Purpose
To protect the confidentiality, integrity and availability of personal and program data.
Scope
All EIDC systems and personnel.
Policy Statement
EIDC handles data lawfully, transparently and only for stated purposes, applying encryption and access controls.
Responsibilities
IT lead owns technical controls; all staff sign confidentiality undertakings.
Reporting Mechanism
Breaches must be reported within 24 hours to the ED.