Skip to content

Privacy Policy: How do I draft the ‘storage and security’ clause?

A Privacy Policy states how your business will deal with personal information. It is important for businesses that collect personal information to have a detailed Privacy Policy. An experienced contract lawyer typically drafts this document. Your Privacy Policy explains to customers how your business will store their personal information, and your customer’s rights. A Privacy Policy can be used for any business that collects personal information, whether online or in person. It might be a good idea for you to contain a ‘storage and security’ clause in your Privacy Policy.

What should the ‘storage and security’ clause contain?

It is important that the ‘storage and security’ clause of your Privacy Policy explains to customers your policies in relation to how you store and secure customers’ information. It should also explain the risks associated with providing a website with personal information that could be unintentionally disclosed.

The ‘storage and security’ clause in your Privacy Policy should reflect your business’ commitment to ensuring that there are suitable procedures to safeguard and secure the information that has been collected from your customers.

You should clearly set out what procedures have been put in place to safeguard and secure the personal information. This could be any physical, electronic or managerial procedures which prevent personal information from misuse, interference, loss and unauthorised access, modification and disclosure.

However, to protect your business, your lawyer should set out that, if information is transmitted over the Internet, this transmission cannot be guaranteed to be secure and that the transmission and exchange of information is carried out at the visitor’s own risk.

Conclusion

If the Privacy Act applies to your business, you must have a Privacy Policy.

Failing to comply with the Privacy Act may result in fines of up to $1.7 million for companies, or $340,000 for entities that are not companies (including individuals) for serious or repeated breaches of the Privacy Act.

If you are unsure of whether or not your business requires a Privacy Policy, or a ‘storage and security’ clause, and if you would like assistance in drafting one, contact one of our contract lawyers today.

Register for our free webinars

ACCC Merger Reforms: Key Takeaways for Executives and Legal Counsel

Online
Understand how the ACCC’s merger reforms impact your legal strategy. Register for our free webinar.
Register Now

Ask an Employment Lawyer: Contracts, Performance and Navigating Dismissals

Online
Ask an employment lawyer your contract, performance and dismissal questions in our free webinar. Register today.
Register Now

Stop Chasing Unpaid Invoices: Payment Terms That Actually Work

Online
Stop chasing late payments with stronger terms and protections. Register for our free webinar.
Register Now

Managing Psychosocial Risks: Employer and Legal Counsel Responsibilities

Online
Protect your business by managing workplace psychosocial risks. Register for our free webinar.
Register Now
See more webinars >
Priscilla Ng

Priscilla Ng

Read all articles by Priscilla

About LegalVision

LegalVision is an innovative commercial law firm that provides businesses with affordable, unlimited and ongoing legal assistance through our membership. We operate in Australia, the United Kingdom and New Zealand.

Learn more

We’re an award-winning law firm

  • Award

    2025 Future of Legal Services Innovation Finalist - Legal Innovation Awards

  • Award

    2025 Employer of Choice - Australasian Lawyer

  • Award

    2024 Law Company of the Year Finalist - The Lawyer Awards

  • Award

    2024 Law Firm of the Year Finalist - Modern Law Private Client Awards

  • Award

    2022 Law Firm of the Year - Australasian Law Awards