Part 2 of 3, step 3 of 5
Protect your systems, devices and the information you hold about people and your business.
Almost everyone uses email, devices and business systems. Set the rules before something goes wrong.
What the law says
Some states, including NSW and the ACT, require notice before workplace surveillance. Employees also have a right to disconnect, which has applied to small business since 26 August 2025.
Set rules for systems, devices, passwords and returning equipment when someone leaves.
Protect employee, customer and commercially sensitive information.
What the law says
The Privacy Act applies to businesses with turnover over $3 million, and some smaller ones, such as health service providers. Check oaic.gov.au for the current position.
Even if you are exempt, explain what you collect, why, and how it is protected.
Workplace policy
Workplace privacy policy · Confidentiality policy
Contract
Mutual: both sides share. Unilateral: only one side discloses.
Social media, grievances and complaints.
General information only, not legal advice. Laws and requirements change and depend on your circumstances, industry, state and any award or agreement. Business Kitz templates are a starting point and should be tailored; using a template does not by itself make a business compliant. Check fairwork.gov.au, ato.gov.au and your state regulator, and get advice before acting. Prepared for 2026/27.