Using Your Rotary Address

Both rules come from the same idea

The district runs Microsoft 365 for three reasons: privacy, security and confidentiality. Every one of those depends on the same condition. The correspondence has to stay inside a closed system.

That is worth being precise about, because it is the whole argument. The protections are not properties of an individual message, and they are not something a careful person can supply by being careful. They are properties of the boundary. Mail is scanned, encrypted, retained, access-controlled and recoverable because of where it sits, not because of who sent it or how sensibly they behaved. Move a message outside the boundary and it keeps none of that. It is not a slightly less protected copy. It is an ordinary email in an ordinary mailbox, indistinguishable from any other.

This is why neither rule has a small version. An address outside the system, or a rule that forwards mail out of it, is not a minor exception to a policy. It is a hole in the boundary, and the boundary is the entire thing the district is paying for and administering. A closed system with one deliberate gap in it is not a closed system that is mostly working. It is an open one, and everyone relying on it is doing so on a false assumption.

Everything below is a specific consequence of that.

Why a Rotary address and not your personal one

A Rotary address belongs to the district and to the role you hold. A personal address belongs to you. Nearly everything that goes wrong follows from that one difference.

• The address outlives you in the role. Roles change hands, often mid-year and sometimes at short notice. A district address keeps working the day you hand over. A personal address stops the moment you do, and everything anyone sends to it after that quietly goes nowhere.
• District correspondence is a district record. Approvals, decisions, complaints, agreements with schools and families: these belong to Rotary, not to a private account the district cannot reach. When your successor asks what was agreed with a school last March, the answer needs to be somewhere they can look.
• Youth protection. Correspondence about young people, with their parents, and with schools has to sit on district systems where it is retained, searchable and auditable. That is the entire point of having a district tenant. Once it is in a private mailbox, the district cannot produce it when it matters.
• People can tell it is genuinely you. A message from firstname.lastname@rotary9660.org.au is verifiable. A message from a Gmail address claiming to be from a Rotary district officer looks exactly like the scams schools and clubs are trained to ignore, because that is precisely how those scams are written.
• The protections only exist inside the tenant. Multi-factor authentication, phishing and malware scanning, encryption in transit, and the ability to lock an account out if it is compromised all apply to district mailboxes. None of them apply to your personal account, and the district has no way to help you if it is breached.

Why your work address is not the alternative

People often reach for their work address instead, on the reasoning that it is more professional than a personal one. It is not a substitute, and in some ways it is the riskier of the two.

• Your employer owns that mailbox and can read it. Member personal details, youth protection material and confidential district matters would be sitting in a third party's system, accessible to that organisation's IT staff and management. Nobody who wrote to you consented to that.
• You lose it the day you change jobs. Not gradually, and usually not with warning. Access is cut, often within the hour, and there is no handover of anything held in it.
• Your employer's rules apply, not the district's. Retention policies may delete Rotary correspondence on a schedule you do not control. Filtering may block district mail, or attachments, without telling you.
• It draws your employer into Rotary matters. If a district issue ever becomes contentious, correspondence held in a workplace system can pull your employer into something that has nothing to do with them. That is unfair to them and unhelpful to you.

Signing up to district platforms

The rule is firmest where accounts are concerned. When any district platform needs an email address to register with (Canva, TryBooking, Xero, Zoom, social media accounts, anything at all), that address must be a district distribution list, role-based or committee mailbox on rotary9660.org.au. For example publicimage@rotary9660.org.au or treasurer@rotary9660.org.au.

This is set out in the District M365 Policy (section 9.5) and the District Credential Management Policy (section 9.4.1), which state the prohibition applies without exception, regardless of the platform's size, cost or expected lifespan.

If a district platform is already registered to a prohibited address, that is not a crisis and you are not in trouble. It predates the policy in most cases. Email support@rotary9660.org.au and we will migrate the registration across.

Why Rotary email must not be forwarded out

Setting your district mailbox to automatically forward everything to a personal or work account seems like a tidy solution to having one inbox too many. It is not permitted, for reasons that are worth understanding rather than just complying with.

• You will reply from the wrong address, and the thread leaves the district permanently. This is the practical failure, and it happens almost immediately. Mail arrives in your Gmail, you reply from your phone without thinking, and now the other party has your personal address. They keep using it. Their reply never reaches the district at all, and no forwarding rule brings it back, because it was never sent to Rotary in the first place.
• It moves district records outside district control. Every forwarded message becomes a copy the district cannot search, retain, retrieve or delete. Handover, audits and youth protection all depend on being able to do those things.
• It carries youth protection material into a private mailbox. Correspondence about young people should never land in a personal account or in an employer's system. Forwarding sends all of it, indiscriminately, with no way to filter what should not go.
• It defeats the tenant's protections. Mail that has left the district is no longer covered by district scanning, encryption or access controls. If your personal account is ever compromised, so is every district message that was forwarded to it, going back as far as the rule has been running.
• It is what a compromised mailbox looks like. Attackers who take over a mailbox set up an external forwarding rule as their first move, to keep reading mail after the password is changed. It is one of the strongest warning signs there is. A legitimate forwarding rule is indistinguishable from that, so it wastes everyone's time and blunts a genuinely useful alarm.

Keeping on top of it without forwarding

The reason people forward is almost always the same, and it is a fair one: you do not want to remember to check a second inbox, and you do not want to miss something because you forgot. That problem is worth solving. Forwarding is just the wrong way to solve it.

• Add your Rotary account to the app you already use. The Outlook mobile app holds several accounts at once, including Gmail and most work accounts, and shows them together. Your Rotary mail arrives on your phone next to everything else, but replies still go out from your Rotary address. This is what most people actually want when they ask about forwarding. See Email and Basics to set it up.
• Turn notifications on. Once the account is in the app, notifications mean you are not remembering to check anything. It tells you.
• Shared inboxes appear on their own. If you have been given access to a role mailbox such as secretary@rotary9660.org.au, it turns up in Outlook on the desktop automatically. There is nothing to forward and nothing to configure. See Shared Inboxes.
• Use the web when you are on someone else's device. outlook.cloud.microsoft works in any browser with no setup.

The one kind of forwarding that is encouraged

Forwarding in the opposite direction is not only allowed, it is recommended. If you used a Gmail address for your Rotary role before the district tenant existed, schools, families and clubs will keep writing to it for a long time yet. Setting that old Gmail to forward into your district inbox means nothing is missed while people update their address books.

That is the reverse of what this page asks you not to do. Mail is moving into district systems rather than out of them, which is exactly the direction it should travel.

How to forward your old Gmail into your district inbox

Still not sure

If you are unsure which address to use for something, or you have inherited a set-up that does not match this page, ask before changing anything. Email support@rotary9660.org.au and we will sort it out with you. Nobody is in trouble for an arrangement they inherited.