Privacy Collection Notice (Procurement Activities)

The Australian Prudential Regulation Authority (APRA) collects personal information, which may include sensitive information, as part of its procurement activities. This information is collected by APRA by various methods, including via BuyICT (an online platform for government buyers), and email, and third-party providers.

This Privacy Collection Notice contains information about how APRA handles the personal information that is collected as part of APRA’s procurement activities. For additional information about APRA’s general personal information handling practices, please refer to the Privacy Policy.

The Privacy Collection Notice contains information about how APRA handles personal information collected as part of APRA’s procurement activities and sets out how such personal information can be accessed and corrected. This Privacy Collection Notice also contains information on the storage and security of such personal information and how to contact APRA, including how to make a complaint if it is believed that APRA may have interfered with an individual’s privacy.

Personal information which is collected by APRA for the purposes of its procurement activities

The personal information which APRA collects for the purposes of procurement activities includes:

  • Personal identification information including full names and date of birth 
  • Contact information including phone numbers, addresses and email addresses 
  • Current and former employment information including an individual’s position title, name of their employer/agency, and salary information 
  • Information from referees 
  • Information from the results of probity checks 
  • ABN and account information to facilitate payments 
  • Information on any potential conflicts of interest

We will only use your information for the purpose of assessing your submission within APRA for the tender/role that you have applied for and will retain your information for consideration in respect to future tenders/opportunities with APRA that you may be suitable for.

If you choose to provide optional information about your gender, ethnicity, race, sexual orientation or disability status, APRA will use it to perform functions associated with APRA’s Inclusion and Diversity Strategy.

If you are applying to APRA as a contractor and are successful, your information will be transferred across to our internal systems including HR, Payroll, IT and Security.

How APRA collects personal information for the purposes of its procurement activities

APRA may collect personal information for the purposes of its procurement activities from you, your employer or from other sources, such as other government entities, security vetting agencies, recruitment agencies, referees, third parties that provide identity checking and educational institutions.

Why APRA collects, uses and discloses personal information for the purposes of its procurement activities

APRA collects, and may use or disclose, the types of personal information described in this Privacy Collection Notice for the purposes of its procurement activities and otherwise for the purposes set out in APRA’s Privacy Policy, in each case in accordance with this Privacy Collection Notice, the Privacy Policy and applicable laws.

This may include:

  • Handling and responding to queries and requests received in relation to APRA’s procurement activities
  • Developing reporting requirements
  • Publishing aggregated data

Disclosure of personal information collected for the purposes of APRA's procurement activities to other entities, bodies or persons

APRA may disclose personal information to other Australian or overseas entities, bodies or persons, including to:

  • Service providers who are engaged by APRA to assist it with its activities and functions
  • APRA staff members and agents
  • Other government agencies or departments including the Australian Government Security Vetting Agency (AGSVA) and Home Affairs
  • Austender where APRA is required to publish information on all contracts awarded

APRA may also disclose personal information to other Australian or overseas entities, bodies or persons in certain circumstances, including where:

  • The relevant individual has consented to the disclosure 
  • The relevant individual would reasonably expect APRA to disclose the personal information 
  • APRA is required or authorised to disclose the information under an Australian law 

Access to and correction of personal information collected for the purposes of APRA's procurement activities

A person is entitled to access any of their personal information which is held by APRA and to seek the correction of that information to ensure it is accurate, up-to-date, complete, relevant and not misleading, subject to some conditions and exceptions imposed by law.

APRA’s Privacy Policy contains information about how an individual’s personal information can be accessed and corrected.

Storage and security of personal information collected for the purposes of APRA's procurement activities

APRA stores personal information in compliance with its obligations under the Commonwealth Protective Security Policy Framework.

The information is securely stored to prevent any loss, interference or misuse or unauthorised access, modification or disclosure. The reasonable steps APRA takes to ensure it complies with APP 11 to secure personal information include password protection and access privileges, audit logs and APRA policies relating to information management and acceptable use of information, as well as information technology.

Information collected by APRA to which the Archives Act 1983 applies will be dealt with in accordance with the provisions of that Act. 

Security clearances for contractors

All APRA staff, including contractors and contingent workers, require a security clearance to access Australian Government security classified resources (people, information and assets). Your Procurement Partner will advise you of the security clearance level required for your contract. 

By applying for a contract role with APRA, you provide informed consent for the collection, use and disclosure of your personal information as outlined in APRA’s Privacy Collection Notice explaining how this information will be handled. Your informed consent will cover how APRA:

  • Collects your personal and sensitive information from other entities or private organisations
  • Shares such information with other entities to assess your initial or ongoing suitability for access to official resources
  • Uses this information to determine your ongoing suitability for access to Australian Government resources.

Contact and complaints

Privacy Officer
Australian Prudential Regulation Authority
GPO Box 9836
Sydney NSW 2001

For information on how to make a complaint and how APRA will deal with such a complaint where APRA is believed to have breached the APPs or any applicable registered APP code, please refer to APRA’s Privacy Policy.

Footnotes