The outcome
Member democracy is the part of association life that matters most and gets engineered least. The constitution says members elect the board. The annual report names the people elected. In between sits a process that, in too many associations, is one stack of envelopes, two staff members, and an honour system that nobody really wants to scrutinise.
When governance is done right, a member is invited to vote. They click once. They see only the ballot they’re entitled to. They can’t vote twice. Their identity is confirmed, their vote is anonymous, and the result is defensible. The process doesn’t depend on the membership officer remembering to update a spreadsheet at the end of the day.
The outcome
The data your association holds about its members is, in regulatory terms, your most sensitive asset. Names, contact details, payment information, qualifications, conditions, complaints history, registration status. Some of it is public. Most of it isn’t. All of it carries privacy obligations.
The problem is that the work the data was collected to support, marketing analysis, technical testing, third-party reporting, system migration, training environments, often requires that data to leave the safe environment it lives in. Every time it does, the privacy exposure grows. Every backup taken offsite. Every database copy made for a developer. Every dataset shared with a marketing analyst. Every test environment left running with real member data in it. Each one is a potential breach that the board would rather not be reading about in the news.
An interview with Gary Ashworth-Phillips, CEO of the Federation of Australian Knowledge Enterprises (FAKE). Gary is asked whether Narelle appears on the organisation’s risk register. A decision is made in real time.
Stop running on Narelle. See how →
Transcript:
Is Narelle on our risk register?
She… no.
She should be on the risk register.
I’m going to go and put her on the risk register.
