This policy was last updated in July 2022.
The Tasmanian Building & Construction Industry Training Board trading as Keystone Tasmania is a body corporate established under the Building and Construction Industry Training Fund Act 1990 (Tas) (the Act). Throughout this policy we are referred to as Keystone Tasmania, We, Our or Us. We refer to an individual as You or Your.
Keystone Tasmania complies with the Personal Information Protection Principles (PIPPs) in the Personal Information Protection Act 2004 (Tas) (PIP Act) as a public authority, in addition to the Privacy Act 1988 (Cth) (Privacy Act) when it has legislative obligations (including the Notifiable Data Breach Scheme at least to the extent it holds tax file numbers for its employees) to do so.
This policy explains how We comply with the PlPPs and the Australian Privacy Principles (APPs) when collecting, using, disclosing, storing and destroying Your personal information. It also explains how You can access or correct personal information We hold about You and what to do if You think Your privacy has been interfered with.
What Personal Information Does this Policy Cover?
Personal Information means any information or opinion in any recorded format about an individual whose identity is apparent or is reasonably ascertainable from the information or opinion. In the PIP Act only, this includes any information or opinion about individuals who are alive or have not been dead for more than 25 years.
Basic personal information means the name, residential or postal address, date of birth and gender of an individual.
Collection of Information
Keystone Tasmania’s functions are specified in the Act.
Keystone Tasmania collects personal information in carrying out its functions under the Act, either directly from You or from other sources, including from publicly available sources, other parties and authorised third parties, where it is unreasonable or impractical to collect it from You directly, or where We have Your consent. The names, occupations and training details of employees are provided to Keystone Tasmania by organisations under Our training policies and funding procedures. Many businesses in the building and construction industry are operated as sole traders, and therefore individual personal information is provided to Keystone Tasmania by those sole traders.
Keystone Tasmania collects personal information about people undertaking building projects that involves the payment of the training levy under Part 3 of the Act, and any
other specific information about a person that may be required to enable Us to carry out Our functions under the Act.
Your consent or acknowledgement may be implied through conduct such as when:
▪ You speak to a staff member;
▪ You provide Us with personal information that We have not specifically requested; or
▪ We have provided You with the opportunity to choose (via opt in or opt out) and You've chosen accordingly.
We will take reasonable steps to ensure the personal information We use is accurate, up-to-date, complete and relevant, having regard to the reasons why it is being used.
Use and Disclosure of Personal Information
Keystone Tasmania employees are only provided with, or have access to, the information that is necessary for them to carry out their functions within Keystone Tasmania. Personal information will be used only for the purpose for which it was collected unless the use or disclosure is otherwise permitted under the PIP Act (e.g. where the purpose of the use or disclosure is related to the primary purpose of collection and You would reasonably expect Keystone Tasmania to use or disclose the information for that purpose). Otherwise, Your personal information will only be disclosed with Your consent or if it is required, or authorised, by law. Examples include where disclosure is necessary to lessen or prevent a serious threat to life, health, safety or welfare of an individual.
The PIP Act permits the disclosure of “basic personal information” to other public sector bodies where necessary for the efficient storage and use of information.
Some personal information that is collected by Keystone Tasmania may be used in research, statistical analysis, state or national reporting, awareness programs, public statements or training and for written submissions on policy matters, but not in a way which would identify the person/s to which it relates.
Security of Personal Information
Keystone Tasmania uses reasonable measures to protect the security of personal information it holds from misuse, loss, unauthorised access, modification or disclosure, including the physical security of Our premises and use of access level permissions and passwords to restrict access to electronic records.
Keystone destroys or permanently de-identifies personal information if it is no longer needed for any purpose, except where it is required to be kept in compliance with the Archives Act 1983 (Tas) or another Australian law.
Unique Identifier
Keystone Tasmania only assigns personal unique identifiers to individuals whom an application for training course subsidy funding relates to, for the purposes of facilitating the provision of funding and statistical analysis of Keystone Tasmania’s performance of its functions under the Act. All personal information is de-identified for the purposes of publishing any statistical analysis.
Anonymity
If You are making a general enquiry, it may not be necessary to identify yourself. If You want to obtain a service, identification may be necessary.
Access to and Correction of Information Collected
The PIP Act provides that You have a right to access and correct Your personal information that is held by Keystone Tasmania if it is incorrect, incomplete, out of date or misleading.
If You wish to access and/or correct Your personal information held by Keystone Tasmania, then You may do so, by putting Your request in writing and sending it to the Chief Executive Officer, the contact details of which are below. Usually Keystone Tasmania will need to verify your identity before providing access to Your personal information.
Keystone Tasmania will give You access to Your personal information, unless an exception in the PIPPs or APPs apply.
If Keystone Tasmania refuse You access to Your personal information, We will provide You with an explanation for that refusal. We will provide You with access to Your personal information or reasons for Our refusal with 20 working days of receipt of Your written request.
Some reasons for refusing access to personal information include:
▪ if access is contrary to law;
▪ if access would pose a serious threat to health or safety;
▪ if access would prejudice law enforcement or crime prevention activities.
Overseas Disclosure
Some of your personal information may be disclosed, processed or stored overseas by us or by our third party service providers.
Where personal information is disclosed, processed or stored overseas, we take reasonable steps to ensure that overseas recipients comply with the Privacy Act, the PIP Act and any other applicable laws.
Complaints About Personal Information
If You would like further information about how we manage personal information or wish to update your personal information details or make a complaint about the handling of Your personal information please contact Us using the following contact details:
Email: email@keystone.com.au
Post: GPO Box 312, Hobart TAS 7001
If You are not satisfied with the handling or outcome of Keystone Tasmania’s response, you can lodge a complaint with the Ombudsman. The Ombudsman's Office can be contacted on 1800 001 170, by email at ombudsman@ombudsman.tas.gov.au and by letter to GPO Box 960, Hobart TAS 7001
If your complaint relates to a notifiable data breach for employee tax file numbers or there is a Commonwealth link, you can refer your complaint to the Office of the Australian Information Commissioner:
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Post: GPO Box 5218 SYDNEY NSW 2001
website: http://www.oaic.gov.au
Important Note
This policy may change from time to time. Keystone Tasmania reviews its policies and procedures to keep up to date with changes in the law, technology and best practice. Changes made to this policy will be updated on Our website.