Privacy & Confidentiality Policy & Procedure

(v3.0)

Updated June 2025

Policy Statement:
ISM protects personal information of learners and staff in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Purpose:
To ensure confidentiality and appropriate handling of sensitive data.

Policy:

• Personal information is collected, stored and disclosed lawfully and securely.
• Learners have access to their personal records upon request.
• ISM has procedures in place to manage suspected data breaches.

Procedure:

• Privacy Policy available on website and communicated to clients.
• Consent obtained for collection/use of personal information.
• Access to personal data restricted to authorised personnel.
• Requests to access personal records processed within 10 business days.
• Suspected data breaches reported immediately to CEO and handled in line with Data Breach Response Plan.