Use Personal Data Check-In to protect club systems and information through simple, shared security habits and a practiced response.
Where this idea came from
Playbook entry
S-117 · Personal Data Check-In
Theme
Theme 5: Digital, Data & Systems · Subtheme 8: Cybersecurity & Risk
Source material
Current playbook index title and category plus an internally authored detailed-guide draft
Initiative-specific development wave
How this draft was developed
These sources support general principles for digital, data and systems, accessibility, privacy, safety, systems or responsible governance; they are not an endorsement of Personal Data Check-In, a finding that it suits any club or approval of its local design.
Primary references consulted
Rotary Clubs(Rotary International) Used for: Rotary describes club participation through service, friendship, diversity, integrity and leadership, including online participation for people affected by schedules, mobility or distance.
Small business cyber security guide(Australian Signals Directorate's Australian Cyber Security Centre) Used for: A practical security baseline includes multi-factor authentication, software updates, regular tested backups and advice suited to the organisation's actual systems and risk.
Chapter 11: APP 11 Security of personal information(Office of the Australian Information Commissioner) Used for: Entities covered by the Privacy Act must take reasonable steps to protect personal information and destroy or de-identify it when it is no longer needed, subject to lawful retention requirements.
Quick reference guide for responding to data breaches(Office of the Australian Information Commissioner) Used for: Organisations should contain, assess and respond to suspected data breaches, determine applicable notification duties and review the event to reduce recurrence.
Candidate District material consulted
These records remain draft evidence and still need a human source decision.
Theme_4_All_80_Initiatives_Complete The exact current-title crosswalk establishes a candidate legacy record for later comparison. No legacy code, unsupported claim or unchecked operational detail was copied into this draft; current official privacy, security, accessibility and governance controls take precedence.
Theme 5 source-assurance wave
What has been checked
4 current primary pages used by this guide were reopened on 9 August 2026.
4 attributed source claim(s) were mapped to their bounded use in this initiative.
Candidate District material remains separate and does not establish this result.
See each source's scope and limit
Rotary Clubs Supports: Rotary club participation context and the value of accessible online or hybrid participation. Does not establish: Product configuration, legal compliance, local suitability or approval of a named initiative.
Small business cyber security guide Supports: A practical minimum cyber-security baseline for smaller organisations and volunteer-run systems. Does not establish: That the baseline is sufficient for a club's actual risk, system architecture, supplier arrangements or legal obligations.
Chapter 11: APP 11 Security of personal information Supports: Security, access, retention and disposal safeguards where the Privacy Act and APP 11 apply. Does not establish: That a club's controls are reasonable, that the Privacy Act applies or that a particular retention period is correct.
Quick reference guide for responding to data breaches Supports: A proportionate sequence for preparing for and responding to suspected personal-information breaches. Does not establish: Whether an incident is an eligible data breach, who must be notified or the club's legal duties in a specific event.
What still needs a person to confirm
Confirm which privacy, records, safeguarding and other legal duties apply to the club and this local design.
Confirm current ClubRunner or other platform features, permissions, licence settings and supplier instructions in the club's actual account.
Test accessibility and alternative participation routes with affected members rather than inferring conformance from the guide.
Confirm every local fact, starting point, measure, cost, owner and claim before the club decides to proceed.
Resolve any candidate District-source provenance and approval decision without treating the candidate as controlled authority.
The source-verification release gate remains closed.
Checks still on hold
The current Theme 5 index controls the code and title. The exact-title legacy Digital candidate is recorded only as attributed, unapproved evidence and does not replace current identity, controls or source authority.
The connected Drive refresh returned an internal error on 9 August 2026. No unseen file was inferred or promoted; the 7 August intake, duplicate decisions, quarantines, rights boundaries and public-write permission hold remain in force and no sharing was changed.
Before local delivery, the club must approve the decision, participant choices, access arrangements, privacy and records plan, role boundaries, referral or escalation routes, resource limit and the specific control for this boundary: volunteer capability does not replace professional advice for a serious incident, compromised account, legal duty or complex configuration.
Formal human review has not started. Personal Data Check-In remains an internal initiative-specific draft until all 1,000 initiatives reach the Full-Corpus Review Build and every source, editorial, local-suitability, accessibility and governance gate is resolved.
Still an internal draft: source interpretation, local suitability, accessibility, governance and editorial approval remain open checks.
What could this idea change?
It makes follow-up more caring and consistent, while leaving people in control of how they respond.
It may suit: Members who may welcome support or renewed contact, and the trusted club members following up.
Could this work in our club?
Consider Personal Data Check-In when access, passwords, devices, backups or incident responsibilities are unclear.
A club where the club has a defined user need, accountable owner, current platform information, proportionate data plan and a safe way to test and reverse the change.
A club with a real need for practical cyber resilience and capacity to support a bounded evidence review with defined inputs, participation gaps and interpretation limits.
A 90-day trial of Personal Data Check-In with a starting point, named participants, a resource ceiling and a scheduled continue, adapt or stop decision.
Before you start
A board-approved brief naming which accounts, devices, data and response capability the club will protect first, the local authority, people affected, fixed constraints, resource ceiling, decision date and stop conditions.
A starting-point record and participant plan suited to a bounded evidence review with defined inputs, participation gaps and interpretation limits, with accessible information, voluntary choices and a supported alternative route where needed.
Named delivery, evidence and decision owners, including a person authorised to pause Personal Data Check-In when a safeguard, permission or boundary is not met.
A proportionate check of governing documents, privacy, information security, accessibility, conflicts, safeguarding, work health and safety, records, finance and referral duties for the actual local design.
At the end: At the 90-day review, compare the recorded measures with the starting point, resolve the listed governance holds and tell participants whether Personal Data Check-In will change, continue or stop.
Made for this initiative
Tailored supporting documents
These working documents use the decisions, safeguards and evidence needs of this initiative. Complete them with the people affected and keep the agreed version with the club's project record.
01
Personal Data Check-In User Need and System Boundary Brief
Define the user problem, information flow and excluded uses.
