The RBA has taken measures toward compliance – these include:
- Taking specialist legal advice on the application of PIPL to RBA operations.
- Updating relevant internal policies – including its Data Privacy Policy, Record Retention and Destruction Policy, Individual Rights Request Policy, Written Information Security Program, and its Incident Response Plan.
- Updating its standard agreements for use with independent, third-party audit firms that are processors for the RBA VAP program.
The RBA will continue to review and integrate these measures into its procedures with what the law requires.
To review the specific policies, please use these links:
