What Are the Main PABX System Components?

PABX System Components Explained Clearly

The main PABX system components are the call-processing core, external line connection, internal extensions, network and cabling infrastructure, power equipment, and management software. In a modern system, some components may be physical devices in your office, while others run as software on a server or in the cloud.

A PABX connects incoming and outgoing telephone services with internal users and devices. Its logical functions include registering endpoints, routing calls, managing extensions, handling voicemail and applying rules such as auto-attendant menus or call queues.

The exact hardware depends on whether the system uses analogue lines, digital services, SIP trunks, IP phones, or a hosted platform. The core architecture remains easier to understand when separated into physical components and logical components.

For Australian businesses, Nexgen’s cloud phone system moves the central phone-system functions into a hosted platform, while users can still connect through desk phones, computers, mobiles and other endpoints.

What are the physical components of a PABX system?

The physical components are the devices and connections that carry, convert, power or terminate calls. A traditional installation may include a PABX cabinet, interface cards, phones, cabling, network switches, gateways and backup power.

A cloud-based system may not require an on-site PABX cabinet, but it still relies on physical endpoints, local networking, internet connectivity and electrical power.

What does the PABX cabinet or server do?

The cabinet or server provides the computing platform for an on-premises PABX. It may contain the processor, memory, storage, power supply, expansion modules and interfaces used to manage extensions and external telephone services.

Traditional systems commonly divide their equipment into cabinets and circuit cards. The GlobalSpec reference on legacy PBX common equipment describes cabinets and printed circuit cards as the two broad hardware categories in older systems.

In an IP-based installation, the core may instead be a dedicated appliance, virtual machine or software application running on a general-purpose server. The physical form changes, but the system still needs processing capacity, storage, network connectivity and a reliable power source.

What are PABX line and trunk interfaces?

Line and trunk interfaces connect the internal phone system to an external carrier or telephone service. Depending on the deployment, they may support analogue lines, digital circuits, SIP trunks or another carrier hand-off.

A gateway can translate between different signalling and media formats. For example, an analogue telephone adapter can connect an older analogue device to an IP-based system, while a session border controller can connect an IP phone system to a carrier or another communications platform.

Microsoft’s Direct Routing documentation shows how a session border controller can connect a private branch exchange, analogue devices or other telephony equipment with a cloud calling platform and the public telephone network.

What phones and endpoints connect to a PABX?

Endpoints are the devices people use to make and receive calls. Common examples include IP desk phones, digital phones, analogue phones, cordless handsets, softphones, mobile applications, conference phones, intercoms and fax equipment.

An IP phone normally connects through Ethernet or Wi-Fi and communicates with the PABX using network protocols. A softphone performs a similar function through software on a computer, tablet or mobile device.

The SIP standard published by the Internet Engineering Task Force in RFC 3261 describes user agents as endpoints that establish, modify and terminate communication sessions. In practical terms, an endpoint is the user-facing device or application that registers with the phone system and participates in calls.

What network equipment does a PABX need?

An IP PABX typically relies on a router, firewall, Ethernet cabling, network switches and, where required, wireless access points. Power-over-Ethernet switches can provide both network connectivity and electrical power to compatible IP phones.

The network equipment should support the number of simultaneous calls, connected devices and locations in the system. A larger deployment may also use separate voice and data networks, traffic prioritisation, redundant links or multiple internet connections.

These components are often overlooked because they are not labelled “phone equipment”. However, a phone can fail to register or produce poor call quality when the network, firewall, power supply or internet connection is unsuitable.

What cabling is used in a PABX system?

Cabling connects the PABX, gateways, phones, switches and external network termination points. Traditional phones may use dedicated voice cabling, while IP phones commonly use structured Ethernet cabling.

In Australia, customer-side telecommunications cabling is covered by technical standards and installation rules. The Australian Communications and Media Authority’s cabling standards guidance identifies AS/CA S008 for customer cabling products and AS/CA S009 for installation requirements.

Businesses should use an appropriately registered cabler for work covered by the Australian cabling rules. ACMA explains that registered cablers can install, repair and maintain phone, internet and data cabling in business premises through its cabling guidance for homes and offices.

Does a PABX need a backup power supply?

A PABX may require an uninterruptible power supply, battery backup or another continuity arrangement. Backup power can keep the system’s core, network equipment, gateways and some connected phones operating during a short power interruption.

The backup requirement depends on the equipment that must remain available. Protecting only the PABX server is not enough if the network switch, router, internet service or phone power supply also shuts down.

For a cloud system, the provider generally operates the central platform, but the customer site still needs power and connectivity for local phones, routers, switches and computers. A mobile application may provide an alternative endpoint if the office network is unavailable and the user has a working mobile connection.

What are the logical components of a PABX system?

The logical components are the software functions and configuration objects that control how calls behave. They include users, extensions, dialling plans, call routes, permissions, voicemail, automated attendants, queues and reporting.

These functions may run together in one appliance or be distributed across several services. The physical server and the logical phone-system functions should therefore be considered separately.

What is the call-processing engine?

The call-processing engine is the central logic that establishes, connects, transfers, holds and ends calls. It decides which endpoint should ring and applies system rules to internal and external calls.

In an IP system, call processing may use SIP signalling. RFC 3261 defines logical SIP roles such as user agents, proxy servers and registrar servers; these roles can be implemented separately or combined within one application.

A small PABX may perform all call-processing tasks in one appliance. A larger or hosted platform may distribute call processing across multiple servers or services for capacity, resilience and geographic coverage.

What are extensions, users and devices?

An extension is an internal address used to reach a person, department, room or device. A user account may have one extension or several registered devices, such as a desk phone, desktop application and mobile application.

The system’s directory links names, numbers, devices and permissions. It may also assign presence information, caller ID settings, voicemail access and individual forwarding rules.

A useful design separates the person from the physical handset. This allows an employee to change devices or work from another location without changing the internal identity used by colleagues and customers.

What is a PABX dial plan?

A dial plan defines how numbers are interpreted and where calls are sent. It can specify internal extension patterns, emergency numbers, local and national dialling, international access, mobile calls and service codes.

The dial plan may also control whether a user is allowed to make certain calls. For example, some extensions may be restricted from international numbers, premium services or particular carrier routes.

Dial plans should be documented before configuration begins. Poorly designed rules can create failed calls, incorrect caller ID, unintended carrier charges or confusing behaviour when users dial familiar numbers.

What are call-routing rules?

Call-routing rules determine what happens when a call enters or leaves the system. They may route calls by number, time, department, caller identity, staff availability, location or business-hours schedule.

Inbound rules can send a number to a receptionist, ring group, queue, auto-attendant or voicemail. Outbound rules can select a carrier, apply number formatting and enforce user permissions.

Nexgen describes intelligent call routing as supporting simultaneous or sequential ringing across multiple extensions. The practical configuration will depend on the selected plan, devices and calling service.

What are auto-attendants, queues and ring groups?

An auto-attendant answers a call and presents menu choices, such as “press 1 for sales”. A ring group sends the call to several users, while a queue places callers in an ordered waiting line until an agent becomes available.

These are separate logical components even when they are configured through the same administration portal. They can be combined into an inbound call flow, such as number → auto-attendant → department queue → voicemail.

The design should reflect how the business actually answers calls. Adding menus without clear ownership can make a phone system harder for customers to use.

What is the voicemail component?

Voicemail records messages when a user or group cannot answer. Its configuration may include greetings, message storage, access codes, transcription, email delivery, retention and notification rules.

Voicemail can be assigned to an individual extension, queue, department or main business number. It may also operate as an overflow destination after a time condition or outside business hours.

Nexgen lists voicemail-to-email as a cloud phone feature that can send voicemail audio or a transcript to an inbox. Availability and retention settings should be checked against the specific service configuration.

What administration and reporting components are included?

Administration tools control users, devices, numbers, routes, permissions, greetings and service settings. Reporting tools may record call detail records, queue activity, missed calls, durations and other operational information.

In an on-premises system, administrators may use a local web interface or management application. In a hosted system, configuration is generally delivered through a provider-managed portal.

Administration access should be restricted to authorised staff. The system should also maintain clear records of number ownership, extension assignments, call routes, administrator accounts and integrations.

Which PABX system components are essential?

The essential components depend on the phone service and endpoint type, but every working system needs a call-control function, a connection to the telephone service, at least one endpoint and a path for signalling and voice media.

The following table separates commonly required components from optional or situation-dependent components.

Component Physical, logical or both? Usually required? Main purpose
Call-processing platform Both Yes Controls calls, extensions and system behaviour
External trunk or carrier connection Both Yes for external calls Connects the business to outside telephone services
User endpoint Physical or software Yes Lets a person or device make and receive calls
Network switch and router Physical Yes for IP systems Carries signalling and voice traffic
Cabling or wireless network Physical Usually Connects endpoints and infrastructure
Extension and user records Logical Yes Identifies people, departments and devices
Dial plan and call routes Logical Yes Determines how numbers and calls are handled
Voicemail Logical Optional but common Stores messages when calls are unanswered
Auto-attendant Logical Optional Presents menu-based call handling
Call queue Logical Optional Organises callers waiting for an available agent
Gateway or SBC Physical, logical or both Depends on interconnection Connects different networks, services or protocols
UPS or backup connectivity Physical Situation-dependent Supports continuity during power or network interruptions
Call recording and analytics Logical Optional Supports review, reporting and operational analysis

How do PABX components differ between on-premises and cloud systems?

The biggest difference is where the call-processing platform and management functions operate. An on-premises system places more core equipment at the business site, while a cloud system places the central platform in the provider’s environment.

Component area On-premises PABX Cloud PABX
Call-processing core Office appliance, server or virtual machine Provider-hosted platform
External connectivity Local gateway, trunk or carrier connection Provider-managed service connection
User devices Desk phones, softphones and other endpoints Desk phones, softphones, mobile apps and browser tools
Local network Important for all IP phones and internal devices Still important for office-based endpoints
Administration Customer or managed IT team Customer portal plus provider operations
Expansion May require hardware, licences or installation Usually configured through users, licences or service settings
Power dependency at the office Core, network and phones may all depend on site power Phones and local network still depend on site power
Maintenance responsibility More equipment is maintained on site More platform maintenance is handled by the provider

Nexgen describes its hosted cloud phone solution as operating without an on-site PBX box while supporting desk phones, mobiles and desktop devices. That does not remove every physical component: the customer still needs compatible endpoints and a functioning local or mobile connection.

How should a business map its PABX system components?

Start by drawing the call path from the external service to the user. Record every physical device and logical rule that a call passes through, including the carrier connection, firewall, router, switch, PABX platform, extension, ring group, queue and voicemail destination.

Next, create an inventory with the following fields:

Component name and location
Physical device, software function or hosted service
Connected numbers and extensions
Power and network dependencies
Responsible administrator or provider
Backup or failover arrangement
Replacement, renewal or support date

For Australian premises, include cabling records and the relevant compliance documentation. ACMA states that a registered cabling provider must provide telecommunications cabling advice after covered work is completed, making this documentation part of a useful system record.

If the business is moving from an office-based installation to a hosted model, the cloud communications service should be assessed as a complete system rather than only as a replacement for the old cabinet. The phones, internet connection, number porting, user accounts, call flows and support arrangements all form part of the operating environment.

What should be checked before choosing PABX components?

Check the number and type of users, external numbers, simultaneous calls, locations, endpoint preferences, existing cabling, internet capacity, emergency calling requirements and administration needs. Then identify which components the business owns, which the provider supplies and which remain the customer’s responsibility.

A practical checklist includes:

01Count users, extensions and devices.
02Identify existing numbers and external services.
03Confirm whether phones are analogue, digital, IP or software-based.
04Map the office network, switches, cabling and internet connection.
05List required call flows, queues, voicemail and business-hours rules.
06Confirm power, backup and failover arrangements.
07Check Australian cabling requirements for any new or altered fixed cabling.
08Document who will configure, monitor and support each component.

For a deeper guide on selecting the right architecture, use. For installation planning, use.

Frequently asked questions about PABX system components

What is the most important component in a PABX system?

The call-processing platform is the central logical component because it controls extensions, call routes and connections between users and external services. A failure in the network, power supply or carrier connection can still prevent the platform from working.

Does a cloud PABX need physical hardware?

A cloud PABX usually does not require an on-site PABX cabinet or call-processing server. It still needs physical or software endpoints, local networking, power and an internet or mobile connection.

Are IP phones part of the PABX?

IP phones are endpoints connected to the PABX rather than the call-processing core itself. They register with the system and provide the interface for users to make and receive calls.

What should be included in a PABX component checklist?

Include the call platform, carrier connection, gateways or SBCs, endpoints, switches, routers, cabling, power, users, extensions, dial plans, call routes and support responsibilities. Add optional functions such as voicemail, auto-attendant, queues, recording and reporting where the business needs them.

Talk to Nexgen about your phone system

Get a like-for-like comparison against a managed cloud phone service.

Terms Of Use

Your access to the Nexgen website at https://www.nexgen.com.au is your acceptance of these Terms and Conditions and your access and use of the website is subject to these Terms and Conditions. If you do not accept these Terms and Conditions, you must refrain from using the Website. In these Terms and Conditions, capitalised words have special meanings. These special meanings are set out in the “General” section of this document.

Disclaimer of Liability – General Disclaimer

We are not liable to you or anyone else for any Loss in connection with use of this Website or a Linked Website or the failure to provide this Website.

This general disclaimer is not restricted or modified by any of the following specific warnings and disclaimers.

Disclaimer of Liability – Specific Warnings and Disclaimers

We are not liable to you or anyone else if interference with or damage to your computer systems occurs in connection with use of this Website or a Linked Website. You must take your own precautions to ensure that whatever you select for your use from this Website is free of viruses or anything else (such as worms or trojan horses) that may interfere with or damage the operations of your computer systems.

We may, from time to time, change or add to this Website (including these Terms and Conditions and privacy policy) or information, products or services without notice and your continued use of the Website will constitute acceptance of the variation. However, we do not undertake to keep this Website or these Terms and Conditions updated. We are not liable to you or anyone else if errors occur in the information on this Website or if that information is not up-to-date.

To the extent permitted by applicable law, all representations, warranties and other terms are excluded. You must ensure that your access to this Website is not illegal or prohibited by laws which apply to you or in your location.

To the extent permitted by applicable law, our liability for negligence, breach of contract or contravention of any law as a result of our failure to provide the Website, is limited to providing access to the Website.

You may not use the Website to collect or harvest Personal Information, including Internet addresses, about other users. You must comply with our Acceptable Use Policy available on the Website.

You must abide by any Terms and Conditions posted on the Website. You indemnify us from and against all actions, claims, suits, demands, liabilities, costs or expenses arising out of, or in any way connected to, the use of the Website by you.

Charges

You are responsible for the costs of all Internet access and telecommunications charges incurred when using the Website and accept that your use of the Website is your responsibility and is at your own risk entirely.

Nexgen operates secure servers to minimise the risk of unauthorised use of credit card information but unauthorised credit card use is at your risk.

Copyright

This Website, including without limitation, documents, information, programs and designs is our copyright property.

You are provided with access to it only for your personal and non-commercial use.

Other than for the purposes of and subject to the conditions prescribed under the Copyright Act 1968 (Commonwealth of Australia) and similar statutes that apply in your location, you may not, in any form or by any means:

1. adapt, reproduce, store, distribute, transmit, print, display, perform, publish or create derivative works from any part of this Website; or

2. commercialise any information, products or services obtained from any part of this Website, without our written permission.

Google Online Advertising

Nexgen use the Google AdWords Remarketing service which advertises across the internet to previous visitors to our website.

Google AdWords Remarketing displays relevant advertising content based on which sections of the Nexgen website you have visited. This is done by placing a cookie on your machine. A cookie is a small file sent to your browser from a web server to be stored on your computer. Cookies do not allow access to your computer or any data / files contained in your computer. It will not identify you in any way. Google Adwords Remarketing allow us to tailor our advertising and marketing content so it is relevant and suits your needs.

Any data collected as part of our use of Google Adwords Remarketing will be in accordance with Arrow’s privacy policy and Google’s privacy policy.

If you do not wish to be a part of our Google AdWords Remarketing, you can opt out by visiting Google Ads Preference Manager:

https://www.google.com/settings/ads

Then go to the “opt-out settings” where you can opt out of all interest based ads on Google and across the web.

Trade Marks

Intellectual Property in all materials, documents, information, data, images, logos and trade marks that we provide you or which are contained on the Website are owned or licensed to us and all rights are reserved.

Other product and company names mentioned in this Website may be the trade marks of other people or entities.

If you use any of our trade marks to refer to our activities, products or services, you must include a statement attributing that trade mark to us. You must not use any of our trade marks:

Linked Websites

This Website may contain links to Linked Websites. Those links are provided for convenience only and may not remain current or be maintained. We do not make any representation as to the accuracy or sustainability of any of the information contained on those other sites, and do not accept any responsibility or liability for the conduct or content of those other sites.

Links to those Linked Websites should not be construed as any endorsement, approval, recommendation, or preference by us of the owners or operators of the Sites, or for any information, products or services referred to on those Other Websites.

Unless stated otherwise on this Website, we have:

1. no relationship with the owners or operators of those Linked Websites; and

2. no control over or rights in those Linked Websites.

Personal Information

When transacting with you we may ask you for personal details such as your name, address and email address so that we can accurately identify who is using our services. By accessing the Website you consent to us sending you commercial electronic messages. If you do not want us to send you commercial electronic messages you may ask us not to by sending a blank email to [email protected]

Cookies

“Cookies” are a standard for storing small pieces of data on a web client (ie. the web browser on your computer). Any Web server (including this one) may:

1. store one or more cookies in your browser; or

2. request your browser to transmit the data to the Web server.

This Website may store cookies on your Web client in order to better serve you upon your subsequent visits to this Website.

By using cookies, Websites can track information about visitors’ usage of the site, provide customised content, or even the use of password protection. Note that some browsers can be configured to allow cookies to be accessed by servers other than the originating server.

Please note that most Web browsers can also be configured to notify the user when a cookie is received, allowing you to either accept or reject it. Please refer to the documentation and help screens for your web browser.

Security of Information

Unfortunately, no data transmission over the Internet can be guaranteed as totally secure. Whilst we strive to protect such information, we do not warrant and cannot ensure the security of any information or content which you transmit to us. Accordingly, any information which you transmit to us is transmitted at your own risk. Nevertheless, once we receive your transmission, we will take reasonable steps to preserve the security of such information.

Termination of Access

Access to this Website may be terminated at any time by us without notice. Our disclaimer will nevertheless survive any such termination.

General

In these Terms and Conditions:

1. “Intellectual Property” means any and all intellectual and industrial property rights throughout the world including but not limited to any copyright, trade mark, domain name, business name, design, patent, circuit layout, semi-conductor or other similar proprietary rights and licenses and sub-licenses of such rights (irrespective of whether or not such rights are registered, or formal or informal); trade secrets, technical or non-technical data, knowledge, information or documentation; secret or confidential operations or information; business systems, business methods or business plans (whether registered, formal, informal or otherwise); customer lists, supplier lists and other proprietary lists, names, addresses or information not generally known; techniques, diagrams, data, proofs, prints, particulars, inventions and prototypes.

2. “Linked Websites” means Websites of people other than NexGen which are hyperlinked from this Website.

3. “Loss” means any loss or damage, however caused (including through negligence) which may be directly or indirectly suffered.

4. “Personal Information” means any information from which your identity is apparent or can be reasonably ascertained as defined in the Privacy Act 1988 (Cth).

5. This “Website” means the whole or any part of the web pages located at https://www.nexgen.com.au (including the layout of this Website; individual elements of the Website design; underlying code elements of this Website; or text, sounds, graphics, animated elements or any other content of this Website).

6. “We” and “us” refer to Nexgen Australia Group Pty Ltd trading Nexgen Australiaas and “our” has a similar meaning.

These Terms and Conditions are governed by the laws in force in New South Wales, Australia and you submit to the non-exclusive jurisdiction of the courts of New South Wales, Australia and any courts which may hear appeals from those courts in respect of any proceedings in connection with these Terms and Conditions or this Website.

Nothing contained in these Terms and Conditions derogates from Nexgen’s right to comply with law enforcement requests or requirements relating to your use of this Website or information provided to or gathered by Nexgen with respect to that use.

Nexgen Master Security License Certificate Number is 410 295 251, ID Number 108 216 452 Nexgen is a member of ASIAL.

Privacy Policy

  • 1. About this Document
    • 1.1 This document (“Privacy Policy”) sets out the policy of Nexgen Investment Group Pty Ltd Trading As Nexgen Australia – ABN 88 606 251 503 in respect of the treatment of your Personal Information or your affairs or personal particulars.
  • 2. Interaction with Telecommunications Act 1997 (Cth)
    • 2.1 Nexgen is a Carriage Service Provider and is subject to obligations set out in the Telecommunications Act 1997 (Cth)
    • 2.2 To the extent that any of your Personal Information is also information of the kind referred to section 276 of the Telecommunications Act 1997 (Cth) (in particular, information that relates to your affairs or personal particulars) Nexgen will not use or disclose that information unless permitted by the Telecommunications Act 1997 (Cth) and the Privacy Act 1988 (Cth).
  • 3. Dictionary
    • 3.1 To assist in the understanding of this Privacy Policy, the following capitalized words in this Privacy Policy have the following meanings:
      Carriage Services has the meaning given to that term in the Telecommunications Act 1997 (Cth).
      Carriage Service Provider has the meaning given to that term in the Telecommunications Act 1997 (Cth).
      Personal Information has the meaning given to that term in the Privacy Act 1988 (Cth).
      Related Body Corporate has the meaning given to that term in the Privacy Act 1988 (Cth).
      Sensitive Information has the meaning given to that term in the Privacy Act 1988 (Cth).
      and includes information as to race, political opinion, religious believes, sexual preferences and membership of a professional or trade association.
  • 4. Collection
    • 4.1 1 Nexgen will collect Personal Information from you if that Personal Information is necessary for one or more of Nexgen’s functions or activities.
    • 4.2 Personal Information is predominantly collected so that Nexgen can supply Carriage Services to you (or contact you in respect of a proposed supply of Carriage Services) and perform ancillary and incidental functions. This includes:
      • customer service;
      • complaints handling;
      • billing; and
      • promoting our special offers as well as offers from our Related Bodies Corporate, suppliers and/or affiliated third parties.
    • 4.3 Nexgen may collect Personal Information using several different methods. For example, Personal Information may be collected by Nexgen:
      • directly from you by telephone, email or by completing a form (e.g. Nexgen may be provided with Personal Information on a customer application form, during contractual negotiations, during voice verification etc.); or
      • from third parties such as our Related Bodies Corporate, credit reporting agencies or your representatives; or
      • from information in the public domain – however if it is reasonable and practicable to do so, we will only collected Personal Information about you directly from you.
    • 4.4 Nexgen will take reasonable steps to ensure that you are aware at the time of collection (if practicable):
      • that Nexgen is collecting the Personal Information and as to how to contact Nexgen (if this is not obvious to you);
      • that you may gain access to the Personal Information (see paragraph 9 below);
      • the purpose for which the Personal Information is collected (this may be referring you to this Privacy Policy); done by
      • of the organisations (or types of organisations) to which Nexgen usually discloses Personal Information (this may be done by referring you to this Privacy Policy);
      • of any law that requires the Personal Information to be collected (for example, for compliance with the laws relating to the Integrated Public Number Database); and
      • of the consequences (if any) of Nexgen not collecting the Personal Information (typically, this will be an inability to supply Carriage Services to you).
    • 4.5 If it is not practicable for Nexgen to take reasonable steps to ma e you aware of the matters set out in paragraph 4.4 at the time of collection, Nexgen will do so as soon as practicable after collection.
  • 5. Use and Disclosure
    • 5.1 Nexgen will generally only use Personal Information for the primary purpose for which it was collected (for example, Personal Information set out in a customer application form is collected for Nexgen). the primary purpose of facilitating the supply of Carriage Services by
    • 5.2 However, Nexgen may use or disclose Personal Information for a secondary purpose in the following circumstances:
      Reasonable Expectation
    • 5.3 Nexgen may use or disclose Personal Information for a secondary purpose if:
      • the secondary purpose is related to (or if the Personal Information is Information, directly related to) the primary purpose of collection; and Sensitive
      • you would reasonably expect Nexgen use or disclose the Personal Information for that purpose.
    • 5.4 For example, Nexgen considers that if you are a customer, you would reasonably expect Nexgen to disclose or use your Personal Information to:
      • its printing and mailing house to print and dispatch correspondence and communications to you or
      • notify the customer of special offers or promotions from Nexgen, its Related Bodies Corporate, suppliers and/or affiliated third parties; or
      • ask you to participate in a customer satisfaction survey; or
      • to its dealers, sub-contractors and agents to enable them to perform certain functions on behalf of Nexgen.
  • Consent
    • 5.5 5 Nexgen may use or disclose Personal Information for a secondary purpose if you provide your express consent or consent can be implied.
    • 5.6 Nexgen may seek your consent on an application form for services, during the voice contracting stage of your application or in some other way.
  • Direct Marketing
    • 5.7 Nexgen may use or disclose Personal Information for the secondary purpose of direct marketing.
    • 5.8 Unless paragraphs 5.3 to 5.6 allow Nexgen to otherwise use Personal Information for direct marketing, Nexgen will only use Personal Information for direct marketing to you if:
      • it is not Sensitive Information;
      • it is impracticable for Nexgen to seek your consent before that particular use;
      • Nexgen will not charge you for giving effect to a request by you to not receive direct marketing communications;
      • you have not made a request to Nexgen not to receive direct marketing communications;
      • in each direct marketing communication with you, Nexgen draws to your attention, or prominently displays a notice, that you may express a wish not to receive any further direct marketing communications; and
      • each written direct marketing communication by Nexgen with you sets out Nexgen’s business address and telephone number and, if the communication is made by fax, telex or other electronic means, a number or address at which Nexgen can be directly contacted electronically.
    • 5.9 To avoid doubt, Nexgen will also comply with the Spam Act 2001 (Cth) and Do Not Call Register Act 2006 (Cth) in circumstances of direct marketing to you.
  • Life, Health and Safety
    • 5.10 Nexgen may use or disclose Personal Information if Nexgen reasonably believes that it is necessary to lessen or prevent:
      • a serious and imminent threat to an individual’s life, health or safety; or
      • a serious threat to public health or public safety.
  • Unlawful Activity
    • 5.11 Nexgen may use or disclose Personal Information if Nexgen has reason to suspect that unlawful activity has been, is being, or may be engaged in. However, Nexgen’s use or disclosure will be limited to that which is a necessary part of Nexgen’s investigation into the matter or in reporting Nexgen’s concerns to relevant persons or authorities.
  • Permitted by Law
    • 5.12 Nexgen may use or disclose Personal Information if Nexgen is permitted by law to do so. For example, Nexgen may disclose your Personal Information pursuant to:
      • a law enforcement request;
      • ccourt order or subpoena; or
      • its interception obligations.
  • Disclosure to Enforcement Body
    • 5.13 Nexgen may use or disclose Personal Information if Nexgen is permitted by law to do so. For example, Nexgen may disclose your Personal Information pursuant to an enforcement body (for example, the Australian Federal Police, ASIC, ACCC, police force etc.) if Nexgen believes that it is reasonably necessary for:
      • the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law;
      • the enforcement of laws relating to the confiscation of the proceeds of crime;
      • the protection of the public revenue;
      • the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
      • the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal.
  • 6. Data Quality
    • 6.1 Nexgen will review, on a regular and ongoing basis, its collection and storage practices to ascertain how improvements to accuracy can be achieved.
    • 6.2 Nexgen will also take reasonable steps to make sure that the Personal Information collected, used or disclosed is accurate, complete and current.
  • 7. Data Security
    • 7.1 Nexgen will take reasonable steps to protect the Personal Information it holds from misuse and loss and from unauthorised access, modification or disclosure. It will generally do so by:
      • restricting or limiting the access to Personal Information to those of its employees, agents or contractors who have a ‘need to know’;
      • removing access from employees, agents or contractors who no longer work for or with Nexgen or no longer have a ‘need to know’;
      • reviewing and resetting passwords which provide access to Personal Information with reasonable frequency; and
      • implement enhanced security access features to prevent unauthorised access, use or disclosure.
    • 7.2 Nexgen will take reasonable steps to destroy or permanently de-identify Personal Information if it is no longer needed for any purpose for which the Personal Information may be used or disclosed.
  • 8. Openness
    • 8.1 The Nexgen website will contain a prominently displayed link to this Privacy Statement.
    • 8.2 Nexgen will refer any person to this Privacy Statement if that person requests information on Nexgen’s policy on the management of Personal Information.
    • 8.3 On request by a person, Nexgen will take reasonable steps to let the person know, in general terms, what sort of Personal Information is held and the reasons for which that Personal Information is generally collected. Nexgen will also provide information, in general terms, in respect of how Nexgen holds, uses and discloses that Personal Information.
  • 9. Access and Correction
    • 9.1 1 If Nexgen holds your Personal Information, Nexgen will provide you with access on request to that Personal Information, in particular, so that you can verify the Personal Information is accurate, complete and current. If the Personal Information is not accurate, complete or current, Nexgen will take reasonable steps to remedy the inaccurate, incomplete or outdated Personal Information.
    • 9.2 However, Nexgen will not provide you with access to the extent that:
      • providing access would pose a serious and imminent threat to the life or health of any person; or
      • providing access would have an unreasonable impact upon the privacy of any other person; or
      • the request for access is frivolous or vexatious; or
      • the Personal Information relates to existing or anticipated legal proceedings between Nexgen and yourself, and the Personal Information would not be accessible by the process of discovery in those proceedings; or
      • providing access would reveal Nexgen’s intentions in relation to negotiations with you in such a way as to prejudice those negotiations; or
      • providing access would be unlawful; or
      • denying access is required or authorised by or under law; or
      • providing access activity; or would be likely to prejudice an investigation of possible unlawful
      • providing access would be likely to prejudice:
        • the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law; or
        • the enforcement of laws relating to the confiscation of the proceeds of crime; or a prescribed law; or
        • the protection of the public revenue; or
        • the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
        • the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of its orders; by or on behalf of an enforcement body; or
      • an enforcement body performing a lawful security function asks Nexgen not to provide access to the information on the basis that providing access would be likely to cause damage to the security of Australia.
    • 9.3 Additionally, if providing access would reveal evaluative information generated within Nexgen in connection with a commercially sensitive decision-making process, Nexgen may give you an explanation for the commercially sensitive decision rather than direct access to the information.
    • 9.4 Nexgen reserves the right to charge a fee for searching for and providing access to your Personal Information (except if any other law prohibits Nexgen from charging a fee). In any event,
  • 10. Anonymous Transactions
    • 10.1 Nexgen will allow its customers to transact with it anonymously wherever that is reasonable and practicable.
  • 11. Transferring Personal Information Overseas11.1 Nexgen may transfer Personal Information outside of Australia where Nexgen considers that it is necessary or desirable to do so. However, Nexgen will not transfer your Personal Information outside of Australia unless any of the following circumstances exist:
    • Nexgen reasonably believes that the recipient of the Personal Information is subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are substantially similar to the National Privacy Principles contained in the Privacy Act 1988 (Cth); or
    • you consent to the transfer; or
    • the transfer is necessary for the performance of a contract between Nexgen and yourself, or for the implementation of pre-contractual measures taken in response to the your request; or
    • the transfer is necessary for the conclusion or performance of a contract concluded in your interest between the Nexgen and a third party; or
    • all of the following apply:
      • the transfer is for your benefit;
      • it is impracticable to obtain your consent to that transfer;
      • if it were practicable to obtain your consent, you would be likely to give it; or
    • Nexgen has taken reasonable steps to ensure that the information which it has transferred will not be held, used or disclosed by the recipient of the information inconsistently with the National Privacy Principles contained in the Privacy Act 1988 (Cth).