practice.

Use and Disclosure

RSU will only use or disclose your personal and/or health information for the purpose for which it was collected, for a directly related purpose or as otherwise required, permitted or authorised by law.

For example, in limited circumstances,

• RSU may use your personal information to contact you in the event of an emergency or crisis.
• a court or similar body has ordered the information’s release, or
• it is reasonably necessary to disclose your personal and/or health information to deal with or to prevent or lessen a serious and imminent threat to the life or health of any individual.

Any student, staff member or member of the public who is concerned about how their personal or health information is being handled by RSU should contact one of RSU's privacy officers.

The Privacy Officer will discuss your concerns or complaints and endeavour to reach a suitable resolution, referring to any existing RSU policies or complaint handling guidelines.

How to make a formal complaint

If you wish to make a formal request for a review of RSU's conduct in the handling of your personal or health information, please complete our complaints form and then submit to the University's Manager, Information Compliance via email.

• Privacy Awareness E-Book
• Guidance Note - Recordings of sessions made via Video Conferencing platforms
• RSU Data Breach Reponse Plan
• RSU Data Breach Response Plan (flowchart only)
• Data Security and Third Party Engagements Information Sheet
• Privacy information Sheet
• Privacy Impact Assessment Tool (PIA)
• General Data Protection Regulations (GDPR) Information Sheet
• Confidentiality and Privacy Acknowledgement
• Access to Student Data Information Sheet
• Centrelink (Human Services) Inquiries Information Sheet
• Requests for Information from Police Information Sheet
• Requests for Information from Recruitment Agencies
• Privacy Induction Training Video

• Information Privacy Commission - NSW (IPC)
• Office of the American Information Commissioner (OAIC)
• Guide to the General Data Protection Regulation (GDPR)