Pillar Four: Privacy

Privacy is about respecting people's rights and giving them confidence that their personal information is handled responsibly. Every organisation that collects, stores, uses, or shares personal data has a duty to ensure that information is protected, used fairly, and managed with transparency and care. Strong privacy practices not only safeguard individuals but also strengthen trust, credibility, and organisational integrity.

Privacy extends far beyond legal compliance. It requires organisations to embed privacy into the design of technologies, policies, and everyday operations from the very beginning. This includes collecting only the information that is necessary, being transparent about how data is used, giving people meaningful choices, and ensuring that personal information is protected throughout its lifecycle.

This pillar provides practical guidance for embedding privacy into organisational culture, governance, and technology practices. Through real world scenarios, reflective questions, implementation guidance, and practical checklists, organisations can assess their current privacy practices and identify the steps needed to create a technology environment where personal information is managed lawfully, ethically, securely, and with respect for the rights of every individual.