What is public by design
The register is public. For each member it shows the organisation's legal name, business number, country, website, status, dates, results per standard, brands and activity titles. It also shows the name and qualifications of the reviewer who signed the record, and the names of CPD Council's CEO, chief reviewer and board. These people agree to publication as part of their role.
What we collect and why
- Applications. Contact details, procedures, the names and qualifications of authors and reviewers, sample activities and certificates. Used to carry out verification. Author and reviewer names are not published; only the fact of their qualification is.
- Sample certificates. May contain a learner's name. We ask applicants to redact it. If not redacted, we redact it on receipt.
- Reports and complaints. What you tell us and, if you give it, your email. Used to investigate and to tell you the outcome. Your identity is not published and is not given to the provider without your consent.
- Certificate checks. The number entered and the time. Used to count checks per member. Not linked to who checked.
- Website. Standard server logs. We do not use advertising trackers. Analytics, if added, are aggregate and cookie-free.
Where it is held
On infrastructure in Australia or with providers that may store data outside Australia and New Zealand. We publish the list of providers here when the live stack is confirmed: hosting, email, storage providers.
How long
Application records for the life of the membership plus seven years. Reports and complaints for seven years. Logs for 90 days.
Access and correction
Ask at hello@cpdcouncil.com.au. We respond within 30 days. If you think we have breached your privacy, tell us first; if unresolved you may complain to the Office of the Australian Information Commissioner or the Office of the Privacy Commissioner (New Zealand).