Response from the RSL club

Well, I’ve heard back from the RSL club that took a scan of my drivers license (see original post).

They answered some of my questions – and raised some more.

Data collection

Turns out that they did have a valid reason to collect some items of information about me – my name, address and signature – because of their obligations under the Registered Clubs Act 1976. Fair enough.

I’m still not sure exactly what information they took from my drivers license. They may have scanned the whole thing, which would concern me. Or, they may have just extracted the three pieces of information they needed, which would be much preferable. I’ll try to find out and let you know.

They also said that having my license scanned was optional, and I could instead have chosen to sign in the old way (well, a new incarnation of the old way, by writing my name, address and signature on the terminal screen with a pen-like thing). But why didn’t they tell me that at the time? Does not telling patrons of that option equate to not offering that option in the first place? That’s another question for me to put to the Privacy Commissioner.

Privacy policy

They said that they do have a privacy policy covering this collection of my personal information, available by pressing an icon on the terminal that scanned my drivers license. Perhaps they should train their door staff to tell visitors to the club that it is there?

I asked them to send me a copy of the privacy policy, they always make for good bedtime reading!

One law vs another

One of the most interesting things in their response was a statement saying they are advised that, “…if Legislation requires something to be disclosed then it overrides privacy legislation, unless contrary legal advice or a confidentiality agreement prohibits this disclosure”.

Is it just me, or does that sound like they are being advised that privacy legislation is less ‘legal’, or less important, than other legislation? I wonder what the Privacy Commissioner has to say about that?

 

May 22, 2007 | Filed Under case study, identity theft, privacy compliance, privacy concern, privacy matters, rsl clubs, scan drivers license 

Comments

One Response to “Response from the RSL club”

  1. RSL scan drivers license on May 29th, 2007 5:12 am

    [...] drivers license May 29 07 You know that RSL club that I suspected of putting me at risk of identity theft when they scanned my drivers license? Well, they’ve emailed me back again with a bit more [...]

Leave a Reply