存储信息

妥善存储客户信息是非常重要的。您必须维护客户信息的安全性，同时也要以适合您企业的方式存储这些记录。

例如：

独资经营者/个体经营者 可使用纸本记录来储存客户信息或交易。他们应将记录存放在可上锁的档案柜中，使公众或未授权的员工无法存取。
顾问公司可能拥有多种电子方式来存储客户信息。他们可能会使用数据库来记录销售数据，并使用客户关系管理（CRM）软件来储存客户信息。公司可能会将记录以电子方式存储在其办公室内的服务器上，以及于云端储存系统上。

Storing information

How you store your customer information is important. You must maintain the security of customer information, but also store the records in a way that suits your business.

For example:

A sole trader may operate with paper-based records to store customer information or transactions. They should store records in a lockable filing cabinet that is not accessible to the public or to unauthorised staff.
A consultancy firm may have multiple electronic methods of storing customer information. They may use a database for sales records and customer relationship management (CRM) software for customer information. The firm may store records electronically on a server based within their office, as well as on a cloud-based storage system.

保护客户信息的小窍门

要查看这些提示，请点击下方编号 1 到 10 的页面。

Tips for protecting customer information

To access the tips, click through the pages numbered 1 to 10 below

1
2
3
4
5
6
7
8
9
10

让自己（和员工）熟悉企业的书面隐私政策、流程和程序。

Familiarise yourself (and your staff) with the documented privacy policies, processes and procedures of your business.

理解尊重和保护客户信息隐私是每个人的责任。

Understand it is everybody's responsibility to respect and protect the privacy of customer information.

如果您正在规划一个会收集和处理客户信息的项目，请考虑进行隐私影响评估，以确保信息受到保护。

Consider undertaking a privacy impact assessment if you are planning a project that will collect and handle customer information to ensure it will be protected.

只收集业务所需的相关信息，例如，如果您经营一家家具零售店，就没有必要收集客户的病历。

Only collect relevant information that your business needs, for example, there is no need to collect medical history of a customer if you own a retail furniture outlet.

在使用和披露特定客户信息之前，请考虑是否确实需要使用或披露这些特定信息，或是否可以使用一般性信息来完成该任务。

Before using and disclosing specific customer information, think about whether you actually need to use or disclose those specifics or if you can conduct that task using generic information.

如果您打算将客户信息提供给海外企业，请记住他们可能不遵守我们州或联邦的规定，但无论客户信息在何处使用，您的企业都必须遵守相关规定。

If you intend providing customer information to a business overseas, remember they may not comply with our state or federal requirements, but your business must comply regardless of where that customer's information gets used.

根据1988年隐私法，某些被视为敏感的个人信息，如种族、性别、民族、宗教、性取向等，具有额外的考虑。请确保您的企业了解并尊重这些敏感性。

Personal information considered to be sensitive, such as race, gender, ethnicity, religion, sexual orientation etc., has additional considerations under the Privacy Act 1988. Make sure your business understands and respects these sensitivities.

只有在需要时，才存取客户的个人信息。例如，您的清洁工在清洁会计事务所时无需存取客户的个人信息。

Access customers' personal information only if, and when, you need to. For example, your cleaner has no need to access a customer's personal information if they are cleaning an accountancy firm.

确保客户个人信息的安全。作为企业主，您必须采取合理的措施，以确保客户记录（无论是纸本或电子记录）不会受到未经授权的存取、修改或泄露。

Keep customers' personal information secure. As a business owner, you are required to take reasonable steps to ensure customer records, whether paper-based or electronically stored, are protected from unauthorised access, modification or disclosure.

制定数据外泄应变措施。这将使您的企业能够在客户的信息被泄露或侵犯时迅速作出响应，并减少对客户造成的影响。

（摘自澳大利亚信息专员办公室，并根据创用CC 3.0 澳大利亚授权发布）

Develop a data breach response. This will enable your business to respond quickly and reduce the impact to a customer if their information has been compromised or breached.

(Adapted from the Office of the Australian Information Commissioner and published under a Creative Commons Attribution 3.0 Australia Licence).