1. Introduction

McFarland Consulting is committed to maintaining the highest standards of ethical business practices, regulatory compliance, and data protection across all sectors in which we operate, including:

• Financial Services
• Healthcare
• Transportation & Logistics
• Manufacturing & Industrial
• Information Technology

This Code of Conduct aligns with Australian legislation, including but not limited to:

• Competition and Consumer Act 2010 (CCA)
• *Privacy Act 1988 (including Australian Privacy Principles - APPs)*
• Corporations Act 2001
• *Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF)*
• My Health Records Act 2012 (for healthcare)
• Spam Act 2003

Additionally, this policy incorporates international standards such as:

• General Data Protection Regulation (GDPR) (EU)
• Health Insurance Portability and Accountability Act (HIPAA) (US)
• ISO 27001 (Information Security Management)

Failure to comply with this Code of Conduct may result in termination of contracts, business engagements, or legal action at   McFarland Consulting’s discretion.

2. Ethical Business Practices

All employees, contractors, partners, and clients must adhere to the following principles:

• Integrity & Honesty: No fraudulent, deceptive, or corrupt practices.
• Fair Competition: Compliance with the Competition and Consumer Act 2010 (anti-competitive behaviour prohibition).
• Conflicts of Interest: Disclose any potential conflicts that may influence business decisions.
• Anti-Bribery & Corruption: Zero tolerance for bribery under Criminal Code Act 1995 and international anti-corruption laws.

3. Privacy & Data Protection

McFarland Consulting ensures compliance with:

3.1 Australian Privacy Principles (APPs)

• Personal and sensitive data must be collected lawfully, stored securely, and used only for its intended purpose.
• Individuals have the right to access, correct, or delete their data (subject to legal exceptions).

3.2 International Compliance (GDPR & HIPAA)

• GDPR (for EU citizens):
  • Data subject rights (access, rectification, erasure, portability).
  • Mandatory breach notifications within 72 hours where applicable.
• HIPAA (for healthcare clients):
  • Protected Health Information (PHI) must be encrypted and access controlled.
  • Business Associate Agreements (BAAs) required where applicable.

3.3 Data Security

• Encryption of sensitive data in transit and at rest.
• Regular cybersecurity audits and penetration testing.
• Mandatory reporting of data breaches under Notifiable Data Breaches (NDB) scheme.

4. Sector-Specific Compliance

4.1 Financial Services

• Adherence to Corporations Act 2001 and ASIC Regulatory Guidelines.
• Compliance with *AML/CTF Act 2006* (customer due diligence, reporting suspicious transactions).

4.2 Healthcare

• Compliance with My Health Records Act 2012 and HIPAA (if handling US patient data).
• Strict confidentiality of medical records and patient information.

4.3 Transportation & Logistics

• Compliance with Heavy Vehicle National Law (HVNL) and Chain of Responsibility (CoR) obligations.
• Data protection for shipment tracking and customer details.

4.4 Manufacturing & Industrial

• Workplace health & safety compliance under Work Health and Safety Act 2011.
• Environmental regulations adherence (e.g., Environment Protection and Biodiversity Conservation Act 1999).

4.5 Information Technology

• Compliance with Privacy Act 1988 and GDPR (if processing EU data).
• Secure software development lifecycle (SDLC) practices.

5. Enforcement & Consequences

McFarland Consulting reserves the right to:

• Audit compliance with this Code of Conduct at any time.
• Terminate contracts or business relationships for violations.
• Pursue legal action for breaches causing reputational or financial harm.

6. Ownership & Legal Protection

This document is the proprietary intellectual property of   McFarland Consulting. Unauthorized distribution, modification, or misuse is prohibited.   McFarland Consulting shall not be liable for any third-party violations of this policy.

By engaging with   McFarland Consulting, all parties acknowledge and agree to abide by this Code of Conduct.

Signed for and on behalf of   McFarland Consulting:
[Authorized Signatory Name] Luke McFarland
[Position] CEO
[Date]25 January 2024