Data Breach Response Plan

RTO Training Consultants · RTO Training Resources Pty Ltd (ABN 17 631 073 213, ACN 631 073 213) · Last reviewed 17 July 2026

This plan summarises how we respond if personal information we hold is lost, or accessed or disclosed without authorisation.

Contain and assess

On discovery, we contain the breach (revoking access, isolating systems), then assess within 72 hours what information is involved, whose it is, and whether serious harm is likely.

Notify

Where an eligible data breach is likely to result in serious harm, we notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), describing the breach, the information involved and recommended steps.

Review

Every breach or near miss ends in a documented review: cause, fix, and the control change that prevents recurrence. Records are retained per the Data Retention Policy.

Reporting a concern

If you believe data held by us has been compromised, contact consultants@rtotrainingresources.com.au immediately with “Data breach” in the subject line.

Questions about this policy: consultants@rtotrainingresources.com.au, 1800 266 160, or 2/10 Lawn Court, Craigieburn VIC 3064.