Privacy Policy
Introduction
Queensland Treasury Corporation (QTC) is committed to protecting the privacy of personal information that it collects and uses. This Privacy Policy details the type of personal information QTC collects, how QTC will securely manage and use the information, and the circumstances under which it may be disclosed by QTC.
Queensland public sector privacy
QTC must comply with the Information Privacy Act 2009 (IPA) as amended by the Information Privacy and Other Legislation Amendment Act 2023 (IPOLA Act). In addition, the IPA sets out the Queensland Privacy Principles (QPPs) that QTC must comply with, together with the following obligations in relation to:
- how personal information is collected
- how individuals can access and amend their personal information
- when and how personal information may be transferred out of Australia
- how contracted service providers are to deal with personal information they are given
- the roles of the Information, Privacy and Right to Information Commissioners
- how privacy complaints are to be handled
- the protections and offences under the IPA, and
- the requirement to notify affected individuals and the Information Commissioner of eligible data breaches.
QTC is a tax file number (TFN) recipient for the purposes of the Privacy Act 1988 (Cth) (Privacy Act). The Privacy Act only applies to QTC in relation to TFNs (section 17 and 18).
Personal information
Under the IPA personal information is defined as “information or an opinion about an identified individual or an individual who is reasonably identifiable from the information or opinion —
(a) whether the information opinion is true or not; and
(b) whether the information or opinion is recorded in a material form or not.”
Protecting personal information
QTC has a responsibility to protect the privacy and confidentiality of personal information it collects and holds. QTC maintains physical, electronic and procedural safeguards that comply with applicable legal standards to secure such information from unauthorised access, use, disclosure, alteration, and destruction.
Personal information that is kept by QTC is accessible only to authorised QTC staff who are appropriately trained and bound by confidentiality obligations to QTC when performing their duties.
Suspension of the right to access personal information
The IPA is not intended to prevent access to, or amendment of, documents under other laws or administrative schemes. In some circumstances, QTC’s obligations to provide access are suspended where QTC is required or authorised to refuse access under any state law, such as where a police investigation requires secrecy to be maintained.
In addition, QTC is exempt from the Right to Information Act 2009 (RTI Act) in relation to its borrowing, liability and asset management related functions.
When managing the Register of Cooperative Housing Societies, the collection and verification of records and rights of access to that information is regulated by the Financial Intermediaries Act 1996 (FI Act) and the Financial Intermediaries Regulation 2018 (FI Regulation). These legislative provisions displace elements of QPP12.
What personal information does QTC collect, store and use?
QTC collects, keeps and uses records about its employees to enable it to carry out customary human resources functions, to communicate with employees for business continuity planning and to manage conflicts of personal interests with employment duties. The information that QTC collects, keeps and uses may include:
- names
- contact details
- curriculum vitae (CV) details (see section on job applicants below)
- bank account details
- tax file numbers
- photographs
- salaries and benefits
- gifts given and received
- superannuation details
- directorships and other interests
- systems access and usage (including email usage)
- physical security histories, and
- performance history, opinions and appraisals.
QTC may collect biometric information (such as facial recognition data or fingerprints) for accessing ICT equipment, but only with the employee’s explicit consent, in accordance with applicable privacy laws. This information is treated as sensitive and is subject to additional protections.
QTC collects and keeps information about job applicants for the purposes of considering their suitability as employees of QTC. Information collected includes CV details such as:
- previous work histories
- qualifications
- opinions
- references, and
- referee contact details.
This information may be provided to employee screening agencies for the purposes of employment screening.
QTC collects personal information about past, present and potential contractors, secondees and external service providers (or their employees). This information is collected and used to select, manage, monitor and pay contractors, secondees or consultants, and to ensure that they comply with QTC’s policies and procedures. It is also used to manage conflicts between personal interests and performance of duties. This information may include:
- names
- personal interests, directorships, and other interests held by the individual
- contact details
- gifts and hospitality given and received
- experience and qualifications
- professional memberships
- authorised signatory lists
- bank account details
- assessments and opinions regarding performance, and
- Australian Business Numbers (ABN) and other business related information.
QTC collects and keeps information about the members of QTC’s Capital Markets Board, and QTC’s related corporations for the purposes of preparing annual reports and returns, administering remuneration (if any) to directors, providing administrative assistance, and managing conflicts of interests with members’ duties. The information that QTC collects may include:
- names
- contact details
- date of birth
- details of other directorships and personal interests held
- professional memberships
- bank account details
- tax file numbers, and
- superannuation and employment elections.
Some of this information may be included in the annual reports and returns of QTC or of the relevant entity where this is required by law, accounting standards or is standard business practice.
QTC also assists a number of organisations with administrative and company secretarial services. QTC may collect and use similar types of information about officers and employees of these companies for the purposes of providing these services.
QTC collects, keeps and uses personal information in connection with the holders of Queensland Bonds in order to manage those Bonds and to satisfy its obligations under the Queensland Treasury Corporation Act 1988. This personal information may include:
- tax file numbers
- names
- contact information
- amounts of investments
- bank account details
- value of stock owned by holders, and
- the interest rate applying to, and the maturity date of the stock held.
Some of these details must be entered by QTC on the Register of Inscribed Stock. A holder of Queensland Bonds is entitled to inspect their own ledger in the Register by paying the prescribed fee. QTC presently outsources the maintenance of the Register to MUFG Corporate Markets. QTC may disclose details of investments to the Department of Home Affairs where an investment in Queensland Bonds has been made to satisfy designated investment requirements for the purposes of migration applications made to the Department.
QTC acts as the delegate of the Registrar under the FI Act. Its functions include the maintenance of the Register of Cooperative Housing Societies. QTC may collect, keep and use information about members and directors of the Cooperative Housing Societies for the purposes of carrying out its prudential duties as delegate of the Registrar under the FI Act. Personal information kept may include:
- names
- contact details
- property details and values
- mortgage details
- information in relation to credit worthiness
- account numbers
- loan balances and arrears
- complaints from members, and
- other directorships and interests (in respect of directors only).
In its capacity as delegate of the Registrar, QTC holds certain records relating to the Cooperative Housing Societies. Upon request, these records are available to the public for inspection upon payment of a prescribed fee pursuant to section 22 of the FI Act and Schedule 2 of the FI Regulation.
QTC collects personal information about its clients, their employees and their office holders. The information collected by QTC may include:
- names and contact details
- position within an organisation
- levels of authorisation
- signature
- attendance at QTC sponsored seminars/conferences, and
- gifts and hospitality given and received.
This information is used for day-to-day work contact and management of services for the client, to provide information to the individuals about other services provided by QTC and to organise general marketing and client relationship activities with the individuals concerned.
QTC collects personal information from counterparties relating to financial markets transactions so that transactions can be verified and QTC can meet its obligations under agreements and the rules of the Australian Financial Markets Association, which require that all deals be on the record and able to be independently verified.
Disclosure
From time to time, QTC may need to disclose some personal information to other organisations or individuals outside QTC. Examples of external disclosures include:
- information about Queensland Bonds to the Commonwealth Department of Home Affairs about investments that are designated for the purposes of visa applications and other regulatory bodies and government agencies including, for example, the Australian Taxation Office and AUSTRAC (the regulator for anti-money laundering and counter-terrorism financing), or a law enforcement agency
- information from the Register of Cooperative Housing Societies to persons searching the register in accordance with the FI Act
- external contractors, including professional advisers as is reasonably required for QTC to perform its functions
- TFNs and ABNs to taxation authorities, and
- filing statutory returns and notices to the Australian Securities and Investments Commission (ASIC) for subsidiary organisations under the Corporations Act 2001 and publication of information about directors in annual reports pursuant to the Financial Accountability Act 2009.
Data breach policy
QTC is committed to protecting personal information and responding promptly to any privacy or data breaches. QTC’s Data Breach Policy outlines the steps we take to identify, access, contact, and notify affected individuals and the Information Commissioner in the event of an eligible data breach, in accordance with the IPA.
If a data breach is likely to result in serious harm, QTC will notify affected individuals as soon as practicable and provide guidance on how they can protect themselves. For more information, please refer to the Data Breach Policy.
Retention
QTC keeps information in accordance with the requirements of the Public Records Act 2002 and any relevant Information Standards issued by the State of Queensland. QTC may keep its records in electronic or hard copy format (or both) and will only destroy records that are public records as dictated by the Public Records Act 2002.
Access to, and amendment of, personal information by individuals
QPP 12 gives individuals a right of access to QTC records of personal information about them, unless QTC is required or authorised to refuse access under State law. QPP 13 also gives individuals the right to request correction of their personal information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading, and they are entitled to access it.
Applications to access personal information should be made to the QTC Compliance Officer. You may also request to correct the personal information QTC holds about you to ensure it remains accurate, up to date and complete. Such applications should be made to the Compliance Officer.
The written request should be emailed or sent to the following address:
Compliance Officer
Queensland Treasury Corporation
GPO Box 1096
Brisbane Qld 4001
Phone: +61 7 3842 4600
compliance@qtc.com.au
Access to personal information in the Inscribed Stock Register (Queensland Bonds) and to the Register of Cooperative Housing Societies is regulated by specific legislation. If you do not agree with the decision of the QTC Compliance Officer about your application, you can apply for internal or external review, in accordance with the procedures set out in the IPA.
Resolving your concerns
If you have any questions or concerns about your privacy, please raise them with your usual contact at QTC or the QTC Compliance Officer. QTC may ask you to put your concern in writing, or you may exercise your appeal or complaint rights in respect of decisions that have been made.
Privacy complaints
If you believe that QTC has breached its privacy obligations, you may lodge a complaint to the Information Commissioner. The IPA outlines the requirements for making a complaint, the process for how it will be managed, and the remedies that the Queensland Civil and Administrative Tribunal may order if the complaint is substantiated.