We safeguard personal data

Our shared responsibility

We protect the personal data of our employees, customers, business partners, and other individuals.

Why it matters

People trust us with their personal data. Misuse or loss of that personal data can harm individuals and expose Omterra to legal and reputational risk. We protect privacy by handling personal data carefully and limiting access to those with a legitimate business need.

How we energize with integrity

We safeguard personal data by:

Processing personal data only for legitimate business purposes and as permitted by law.
Accessing personal data only on a “need-to-know” basis.
Deleting personal data once the purpose of processing is complete, unless it is required by law to store longer
Protecting personal data from unauthorized access, loss, or misuse.
Reporting suspected data breaches or privacy concerns immediately to Compliance.

Spark your understanding

Personal data

Information that identifies or can identify a person, such as name, contact details, employee records, identification numbers, or health information.

Processing data

Any activity relating to personal data, including its collection, use, transmission, and deletion.

Data breach

Loss, theft, unauthorized access, or disclosure of protected data

Business need

A valid work-related reason to access personal data to perform your job duties.

Make it current

Question: I received an email with a spreadsheet that includes employee salary information, but I do not need it for my role. What should I do?

Answer: Do not open, use, or forward the file. Inform the sender that you do not have a business need for the information and report the incident to your manager and the Data Privacy Organization.

Power sources

Compliance Handbook (Data privacy; Incident management)