Vulnerability Disclosure Policy Privacy statement

On this page:

Personal information

Your personal information is protected by law, including under the Privacy Act 1988 (Privacy Act).

Personal information is information or an opinion about an identifiable individual. Personal information includes an individual’s name and contact details.

Collection of your information

Your personal information may be collected directly by the Department of Employment and Workplace Relations (the department).

Purpose of collecting your information

Your personal information is collected for the purposes of the Vulnerability Disclosure Program administered by the department. This can include:

  • contacting you if we require further information about your discovery and report of security vulnerabilities and weaknesses in the department’s ICT systems, and
  • crediting you for discovering and reporting security vulnerabilities and weaknesses in the department’s ICT systems (if you opt-in).

If you do not provide some or all the personal information requested, we will be unable to credit you with the discovery and report of security vulnerabilities and weaknesses in the department’s ICT systems.

Disclosure of your personal information

Your personal information may be disclosed to third parties if you opt-in to be credited for discovering and reporting a security vulnerability and weakness in the department’s ICT systems, including but not limited to members of the public who view the Vulnerability Disclosure Program webpage.

Your personal information may also be disclosed to other parties where you have agreed, or where it is otherwise permitted under the Privacy Act.

Your personal information may be disclosed to overseas recipients if you opt-in to be credited for discovering and reporting a security vulnerability and weakness in the department’s ICT system because your name will be published on the Vulnerability Disclosure Program webpage.

Privacy policy

The department’s Privacy Policy is available, including information about how to make a complaint and seek access to or correction of your personal information, or by requesting a copy from the department at privacy@dewr.gov.au.

To contact the department about your personal information email privacy@dewr.gov.au