1.0 PURPOSE
isaSKILLS is committed to protecting the privacy of personal information. this policy sets out the way we handle personal information including the use and disclosure of personal information, as well as client rights to access their personal information.

1.1 Privacy, Dignity and Confidentiality
Each service recipient's right to privacy, dignity and confidentiality in all aspects of his or her life is recognised and respected.

Service Management
The Association adopts quality management systems and practices that optimise outcomes for service participants.

Service Recipient Training and Support
The employment opportunities of each person with a disability are optimized by effective, relevant training and support.

Complaints and Disputes
Each client is encouraged to raise and have resolved without fear of retribution any complaints or disputes he or she may have regarding the Association or the service.

1.2 To ensure that policy responsibilities, authorities and relationships of the Association organisation are established, reviewed and maintained (AS/NZS ISO 9001:2000).

2. SCOPE
This policy only applies to our databases and files and does not cover any State, Territory or Commonwealth Government database or file.

3. REFERENCES
Grievance, Problems & Corrective Preventive Action (QP08)
Document & Data Control (QP09)
Access and Equity (QP23)
Client selection, enrolment and induction (QP24)
Dissemination of Information (QP16)
Advertising and Marketing (QP33)
Page 1 of 5 Pages
QP12 Revision Date 4 March 2003

4 POLICY
4.1 Personal Information collected by isaSKILLS in order to provide training, assessment and employment services we need to collect personal information upon a client enrolling in a course/qualification to be provided by isaSKILLS. This information is required to be reported to state/territory registering bodies under the requirements of the Australian Vocational Education and Training Management Information Statistical System (AVETMISS). Information collected is as follows:

1. Name;
2. Address;
3. Contact details (telephone);
4. Date of Birth;
5. Gender;
6. Country of birth;
7. Citizenship;
8. Whether Aboriginal or Torres Strait Islander;
9. Language spoken at home;
10. Disability information;
11. Education details;
12. Previous qualifications; and,
13. Employment status.

isaSKILLS only collects personal information by fair and lawful means and not in an unreasonably intrusive manner.

The enrolment form (MISA 52) completed by clients contains a disclaimer outlining why the personal information is collected and how it is used and clients are required to sign the disclaimer as their agreement to the use of their personal information.

4.2 Sources of Personal Information Collected
isaSKILLS collects personal information directly from each client at enrolment.

isaSKILLS does not collect personal information from any other source.

4.3 Advice provided to clients.
At the time isaSKILLS collects personal information we will take reasonable steps to ensure that clients are made aware of:

• isaSKILLS identity and how to contact us;
• The client's rights with regard to accessing their personal information;
• The purpose for which the personal information was collected;
• To whom we disclose personal information to;

QP12 Revision Date 4 March 2003

• Any law that requires us to collect particular personal information; and
• The main consequences, if any, for the client if they do not provide all or part of the information we require.

4.4 Use and Disclosure
Mt Isa Skills Association Inc will use its best efforts to ensure that the information provided to us remains private and is used only for the purposes the client agree to.

isaSKILLS will not reveal, disclose, sell, distribute, rent, license, share or pass personal information on to a third party, other than those that we have a binding agreement with ensuring that the third party affords the personal information similar levels of protection as we do.

In order to provide clients with training and assessment services, we are required to disclose personal information to third parties such as:

1. State/Territory Registering Bodies; and,
2. National Centre for Vocational Education Research

For the purposes of AVETMISS reporting and claiming public funds for the delivery of training and assessment services under contracts such as User Choice and Apprenticeship and Traineeship Training Programs.

Further, isaSKILLS may use and disclose personal information to provide training and assessment services specified to the client at the point of collection or for another purpose if:

1. The client would reasonably expect us to disclose it for that purpose;
2. That purpose is related to the purpose specified to the client at the time of collection.
3. isaSKILLS reasonably believes that the use is necessary to lessen or prevent a serious and imminent threat to an individual's life or health;
4. isaSKILLS has reason to suspect that unlawful activity has been, or is being engaged in, and uses the information as part of its investigation, or in reporting its concerns to the relevant authority;
5. The use and disclosure is specifically authorised by law; or
6. The use and disclosure is reasonably necessary for the enforcement of the criminal law, a law imposing a pecuniary penalty, or for the protection of the public revenue.

isaSKILLS does not use or disclose personal information for the purposes of direct marketing unrelated products or services.

4.5 Data Quality
isaSKILLS will take reasonable steps to ensure that personal information is accurate, complete and up-to-date. Clients are encouraged to help us keep their personal information accurate, complete and up-to-date by contacting our delivery site or this organisation and informing us of any changes to details.

4.6 Data Security
isaSKILLS are committed to protecting the privacy of personal information. We take reasonable steps to protect personal information from misuse, loss and from unauthorised access, modification or disclosure. We ensure this by having such security measures as:

1. Individual password access to systems and databases
2. Encrypted electronic databases
3. Secure file cabinets

We will also take reasonable steps to destroy or permanently de-identify personal information if it is no longer required for any purpose.

4.7 Access and Correction
Clients are provided with the opportunity to access the personal information we hold on them and where appropriate, may be able to correct that information if they determine that it is incorrect.

4.8 Identifiers
isaSKILLS will not adopt as its own identifier an identifier that has been assigned by a government agency.

Where practicable isaSKILLS will not use or disclose an identifier assigned to an individual by a government agency.

4.9 Resolving Privacy Concerns
Clients are able to raise any concerns they may have regarding our personal information handling practices by either discussing concerns with our delivery site or by calling isaSKILLS direct.

4.10 Use of the Internet
isaSKILLS uses the World Wide Web in order to transmit client personal information details to state and territory registering bodies.

All information transmitted by delivery sites to Mt Isa Skills Association Inc is encrypted.

Security of data transmitted to state and territory registering bodies is managed by these bodies.

isaSKILLS has taken all reasonable steps to protect personal information security when using the internet but is aware that no transmission of information by email or to a registering body website is ever totally secure.