Privacy Policy & Procedures

Purpose

This policy ensures that Sydney Academy of Excellence Pty Ltd meets its legal and ethical requirements in regard to the collection, storage and disclosure of the personal information it holds in regards to individuals.
This policy and procedure contributes to compliance with Clause 3.6 and 8.5 of the Standards for Registered Training Organisations 2015, Standard 3 of the National Code of Practice for Providers of Education and Training to Overseas Students 2018 as well as the legislative instrument Data Provision Requirements 2012 including the National VET Provider Collection Data Requirements Policy

Definitions

ASQA means Australian Skills Quality Authority, the national VET regulator and the RTO’s registering body
Personal information means ‘information or an opinion about an identified individual, or an individual who is reasonably identifiable:

  • ‘Whether the information or opinion is true or not; and
  • ‘Whether the information or opinion is recorded in a material form or not.1
    SRTOs means the Standards for Registered Training Organisations 2015 – refer definition of ‘Standards’
    Sensitive information is information is information or an opinion about an individual’s: racial or ethnic origin; or political opinions; or membership of a political association; or religious beliefs or affiliations; or philosophical beliefs; or membership of a professional or trade association; or membership of a trade union; or sexual orientation or practices; or criminal record; that is also personal information; or health information about an individual; or genetic information about an individual that is not otherwise health information; or biometric information that is to be used for the purpose of automated biometric verification or biometric identification; or biometric templates.


1 Definition from: Australian Government. Privacy Act 1988 (Cth). Accessed on 5th January 2014 at http://www.comlaw.gov.au/Details/C2014C00076/Html/Text#_Toc382302897

Standards means the Standards for Registered Training Organisations (RTOs) 2015 from the VET Quality Framework which can be accessed at www.asqa.gov.au


Unique Student Identifier is a unique reference number issued to an individual by the Australian Government. It is made up of numbers and letters and enables an individual to look up and track their training achievements in an online database.


TPS means the Tuition Protection Scheme established to assist international students where the provider is unable to deliver their course in full because of provider default.


USI means Unique Student Identifier as above.


National VET Provider Collection Data Requirements Policy is Part B of the National VET Data Policy.

 

Policy

1. Privacy Principles

  • In collecting personal information, Sydney Academy of Excellence Pty Ltd complies with the requirements set out in the Privacy Act 1988, including Australian Privacy Principles 3 and 5 (in accordance with the National VET Provider Collection Data Requirements Policy clause 4.4) and the relevant privacy legislation and regulations of the state NSW in which Sydney Academy of Excellence Pty Ltd operates.
  • Personal information, including sensitive information, is collected from individuals in order that Sydney Academy of Excellence Pty Ltd can carry out its business functions. Sydney Academy of Excellence Pty Ltd only collects and stores information that is directly related to its business purposes and legal requirements of providing nationally recognised training and assessment.
  • Sensitive information is only collected by Sydney Academy of Excellence Pty Ltd if a permitted general or health situation applies in accordance with the Privacy Act (16A, 16B) such as, if:

    The collection of the information is required or authorised by, or under, an Australian law or a court/tribunal order.

    It is unreasonable or impracticable to obtain the individual’s consent to the collection, use or disclosure.

    It genuinely and reasonably believes that:

    The collection, use or disclosure is necessary to lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety.

    Unlawful activity, or misconduct of a serious nature, that relates to Sydney Academy of Excellence Pty Ltds functions or activities has been, is being or may be engaged in, and the collection, use or disclosure is necessary in order for the entity to take appropriate action in relation to the matter.

    The collection, use or disclosure is reasonably necessary to assist any APP entity, body or person to locate a person who has been reported as missing.

    The collection, use or disclosure is reasonably necessary for the establishment, exercise or defense of a legal or equitable claim.
  • Sydney Academy of Excellence Pty Ltd ensures each individual:

    Knows why their information is being collected, how it will be used and who it will be disclosed to.

    Is made aware of any legal requirement for Sydney Academy of Excellence Pty Ltd to collect the information.

    Is able to access their personal information upon request.

    Does not receive unwanted direct marketing.

    Can ask for personal information that is incorrect to be corrected.

    Can make a complaint about Sydney Academy of Excellence Pty Ltd if they consider that their personal information has been mishandled.

    Is made aware of any consequences for not providing the information requested.

    Whether the information is likely to be disclosed to overseas recipients, and if so, which countries such recipients are likely to be located in.
  • Sydney Academy of Excellence Pty Ltd retains evidence that that the student has acknowledged the following Privacy Notice and Student Declaration as part of their enrolment process: https://www.education.gov.au/privacy-notice-and-student-declaration

2. Collection of information

  • Under the Data Provision Requirements 2012, Sydney Academy of Excellence Pty Ltd is required to collect personal information about students undertaking nationally recognised training and disclose that personal information to the National Centre for Vocational Education Research Ltd (NCVER). NCVER will collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth), the VET Data Policy and all NCVER policies and protocols (including those published on NCVER’s website at www.ncver.edu.au).
  • In general, personal information will be collected through course application and/or enrolment forms, training records, assessment records and online forms and submissions.
  • The types of personal information collected include:

    personal and contact details

    employment information, where relevant

    academic history

    background information collected for statistical purposes about prior education, schooling, place of birth, disabilities and so on

    training, participation and assessment information

    fees and payment information

    information required for the issuance of a USI

    for international students:
    # current course information including CRICOS code, agreed starting date, expected completion date if the student did not start on the agreed date
    # Information about any terminations for change to identity and duration of the course
    # English language proficiency including the name of the test and the score received
    # visa information, including the DIBP office where the visa application was made and current local DIBP office
    # passport information including whether the student was in Australia when they became an accepted student

3. Unique Student Identifiers (USI)

  • All students participating in nationally recognised training from 1 January 2015 are required to have a Unique Student Identifier (USI) and provide it to Sydney Academy of Excellence Pty Ltd upon enrolment. Alternatively, Sydney Academy of Excellence Pty Ltd can apply for a USI on behalf of an individual.
  • The Student Identifiers Act 2014 authorises the Australian Government’s Student Identifiers Registrar to collect information about USI applicants. When Sydney Academy of Excellence Pty Ltd applies for a USI on behalf of a student who has authorised us to do so, we need to collect personal information about the student which will be passed on to the Student Identifiers Registrar. This will include:

    name, including first or given name(s), middle name(s) and surname or family name
    − date of birth
    − city or town of birth
    − country of birth
    − gender
    − contact details, so the Student Identifiers Registrar can provide individuals with their USI and explain how to activate their USI account.
  • In order to create a USI on behalf of a student, Sydney Academy of Excellence Pty Ltd will be required to verify the identity of the individual by receiving a copy of an accepted identification document. This document will only be used for the purposes of generating the USI and confirming the identity of the individual with the Registrar. Once the USI has been generated and validated, the identity documents used or collected for this purpose will be securely destroyed.
  • The information provided by an individual in connection with their application for a USI:

    is collected by the Registrar as authorised by the Student Identifiers Act 2014.

    is collected by the Registrar for the purposes of:

    applying for, verifying and giving a USI

    resolving problems with a USI

    creating authenticated vocational education and training (VET) transcripts

    may be disclosed to:

    Commonwealth and State/Territory government departments and agencies and statutory bodies performing functions relating to VET for:

    the purposes of administering and auditing VET, VET providers and VET programs

    education related policy and research purposes

    to assist in determining eligibility for training subsidies

    VET Regulators to enable them to perform their VET regulatory functions

    VET Admission Bodies for the purposes of administering VET and VET programs

    current and former Registered Training Organisations to enable them to deliver VET courses to the individual, meet their reporting obligations under the VET standards and government contracts and assist in determining eligibility for training subsidies

    schools for the purposes of delivering VET courses to the individual and reporting on these courses

    the National Centre for Vocational Education Research for the purpose of creating authenticated VET transcripts, resolving problems with USIs and for the collection, preparation and auditing of national VET statistics

    researchers for education and training related research purposes

    any other person or agency that may be authorised or required by law to access the information

    any entity contractually engaged by the Student Identifiers Registrar to assist in the performance of his or her functions in the administration of the USI system

    will not otherwise be disclosed without the student’s consent unless authorised or required by or under law
  • The consequences to the student of not providing the Registrar with some or all of their personal information are that the Registrar will not be able to issue the student with a USI, and therefore Sydney Academy of Excellence Pty Ltd will be unable to issue a qualification or statement of attainment.

4. Storage and use of information

  • Sydney Academy of Excellence Pty Ltd will store all records containing personal information securely and take all reasonable security measures to protect the information collected from unauthorised access, misuse or disclosure. Personal information will be stored electronically in a secure environment to which only authorised staff have access.
  • The personal information held about individuals will only be used by Sydney Academy of Excellence Pty Ltd to enable efficient student administration, report data to provide information about training opportunities, issue statements of attainment and qualifications to eligible students, and to maintain accurate and detailed records of student course participation, progress and outcomes. Information about international students may also be shared to promote compliance with the conditions of student visas and the monitoring and control of visas.
  • Sydney Academy of Excellence Pty Ltd may use the personal information provided by an individual to market other internal products and services to them. An individual may opt out of being contacted for marketing purposes at any time by contacting our office. Information will not be passed onto any third party marketing companies without the prior written consent of the individual.

5. Disclosure of information

  • Sydney Academy of Excellence Pty Ltd will not disclose an individual’s personal information to another person or organisation unless:

    They are aware that information of that kind is usually passed to that person or organisation.

    The individual has given written consent.

    Sydney Academy of Excellence Pty Ltd believes on reasonable grounds that the disclosure is necessary to prevent or lessen a serious threat to the life or health of the individual concerned or another person.

    The disclosure is required or authorised by, or under, law.

    The disclosure is reasonably necessary for the enforcement of the criminal law or of a law imposing a pecuniary penalty, or for the protection of public revenue.
  • Any person or organisation to which information is disclosed is not permitted to use or disclose the information for a purpose other than for which the information was supplied to them.
  • Personal information may be used or disclosed by Sydney Academy of Excellence Pty Ltd for statistical, regulatory and research purposes. Sydney Academy of Excellence Pty Ltd may disclose personal information for these purposes to third parties, including:

    Commonwealth and State or Territory government departments and authorised agencies; such as the Australian Skills Quality Authority (ASQA), Department of Education and Training (DET), the Department of Immigration and Border Protection (DIBP) and the Tuition Protection Service (TPS).

    NCVER

    Organisations conducting student surveys

    Researchers.
  • Personal information disclosed to NCVER may be used or disclosed for the following purposes:

    Issuing a VET Statement of Attainment or VET Qualification, and populating Authenticated VET Transcripts

    Facilitating statistics and research relating to education, including surveys

    Understanding how the VET market operates, for policy, workforce planning and consumer information

    Administering VET, including program administration, regulation, monitoring and evaluation.

6. Access to and correction of records

  • Individuals have the right to access or obtain a copy of the information that Sydney Academy of Excellence Pty Ltd holds about them including personal details, contact details and information relating to course participation, progress and AQF certification and statements of attainment issued.
  • Requests to access or obtain a copy of the records held about an individual must be made by contacting our office using the Request to Access Records Form. The individual must prove their identity to be able to access their records.
  • There is no charge for an individual to access the records that Sydney Academy of Excellence Pty Ltd holds about them; however there may be a charge for any copies made. Arrangements will be made within 10 days for the individual to access their records.

7. Complaints about privacy

  • Any individual wishing to make a complaint or appeal about the way information has been handled within Sydney Academy of Excellence Pty Ltd can do so by following Sydney Academy of Excellence Pty Ltd’s Complaints and Appeals Policy and Procedure.

Procedures

1. Privacy Notices

Procedure
Responsibility
A. Privacy notices
• Ensure the NCVER privacy notice and declaration are included on the enrolment form https://www.education.gov.au/privacy-notice-and-student-declaration
• International Student Agreements must set out the circumstances in which personal information about the student may be disclosed (in accordance with National Code 3.3.6)

2. Marketing Privacy

Procedure
Responsibility
A. Email marketing
• Ensure there is an opt-out option on all marketing emails and correspondence sent to individuals in relation to marketing.

3. Privacy of USI information

Relevant SRTOs: Clause 3.6

Procedure
Responsibility
A. USI Authority and Identification documents
• USIs are collected on the Enrolment Form. Where a student does not have a USI they may request for Sydney Academy of Excellence Pty Ltd to create one on their behalf.
• Students who request for Sydney Academy of Excellence Pty Ltd to create a USI on their behalf must sign the USI Authority Form and provide the required identification document/s.
• A USI must not be created for a student if the USI Authority Form which includes the privacy notice has not been signed.
• As soon as practicable, once the USI has been generated and validated, the personal information provided in the USI section of the Enrolment Form must be securely destroyed and not kept on file.
• Refer to the Student Administration Policy and Procedure for detailed instructions on the generation of USIs.

4. Access to Records

Relevant SRTOs: Clause 3.6

Procedure
Responsibility
A. Request to access records
• Individuals may request to access their records by using the Request to Access Records Form. Written requests should be sent to the head office.
• Requests may be from past or current students or other individuals. It may be to access records held in a file about a student, or access to a previously issued AQF certification document – refer to the AQF Certification Policy & Procedure.
• Upon receiving a completed form, confirm the request is valid and has been made by the individual to which the records relate – check identification documents.
• Arrangements for provision of records should be made as suitable – mailing copies, providing a time for records to be viewed etc.
• Arrangements should be made verbally and confirmed in writing within 10 days of receiving the request.
• Where records are to be mailed, they should only be mailed to the address that is held on file for that individual, unless alternate change of address information is provided along with proof of identity – such as a driver’s license or utility bill.
• Where records are to be shown to an individual, the student must produce photo ID prior and this should be matched to the records held on file about the individual to confirm they are only viewing their own records.
• Keep a note on how the records were accessed on the individuals file.
Document Control
Document No. & Name:
Quality Area:
Author:
Status:
Approved By:
Approval Date:
Review Date:
Standards (SRTOs):
Standards (National Code):