NAATI is committed to protecting the privacy of the personal information we collect. Personal information collected by us is governed by the Privacy Act 1988 (Cth) (“the Act”) and associated legislation.
We adhere to the Australian Privacy Principles (“APPs”) contained within the Act which regulate how organisations may collect, use, disclose and store personal information and how individuals may access, and correct personal information held about them.
Where applicable, we also adhere to the Privacy Act 2020 (New Zealand) (“NZ Act”) and the information privacy principles contained within (“NZ IPPs”).
By using our products or services, visiting our website or giving us your personal information, you agree to your information being collected, stored, used and disclosed as set out in our Privacy Policy.
Under the Act:
By providing your personal information to us, you consent to its use, storage and disposal as described in this policy.
We only collect information that is reasonably necessary for our functions or activities which are listed under Use and Disclosure of Personal Information below. This may include:
We do not collect sensitive information unless the individual has consented to the collection of the information (consent is provided by filling in a form or otherwise disclosing that information to us by other means) and the information is reasonably necessary for NAATI’s functions or activities, or the collection is required or permitted by law.
We only collect personal information by fair and lawful means. Where possible, we collect personal information directly from the person to whom it relates with their consent, including through correspondence, complaints, service provision/employment documentation, certification and other applications, test sessions and surveys.
We may also collect personal information through:
Sometimes we collect personal information about an individual from a third party or a publicly available source, but only if it would be unreasonable or impracticable to collect the personal information from the individual.
If you provide personal information about someone other than yourself, you are agreeing that you have that person’s consent to provide the information for the purpose for which you provide it to us. You also agree that you have told the person about this policy and where to find it.
The NAATI website and associated sites such as the myNAATI portal use cookies to accurately determine how many people visit the sites, and to support customers with reducing the number of times they are asked to accept the terms and conditions or log in. Cookies do not give NAATI the ability to view or access your personal information. When you click on a link to an external party website, you will be leaving the NAATI website and NAATI is not responsible for the IT security and privacy measures of those external websites.
If you do not provide us with your personal information, we may not be able to supply our services to you, employ you or otherwise deal with you. We will inform you of the reason your personal information is required to complete your interaction or transaction. Where lawful and practicable, we will give you the option of interacting with us anonymously or using a pseudonym.
We collect personal information for the following purposes:
We will only use an individual’s personal information for the purpose for which it was collected, with the individual’s consent, or if required or permitted by law.
Any direct marketing communications will advise recipients how they can opt out of receiving such marketing-related communications.
NAATI may disclose personal information in the following ways:
Except as outlined above, we won’t disclose personal information without the individual’s consent.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification and disclosure. Such steps include:
NAATI stores personal information of applicants and certified practitioners in secure encrypted digital storage and databases.
NAATI keeps personal information for as long as the information is required for the purpose for which it was collected and in line with any relevant legislation.
Where NAATI no longer requires your personal information, including where we are no longer required by law to keep records relating to you, we will take reasonable steps to ensure that it is destroyed or de‑identified.
If we receive personal information that we have not requested, and we determine that we could not have lawfully collected that information under the APPs or NZ IPPs had we asked for it, we will destroy or de‑identify the information if it is lawful and reasonable to do so.
NAATI will comply with the notification and other requirements of the Act or the NZ Act where your personal information held by us has been inadvertently lost, disclosed or improperly accessed and that loss, disclosure or access may result in serious harm to you. NAATI will follow the procedures in its Data Breach Management Procedures.
Individuals who consider that a breach of privacy in relation to personal information held by NAATI has occurred should advise NAATI in writing by email to info@naati.com.au in accordance with our Complaints Policy.
If you require further information about privacy protection, or if you are not satisfied with our response to your concerns, you can contact the Office of the Australian Information Commissioner or New Zealand Office of the Privacy Commissioner, depending on where the privacy concern has taken place.
Under the Act (or where relevant, the NZ Act), individuals may generally have access to personal information held about them.
NAATI does not provide applicants access to test materials at any time.
NAATI test candidates and practitioners can view and update their personal information at any time using the myNAATI portal.
For individuals who cannot view or update their personal information using the myNAATI portal, alternative arrangements can be made upon request by writing to info@naati.com.au. Requests may take up to ten business days to process and proof of identification will be required.
If an individual requests access to the personal information we hold about them, or requests that we amend that personal information, we will provide the individual access unless we consider that there is a sound reason under the Act, or other relevant law to withhold the information. If we deny you access to the information, we will notify you of the basis for this decision.
NAATI test candidates and practitioners can view and update their personal information at any time using the myNAATI portal.
An individual who believes that personal information held by NAATI is incorrect must notify NAATI in writing of the relevant corrections. Requests for changes to such details as personal identity, name or qualifications must be made in writing to info@naati.com.au and accompanied by documentary evidence in support of the request.
If we do not agree with the corrections you have requested (for example, because we consider that the information is already accurate, up‑to‑date, complete, relevant and not misleading), we are not required to make the corrections and we will advise you in writing of this decision.
This policy will be reviewed for effectiveness and update by management and the Audit and Risk Management Committee in line with NAATI’s Schedule of Policies.
An individual’s continued use of our website, products or services, or the provision of further personal information to us after this Privacy Policy has been revised, constitutes the individual’s acceptance of the revised policy.
This policy was approved by the Board on 27 August 2021.