Privacy Policy
Introduction
Queensland Treasury Corporation (QTC) is committed to protecting the privacy of personal information that it collects and uses. This Privacy Policy details the type of personal information QTC collects, how QTC collects the information, how QTC will securely manage and use the information, and the circumstances under which it may be disclosed by QTC.
QTC must comply with the Information Privacy Act 2009 (IPA) as amended by the Information Privacy and Other Legislation Amendment Act 2023 (IPOLA Act). In addition, the IPA sets out the Queensland Privacy Principles (QPPs) that QTC must comply with, together with the following obligations in relation to:
- how personal information is collected
- how individuals can access and amend their personal information
- when and how personal information may be transferred out of Australia
- how contracted service providers are to deal with personal information they are given
- the roles of the Information, Privacy and Right to Information Commissioners
- how privacy complaints are to be handled
- the protections and offences under the IPA, and
- the requirement to notify affected individuals and the Information Commissioner of eligible data breaches.
QTC is a tax file number (TFN) recipient for the purposes of the Privacy Act 1988 (Cth) (Privacy Act). The Privacy Act only applies to QTC in relation to TFNs (section 17 and 18).
Under the IPA personal information is defined as “information or an opinion about an identified individual or an individual who is reasonably identifiable from the information or opinion —
- (a) whether the information opinion is true or not; and
- (b) whether the information or opinion is recorded in a material form or not.”
QTC has a responsibility to protect the personal information it collects and holds. QTC maintains physical, electronic and procedural safeguards that comply with applicable legal standards to secure such information from unauthorised access, use, disclosure, alteration, and destruction.
Personal information that is kept by QTC is accessible only to authorised QTC staff who are appropriately trained and bound by confidentiality obligations to QTC when performing their duties, and to the third parties QTC discloses that information to as set out in this document.
The IPA is not intended to prevent access to, or amendment of, documents under other laws or administrative schemes. In some circumstances, QTC’s obligations to provide access to your personal information are suspended where QTC is required or authorised to refuse access under any state law, such as where a police investigation requires secrecy to be maintained.
In addition, QTC is exempt from the Right to Information Act 2009 (RTI Act) in relation to its borrowing, liability and asset management related functions.
When managing the Register of Cooperative Housing Societies, the collection and verification of records and rights of access to that information is regulated by the Financial Intermediaries Act 1996 (FI Act) and the Financial Intermediaries Regulation 2018 (FI Regulation). These legislative provisions displace elements of QPP12.
How does QTC collect personal information?
QTC collects personal information in the following ways:
- directly from you (e.g. when you apply for a job with QTC)
- from a representative for you (e.g. a lawyer representing you or someone authorised to act for you)
- from other government departments or statutory bodies
- from third parties who are entitled to disclose that information to QTC
- from publicly available sources
What personal information does QTC collect and why?
Employee records
QTC collects, keeps and uses records about its employees to enable it to carry out customary human resources functions, to communicate with employees for business continuity planning and to manage conflicts of personal interests with employment duties. The information that QTC collects, keeps and uses may include:
- names
- contact details
- curriculum vitae (CV) details (see section on job applicants below)
- bank account details
- tax file numbers
- photographs
- salaries and benefits
- gifts given and received
- superannuation details
- directorships and other interests
- systems access and usage (including email usage)
- physical security histories, and
- performance history, opinions and appraisals.
QTC may collect biometric information (such as facial recognition data or fingerprints) for accessing ICT equipment, but only with the employee’s explicit consent, in accordance with applicable privacy laws. This information is sensitive information under the IPA and is subject to additional protections.
QTC collects, keeps and uses information about job applicants for the purposes of considering their suitability as employees of QTC. Information collected includes CV details such as:
- previous work histories
- qualifications
- opinions
- references, and
- referee contact details.
This information may be provided to employee screening agencies for the purposes of employment screening.
QTC collects personal information about past, present and potential contractors, secondees and external service providers (or their employees). This information is collected, held and used to select, manage, monitor and pay contractors, secondees or consultants, and to ensure that they comply with QTC’s policies and procedures. It is also used to manage conflicts between personal interests and performance of duties. This information may include:
names
- personal interests, directorships, and other interests held by the individual
- contact details
- gifts and hospitality given and received
- experience and qualifications
- professional memberships
- authorised signatory lists
- bank account details
- assessments and opinions regarding performance, and
- Australian Business Numbers (ABN) and other business related information.
QTC collects, keeps and uses information about the members of QTC’s Capital Markets Board, and QTC’s related corporations for the purposes of preparing annual reports and returns, administering remuneration (if any) to directors, providing administrative assistance, and managing conflicts of interests with members’ duties. The information that QTC collects may include:
names
- contact details
- date of birth
- details of other directorships and personal interests held
- professional memberships
- bank account details
- tax file numbers, and
- superannuation and employment elections.
Some of this information may be included in the annual reports and returns of QTC or of the relevant entity where this is required by law, accounting standards or is standard business practice. QTC also assists a number of organisations with administrative and company secretarial services. QTC may collect and use similar types of information about officers and employees of these companies for the purposes of providing these services.
QTC collects, keeps and uses personal information in connection with the holders of Queensland Bonds in order to manage those Bonds and to satisfy its obligations under the Queensland Treasury Corporation Act 1988. This personal information may include:
- tax file numbers
- names
- contact information
- amounts of investments
- bank account details
- value of stock owned by holders, and
- the interest rate applying to, and the maturity date of the stock held.
Some of these details must be entered by QTC on the Register of Inscribed Stock. A holder of Queensland Bonds is entitled to inspect their own ledger in the Register by paying the prescribed fee. QTC presently outsources the maintenance of the Register to MUFG Corporate Markets. QTC may disclose details of investments to the Department of Home Affairs where an investment in Queensland Bonds has been made to satisfy designated investment requirements for the purposes of migration applications made to the Department.
QTC acts as the delegate of the Registrar under the FI Its functions include the maintenance of the Register of Cooperative Housing Societies. QTC may collect, keep and use information about members and directors of the Cooperative Housing Societies for the purposes of carrying out its prudential duties as delegate of the Registrar under the FI Act. Personal information kept may include:
- names
- contact details
- property details and values
- mortgage details
- information in relation to credit worthiness
- account numbers
- loan balances and arrears
- complaints from members, and
- other directorships and interests (in respect of directors only).
In its capacity as delegate of the Registrar, QTC holds certain records relating to the Cooperative Housing Societies. Upon request, these records are available to the public for inspection upon payment of a prescribed fee pursuant to section 22 of the FI Act and Schedule 2 of the FI Regulation.
QTC collects personal information about its clients, their employees and their office holders. The information collected by QTC may include:
- names and contact details
- position within an organisation
- levels of authorisation
- signature
- attendance at QTC sponsored seminars/conferences, and
- gifts and hospitality given and received.
This information is used for day-to-day work contact and management of services for the client, to provide information to the individuals about other services provided by QTC and to organise general marketing and client relationship activities with the individuals concerned.
QTC collects personal information from counterparties relating to financial markets transactions. QTC uses this information to verify transactions and enable QTC to meet its obligations under agreements and the rules of the Australian Financial Markets Association, which require that all deals be on the record and able to be independently verified.
QTC collects personal information about Boost to Buy Home Ownership Scheme applicants and participants. The collection of personal information relating to participants in the Scheme may include (but not limited to):
- names
- contact details including phone number and email address
- residential address
- income details and tax file number
- information in relation to credit worthiness
- property details and values
- loan balances and arrears
- details of complaints and feedback made by participants
QTC collects and uses this information:
- to assist in providing information about the Scheme;
- to assess applicants’ eligibility for participation in the Scheme;
- to enable QTC to provide services to participants in relation to the Scheme;
- to enable QTC and its agents to manage accounts and perform other administrative and operational tasks in relation to the Scheme;
- to consider any concerns or complaints participants raise against QTC and its agents and to manage any legal action involving QTC and its agents;
- to identify, prevent or investigate any suspected or actual fraud, unlawful activity or misconduct;
- to identify the participant or establish the participant’s tax status under any Australian or foreign legislation, regulation or treaty or pursuant to an agreement with any tax authority;
- with the participant’s consent, for example, if the participant agrees to be involved in publicity in relation to the Scheme;
- as required by relevant laws, regulations, codes of practice and external payment systems.
Disclosure
QTC will disclose personal information for the purpose it was collected as set out in this document. From time to time, QTC may need to disclose some personal information to other organisations or individuals outside QTC. Examples of external disclosures include:
- information about Queensland Bonds to the Commonwealth Department of Home Affairs about investments that are designated for the purposes of visa applications and other regulatory bodies and government agencies including, for example, the Australian Taxation Office and AUSTRAC (the regulator for anti-money laundering and counter-terrorism financing), or a law enforcement agency
- information from the Register of Cooperative Housing Societies to persons searching the register in accordance with the FI Act
- external contractors, including professional advisers as is reasonably required for QTC to perform its functions
- TFNs and ABNs to taxation authorities, and
- filing statutory returns and notices to the Australian Securities and Investments Commission (ASIC) for subsidiary organisations under the Corporations Act 2001 and publication of information about directors in annual reports pursuant to the Financial Accountability Act 2009.
In addition to the general disclosures above, when QTC collects personal information about Boost to Buy Home Ownership Scheme (Scheme) applicants and participants, QTC may disclose that information to the following third parties, in each case for the purposes for which QTC collected the information (set out in section 3.9 of this document):
- any lender approved by QTC to provide loans to participants in relation to the Scheme
- Titles Office Queensland
- the Residential Tenancies Authority
- any agent or services provider appointed or engaged by QTC to assist QTC to administer the Scheme and any trustee involved in the Scheme
- any employee, officer, contractor or professional adviser of QTC
- an organisation that assists QTC to identify, prevent or investigate fraud, unlawful activity or misconduct
- regulatory bodies, government agencies, law enforcement bodies and courts
- other parties QTC is authorised or required by Law to disclose information to
- a potential assignee, novatee or transferee of QTC, an approved lender and their advisers and contractors
- any other entity to enable QTC to exercise its rights or enforce obligations of any other party, in each case in relation to any Scheme document.
QTC may also disclose your personal information which relates to the provision of the Scheme as may be required:
- to the Queensland Treasury, any other “government entity” as defined in the Government Owned Corporations Act 1993 (Qld) or Ministers of the State of Queensland in connection with the Scheme
- by the office of the Auditor General appointed under the Auditor-General Act 2009 (Qld) or the ombudsman appointed under the Ombudsman Act 2001 (Qld)
- to comply with law, including the Right to Information Act 2009 (Qld), court order or other legal process or authorised by court order
- to the Crime and Corruption Commission
- to the Office of the Queensland Information Commissioner for the purpose of satisfying its statutory duties.
QTC is committed to protecting personal information and responding promptly to any privacy or data breaches. QTC’s Data Breach Policy outlines the steps we take to identify, access, contact, and notify affected individuals and the Information Commissioner in the event of an eligible data breach, in accordance with the IPA.
If a data breach is likely to result in serious harm, QTC will notify affected individuals as soon as practicable and provide guidance on how they can protect themselves. For more information, please refer to the Data Breach Policy.
Retention
QTC keeps information in accordance with the requirements of the Public Records Act 2002 and any relevant Information Standards issued by the State of Queensland. QTC may keep its records in electronic or hard copy format (or both) and will only destroy records that are public records as dictated by the Public Records Act 2002.
Access to, and amendment of, personal information by individuals
QPP 12 gives individuals a right of access to QTC records of personal information about them, unless QTC is required or authorised to refuse access under State law. QPP 13 also gives individuals the right to request correction of their personal information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading, and they are entitled to access it.
Applications to access or correct personal information QTC holds about you should be made to the QTC Compliance Officer.
Any request should be in writing emailed to compliance@qtc.com.au or sent to the following address:
Compliance Officer
Queensland Treasury Corporation
GPO Box 1096
Brisbane Qld 4001
Phone: +61 7 3842 4600
Access to personal information in the Inscribed Stock Register (Queensland Bonds) and to the Register of Cooperative Housing Societies is regulated by specific legislation.
If you do not agree with the decision of the QTC Compliance Officer about your application, you can apply for internal or external review, in accordance with the details below.
Resolving your concerns
If you have any questions or concerns about your privacy or our use or disclosure of your personal information, please raise them with your usual contact at QTC or the QTC Compliance Officer at the address or email address above. QTC may ask you to put your concern in writing.
QTC will investigate your complaint and advise you of the outcome (or that QTC requires additional time to consider the complaint) within 45 business days.
If you are not satisfied by QTC’s response to your complaint, you may lodge a complaint to the Information Commissioner by completing the form at https://www.oic.qld.gov.au/about/privacy/make-a-privacy-complaint-2. Chapter 5 of the IPA outlines the requirements for making a complaint, the process for how it will be managed, and the remedies that the Queensland Civil and Administrative Tribunal may order if the complaint is substantiated.