External LMS Privacy Statement

Privacy

The Australian Bureau of Statistics provides Statistical Learning - our external Learning Management System (LMS) - for you to access our online training. The technology behind this service and its operation is provided by Totara through contractual arrangements with Androgogic.

We comply with
• the Privacy Act 1988;
the 13 Australian Privacy Principles (the APPs)
Please refer to the ABS Privacy Policy for more information.

Personal information collected from you will be used to enable access to the external Learning Management System. Personal information collected includes your first name and surname, email address, host organisation and work area.

This personal information is stored securely within the external LMS, and within the protected ABS internal working environment.

The external LMS is a cloud based platform that uses your personal information to provide access to courses and training hosted on that platform. Privacy of this platform is managed by Androgogic. Please see the Androgogic Privacy Policy for further information,

The ABS internal working environment used to manage access and reporting for the external LMS in managed through the ABS CORP network. Access to the repositories are managed through an Access Control List (ACL) and is based on identified roles. Staff use two factor authentication to access the ICT environment with Single Sign On (SSO) enabled. Our security education and awareness program runs throughout the year and is part of essential training that all staff must complete annually. Our systems have alerts and monitoring in place where deemed necessary. Staff also undergo annual Privacy training. We scan our environment to identify where Personally Identifiable Information (PII) has been stored, intentionally and accidentally. We also have an annual Ethical Hack program where we hire external consultants to try to simulate a cyber attack and insider threats to help us identify vulnerabilities.

When requested we provide reports to your employers on access to and completion of modules and courses hosted on the external LMS. These reports identify Personal Identifiable Information. Reporting is provided to the nominated contact officer at the host organisation, and relevant ABS officers.

We will not share your personal information unless

    • you have consented;
    • you would reasonably expect, or have been told, that we usually disclose information of this kind, or
    • it is required or authorised by law.

You have the right to request access to and correction of your personal information. We will take all reasonable steps to address your request. Please contact your organisation’s nominated contact officer to do this.

Should you wish to make a privacy complaint please refer to the ABS Privacy Policy.