Data, Privacy & Legislative Framework

Legislative Framework

RTOpacks operates under the following Australian legislation:

• Privacy Act 1988 (Cth) — including the Australian Privacy Principles (APPs)
• Australian Consumer Law — Schedule 2, Competition and Consumer Act 2010
• Copyright Act 1968 (Cth) — National Register data published under CC BY 4.0
• National Vocational Education and Training Regulator Act 2011 (NVR Act)
• Education Services for Overseas Students Act 2000 (ESOS Act) — where applicable

Privacy Act Reform

The platform is architected to meet the obligations of the incoming Privacy Act reforms, not only current requirements. Voluntary uplift — the same principle that governs our RTO access gate.

Data Residency

All processing occurs within Australian borders. The engine operates on Cloudflare infrastructure in AU-Sydney and AU-Melbourne. Processing domicile is recorded in every SOP-ID.

Australian Privacy Principles

RTOpacks collects only the personal information necessary to deliver the service. Data is not sold to third parties. Data is not shared with subprocessors beyond what is necessary to deliver the service.

No AI Training on Customer Data

Customer output — training materials, assessment tools, observation checklists, contextualised resources — is never used to train, fine-tune, or improve the RTOpacks engine or any underlying model. What you build is yours. It stays yours.

Small Business Voluntary Uplift

RTOpacks operates under the Australian Privacy Principles regardless of turnover threshold. The small business exemption under the Privacy Act is not invoked. Voluntary uplift — because the RTOs we serve operate under the full APPs, and our platform should too.