(c) The Chief Executive Officer of the MTC shall have overall responsibility for the compliance obligations of the ERM and for the effective management of all risks that may arise from non-compliance and for providing formal assurances to the MTC Board of Directors as to the level of compliance of the ERM. (a) The MTC Risk and Audit Manager is responsible for reviewing and updating this Policy and is responsible for obtaining legal advice as necessary to maintain this Policy. The CEO, the ELT and the MTC Legal Counsel were consulted during the development of this policy. The policy has been approved by the CEO. b) The MTC management team is responsible for managing legal compliance obligations in its control area, including promoting, monitoring and maintaining a positive culture of regulatory compliance and determining the need for the Risk and Audit Manager for support or training. The center has 2 Audio-Visual Link (AVL) suites that lawyers can book at any time. To book an AVL suite, please send AVL.Parklea@mtcbroadspectrum.com an email. Medical Information: When a medical condition, injury or disability needs to be considered to ensure that appropriate employment opportunities or activities are identified. In this case, we may collect sensitive information such as your medical condition, injury, disability or medication, as well as your medication preferences, if there is likely to be serious harm to a person or group of people. The purpose of this privacy policy (Policy) is to provide information about the privacy practices of MTC Australia Limited (ACN 166 455 385) (MTC) and our affiliates, as defined below. In particular, this policy sets out how we handle your personal and sensitive data, under what circumstances we may disclose your data and how you can obtain access, request corrections or file a privacy complaint.

(b) MTC acknowledges receipt of any feedback, questions or complaints received within 24 hours and provides a formal response within 5 working days (days other than Saturdays, Sundays or New South Wales public holidays) following the investigation. the Australian Privacy Principles contained in the Privacy Act (APP), and (e) MTC may be required to disclose your personal and/or sensitive information to other parties if you have consented to this or if: required by law, including social security laws, or ADDRESSLevel 4, 2-12 Macquarie StreetParramatta NSW 2150(d) MTC collects, stores, uses and discloses your personal and/or sensitive information for a variety of purposes, which are associated with the delivery of government-funded programs and to provide you with appropriate support. Examples where MTC may share or disclose your relevant personal and/or sensitive information to third parties in connection with the provision of services: Simply sign up for FREE and unlock the number of results you can access. The free registration also gives you access to more information about each company. (a) MTC collects your personal and sometimes sensitive information only when necessary and to provide you with the range of services under the particular program provided. in the event of loss or potential loss of personal and/or sensitive information and background checks: if necessary in a specific situation, for example for pre-employment checks, including; Police checks or working with children or vulnerable persons. In this case, we may collect sensitive information such as your criminal record. (a) MTC may use your personal information to send you communications and information about our services for direct marketing purposes where we have obtained your consent or you can reasonably expect us to use the information for that purpose. Whenever possible, we use your preferred method of communication.

MTC offers an « unsubscribe » option with respect to receiving marketing communications. Paper files in paper form will be kept in lockable filing cabinets accessible only to authorized MTC personnel, and (b) MTC will only use your sensitive information to send you communications and information about our services for direct marketing purposes if we have obtained your consent. Office of the Australian Information Commissioner – APP Policies the types of personal data collected and (g) You have the right to be treated anonymously by us where lawful and practicable. We will try to accommodate a request for anonymity whenever possible. However, please note that in certain circumstances this may prevent us from communicating with you in a convenient and efficient manner and providing you with our services. If this is the case, we will inform you. (d) If it is not practical and/or inappropriate to collect personal and/or sensitive information directly from you, MTC may also indirectly collect personal and/or sensitive information from other parties, for example. From: (c) MTC may also contact you to request that you participate in the provision of content for marketing and promotional materials in connection with MTC`s programs and services.

MTC will obtain your written consent, including the option to remain anonymous or use a pseudonym to protect your identity. Risk and Audit ManagerMTC Australia Limited334-336 Illawarra RoadMarrickville, NSW 2204(T) 1300 232 663(E) Info@mtcaustralia.com.au(W) www.mtcaustralia.com.au using the « Contact Us » option that the person requesting access and correction is in fact the person to whom the data relates or is otherwise authorized to access the MTC data from the department that manages or regulates the program provided by MTC, and provide appropriate individual services and achieve results; (a) the main function and activities of the MTC are to provide services to clients by helping them find employment, to provide them with training and support to improve their employability or to provide them with a pathway to training. The clients we support include a wide range of people from different age groups, including young school-aged students and working-age individuals with different backgrounds, experiences and circumstances. Electronic records are stored in the following secure systems: The Australian Information Commissioner`s OfficeGPO Box 5218Sydney, NSW 2000(T) 1300 363 992(E) enquiries@oaic.gov.au(W) www.oaic.gov.au to ensure the security of personal and/or sensitive information disclosed overseas and to protect it from loss, misuse or unauthorised access, destruction, use, alteration or disclosure. Password-controlled network files that are protected from unauthorized access and backed up regularly to prevent loss. (h) MTC is required under the Notification Data Breach Scheme to notify the Data Protection Commissioner and data subjects if a data breach occurs in the following circumstances: ADDRESSEBrookwater Corporate HouseBuilding 522 Magnolia DriveBrookwater QLD 4300 online information: Information provided directly by you via MTC`s website or other online platforms that may include photos Personal Data: Date of birth, occupation, employment and educational history (b) Sensitive information collected by TCM is collected only for specific purposes that are reasonably necessary for MTC to provide the most appropriate service and support. Examples of the types of sensitive information and the circumstances in which we collect it include: the purposes for collection and the situations in which information may be shared or disclosed to other parties outside of TCM`s business activities. other applicable laws that impose specific obligations regarding the processing of personal and sensitive information, including: the Freedom of Information Act 1982 (Cth) and applicable state laws such as the Privacy and Personal Information Protection Act 1998 (NSW). the Privacy Amendment (Notifiable Data Breaches) Act 2017 (Cth), which has been incorporated into the Privacy Act (Notifiable Data Breach Scheme), and ensures that foreign service providers are subject to data protection laws that impose obligations substantially similar to those of the Privacy Act, monitor the quality of service and identify improvements to our service delivery. Collect client survey responses to improve TCM service delivery. These platforms use foreign servers in Singapore, the United States, and other overseas countries.

b) MTC occasionally uses web analytics platforms to: Child protection programs share information with volunteers who provide mentorship, employers who offer work experience or vacancies, schools and other educational institutions. (c) MTC uses the information it collects from you for the following purposes: (c) Any other concerns regarding data protection law and apps may be referred for resolution to: Privacy Protection (Reportable Data Breaches) Amendment Act 2017 (Cth) MTC may contact you in a variety of ways, including by post, email, SMS and phone call. We will not send you commercial electronic messages such as text messages or emails, except as permitted by applicable marketing laws, including the Spam Act 2003 (Cth). (e) MTC ensures the secure storage of stored files containing your personal and sometimes sensitive information as follows: This policy applies to our employees, volunteers, contractors and suppliers who handle personal and sensitive information collected in the course of their activities on behalf of MTC, including one of our affiliates.