XR NYC Data Protection Agreement
Dear Rebels, we’re grateful you’re here.
Adhering to a set of principles, for how we handle data, will ensure we build trust between ourselves and other organizations.
As a volunteer, you’ll both provide and be privy to confidential or sensitive information, including individuals’ personally identifiable data (such as name, phone number, and email).
It is important you keep that information secure and confidential and only use it for the purpose for which it was provided, with the consent of the individual.
As Rebels, we need to treat our data the way we do one another and our planet, with love and care. So, we’re gonna keep it simple, with three principles to wrap our Data in:
Protect, Consent, Choose
We’ll protect our data from misuse.
We’ll ensure it’s used with consent.
We’ll guarantee choice; that consent can always be withdrawn.
If you bear these three principles in mind when handling your or others’ data, we’ll be in a safe place.
As a Rebel, I agree to the following:
I will
protect our data and ensure that it is stored securely.
only process data for the purpose for which it was provided.
assist with subject access requests and potential removal or correction of data.
- I understand that this duty of confidentiality is indefinite and continues after my involvement with XR has finished.
- I understand that if I do not comply with this agreement, I may be asked to step down from my role within XR.
Example
To make this a bit clearer we'll go through as an example of good data practice.... the Rebel Ringer system will give you the number of say Mary in Brooklyn, whom you will call and have a chat with as per the script... then at the end of your Rebel Ringing session, you’ll need to delete the numbers of the Rebels you called, like Mary, from the call history of your phone (and you won’t have saved them in the first place).
In this example, the aim is that we only have people’s personal details for as long as we need them, in this instance to make the call with them as per the Rebel Ringer campaign. This is only one practical example of how Data Protection applies to us and should be taken seriously.
