WorkPro Privacy Collection Notice

Effective Date: September 2026

This notice applies when you use the WorkPro platform or complete a WorkPro task or service in Australia or New Zealand, including background and probity checks, police checks, citizenship and work-rights checks, reference checks, medical checks, eLearning, identity verification, and the collection, verification and management of licences, tickets, credentials and other documents. Different tasks and services require different information and may use different verification methods.

1. Who is collecting your information 

Risk Solutions Australia Pty Ltd trading as WorkPro (ABN 66 113 726 033) collects and holds personal information when you create or use a WorkPro profile or complete a task or service through the WorkPro platform. WorkPro’s contact address is 3 Bowen Crescent, Melbourne VIC 3000, Australia, and privacy enquiries may be sent to privacy@workpro.com.au. 

WorkPro handles personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Privacy Act 2020 (New Zealand), including the Information Privacy Principles, where those laws apply, together with other applicable legal obligations. 

2. Why WorkPro collects your information 

WorkPro collects and uses personal information to: 

• confirm your identity and the consistency or authenticity of information you provide; 
• submit, administer and complete the WorkPro task, check or service you are undertaking; 
• invite nominated referees, collect and manage references, and verify relevant employment, experience or qualification information; 
• arrange or administer medical checks and collect the information and outcomes required to assess health, safety or fitness for work; 
• enrol you in eLearning, deliver learning content and assessments, and record your progress, results and completion status; 
• collect, verify and manage licences, tickets, credentials and documents, including their issue, validity, expiry, renewal and compliance status; 
• obtain information from relevant government, official, professional, employment, education, issuing and screening sources; 
• communicate with you and provide support in relation to the check; 
• provide the permitted status, outcome, report, record or information to the WorkPro Customer that requested or assigned the task or service; 
• prevent fraud, maintain platform and service security, and investigate technical issues; and 
• meet legal, regulatory, accreditation, contractual, audit and record-keeping obligations. 

3. Information WorkPro may collect 

Depending on the check, WorkPro may collect: 

• your name, contact details, date and place of birth, previous names and address history; 
• identity documents and document details, photographs or live facial images, and identity-verification information; 
• citizenship, visa and work-rights information; 
• employment history, education, qualifications, licences, tickets, accreditations and credentials; 
• referee names and contact details, reference responses and opinions, and employment, role, performance or experience information supplied by referees; 
• medical-check appointment and administration information, health information, examination or assessment outcomes, and fitness-for-work or related recommendations; 
• eLearning enrolments, activity and progress records, assessment responses, results and completion certificates or records; 
• criminal-history information and other sensitive information relevant to the requested check; 
• information required by an applicable government authority, Official Record Holder, issuing body or screening provider; and 
• consent, transaction, audit and compliance records. 

Some information collected for a check may be sensitive information or contain government-related identifiers. WorkPro collects sensitive information with your consent unless another exception under applicable privacy law permits or requires the collection. 

4. How WorkPro collects and verifies information 

WorkPro generally collects information directly from you through its platform. Depending on the check, WorkPro may also collect information from or disclose it to: 

• the WorkPro Customer that requested the check; 
• Australian and New Zealand government authorities, law-enforcement bodies, the New Zealand Ministry of Justice, immigration and work-rights authorities, document issuers and Official Record Holders; 
• education institutions, employers, nominated referees, professional bodies, training providers, assessors and issuing authorities; 
• background-screening, identity-verification, medical, occupational-health, eLearning or other specialist providers; and 
• contracted technology, hosting, support and professional service providers. 

WorkPro discloses only information reasonably necessary for the relevant purpose and requires service providers to handle information under appropriate privacy, confidentiality, security, retention and deletion obligations. 

5. Identity documents and verification 

Where identity documents are required, WorkPro collects identity information and documents to confirm your identity and administer the check. Depending on the document and check, WorkPro may use document review, document analysis, biometric comparison, verification with an issuing body, or an electronic check against records held by the document issuer or Official Record Holder. 

Not every identity document can be electronically verified and not every WorkPro task or service uses the same identity-verification method. Documents may be reviewed or validated using another appropriate method depending on the document and the task or service. 

Additional information when the Document Verification Service (DVS) is used 

The following additional information applies only where WorkPro expressly tells you that it proposes to verify a supported identity document using the Attorney-General’s Department’s Document Verification Service (DVS). It does not apply to every Australian or New Zealand task or identity document. DVS verification will only occur with your express consent. 

Before any relevant identity-document information is accessed, used or transmitted for a DVS verification, WorkPro will inform you that the DVS will be used and ask you to provide separate express consent. WorkPro will not submit the information to the DVS if you do not provide that consent. 

Why your personal information is collected 

WorkPro collects the relevant personal information to verify your identity and to administer and complete a background, probity, citizenship, work-rights or other WorkPro task requiring identity verification. WorkPro may also use the information to assess the consistency or authenticity of the information you provide, prevent fraud, support the integrity of the check and meet applicable legal, regulatory, accreditation, audit and record-keeping obligations. 

How WorkPro handles your information for a DVS verification 

WorkPro collects the relevant information from you through the WorkPro platform. The information you provide will be transmitted through third-party systems and services to the DVS Hub, administered by the Attorney-General’s Department, and matched against official records held by the government agency responsible for issuing the identity document (document issuer). 

The DVS Hub will advise WorkPro whether the information you provide matches the relevant official records. WorkPro uses this response as one component of its identity-verification process. The requesting Customer does not receive or view your identity document, the underlying DVS response or a separate per-document DVS outcome, and must not be able to infer that response. 

Identity documents are retained only for the period applying to the WorkPro service being completed. Personal information contained in DVS Information Match Data is removed, destroyed or effectively de-identified once the purpose for which it was obtained has been fulfilled, unless its retention is permitted or required by law, a court or tribunal order or an applicable binding obligation. Applicable retention arrangements are explained further in section 9 of this notice and the Candidate Data Management Conditions. 

How the Attorney-General’s Department handles your information 

The DVS Hub facilitates information transfer between WorkPro and the document issuer. The DVS Hub itself does not retain any personal information and the Attorney-General’s Department cannot view or edit any of the personal information transmitted through the DVS Hub. 

The Attorney-General’s Department engages a third-party provider as a managed service provider for the DVS. That provider is required to adhere to the Australian Privacy Principle requirements and security standards so that its use and disclosure of personal information is limited to explicitly defined purposes, including the purposes of its contract with the Department and compliance with any request under section 95C of the Privacy Act 1988 (Cth). 

The Attorney-General’s Department is authorised to operate the DVS Hub for the purpose of verifying individuals’ identities under the Identity Verification Services Act 2023 (Cth). 

How the document issuer handles your information 

Your personal information will be shared by the Attorney-General’s Department through the DVS Hub with the government agency that issued your identity document so it can be checked against its official records. The document issuer already holds your personal information as part of its official records and handles that information under its own privacy policy and legal obligations. 

Other disclosures connected with the DVS 

Where necessary to undertake the verification, WorkPro may disclose your identification information to outsourced service providers that connect WorkPro to the DVS Hub, technology or customer-support providers involved in transmitting or supporting the request, the Attorney-General’s Department, the relevant document issuer and law-enforcement agencies where disclosure is required or authorised by law. 

WorkPro does not permit personnel or service providers located outside Australia or New Zealand to access or use the DVS unless the applicable DVS requirements have first been satisfied. There may be disclosure to recipients in New Zealand where a New Zealand government agency or private organisation requests verification assistance in relation to an identity document. 

Attorney-General’s Department verification assistance service 

There may be circumstances in which assistance is required to verify your identity. If WorkPro asks the Attorney-General’s Department for assistance to verify your identity through the DVS, the Department will collect your personal information for that purpose and may disclose it to the relevant document issuer to assist with the verification. 

This collection is authorised under Australian Privacy Principle 5.2(c) and section 27 of the Identity Verification Services Act 2023 (Cth), which permits collection of personal information from someone other than the individual where authorised under an Australian law. The Attorney-General’s Department will handle the information in accordance with its obligations under the Privacy Act 1988 (Cth). 

If you do not provide the personal information required by the Attorney-General’s Department, it will be unable to provide that verification assistance. 

Identity documents containing information about another person 

If an identity document submitted for verification contains information about another person, such as a Medicare card listing more than one person, you must ensure that you are authorised to provide that information and that the other person has been informed and has consented to its disclosure. The information will only be used for the identity-document verification and will otherwise be handled in the same way as your personal information. 

If you do not consent to DVS verification 

You do not have to agree to verify an identity document through the DVS. If you do not consent, WorkPro will not submit the document information to the DVS. Where another verification method is reasonably available for the relevant check, WorkPro will explain that process. An alternative may require further information or take longer. If WorkPro cannot verify your identity using an available method, it may be unable to complete the check or task. 

Further information about the DVS 

More information about how the Attorney-General’s Department handles personal information and the operation of the DVS Hub, including access, correction and privacy-complaint arrangements, is available in the Attorney-General’s Department’s Privacy Statement - Identity Verification Services at: 

https://www.idmatch.gov.au/resources/privacy-statement-identity-verification-services  

6. What the requesting Customer receives 

The WorkPro Customer that requested or assigned the task or service receives only the permitted status, outcome, report, record or information relevant to that task or service. Depending on the service, this may include a check outcome, reference report, medical or fitness-for-work outcome, eLearning progress or completion record, or the status and permitted details of a licence, ticket, credential or document. The Customer does not receive information that is not required for the service or permitted to be disclosed. 

Completing a task or service does not give the requesting Customer access to your entire WorkPro profile or unrelated information. Separately, providing your WorkPro ID permits only the limited profile sharing described in the Candidate Terms of Access and does not make completed background checks, medical information or identity-verification information visible. 

7. Overseas collection and disclosure 

WorkPro provides services in Australia, and New Zealand and it’s platform systems are hosted in Australia and New Zealand. Depending on the task or service, WorkPro may also need to collect information from, or disclose it to, a government authority, Official Record Holder, screening provider, medical provider, referee, issuing body or other service provider in Australia, New Zealand or another country. 

The relevant country depends on the candidate’s history and the country or countries in which the task must be completed. Because those locations vary, it is not practicable to specify a fixed list in this notice. WorkPro takes reasonable steps to ensure overseas recipients handle personal information consistently with applicable privacy obligations and WorkPro’s contractual requirements. Where the New Zealand Privacy Act 2020 applies, WorkPro will disclose personal information outside New Zealand only where Information Privacy Principle 12 permits the disclosure, including where the recipient is subject to comparable safeguards or is contractually required to provide them. If WorkPro must instead rely on your authorisation, WorkPro will first expressly inform you if the recipient may not be required to provide safeguards comparable to those in the New Zealand Privacy Act. 

8. If you do not provide the information 

Unless a particular law or requirement applying to the task states otherwise, providing your personal information to WorkPro and completing a WorkPro task or service is voluntary. However, if you do not provide the information or consent required, WorkPro may be unable to administer or complete the task or service, verify relevant information or provide an outcome to the requesting Customer. This may affect whether the Customer can progress the employment, engagement, placement, access or compliance process for which the task was requested. Where another appropriate process is reasonably available, WorkPro will explain it. An alternative process may require further information or take longer to complete. 

9. How WorkPro holds, protects and retains information 

WorkPro stores personal information, including information relating to people in New Zealand, in secured systems hosted in Australia. WorkPro applies technical and organisational safeguards including encryption, access controls, logging, monitoring, staff training and independent security testing. WorkPro is certified to ISO/IEC 27001:2022 for information security management. 

Retention depends on the task or service and applicable legal, regulatory, accreditation, contractual and audit requirements. Police checks, citizenship and work-rights checks, reference checks, medical checks, eLearning records, identity verification, and licences, tickets, credentials and document management may each be subject to different retention arrangements. Service-specific retention, profile deletion and secure-destruction arrangements are explained in the Candidate Data Management Conditions. 

Personal information contained in DVS Information Match Data is permanently removed, destroyed or effectively de-identified once the purpose for which it was obtained has been fulfilled, unless retention is permitted or required by an applicable agreement, law, or court or tribunal order. WorkPro retains separate consent, access, transaction and compliance records where required for audit and legal purposes. 

10. Access, correction, withdrawal and complaints 



You can view and edit information you entered in your WorkPro profile through Profile Settings. You may request confirmation of whether WorkPro holds personal information about you, access to that information, or correction of information that is inaccurate, incomplete, out of date or misleading. If New Zealand law applies and WorkPro does not make a requested correction, you may provide a statement of the correction sought and ask WorkPro to attach it to the information. You may also request deletion of your profile or withdraw consent prospectively where consent is relied on. These rights are subject to applicable legal exceptions and retention requirements. Withdrawal does not invalidate processing that occurred before consent was withdrawn. 

To exercise a privacy right, ask a question, request this notice in an accessible or alternative format, or make a complaint, contact WorkPro’s Privacy Co-ordinator at privacy@workpro.com.au or at 3 Bowen Crescent, Melbourne VIC 3000, Australia. WorkPro will acknowledge and investigate privacy complaints. If you are not satisfied with WorkPro’s response, you may complain to the Office of the Australian Information Commissioner or, where the New Zealand Privacy Act applies, the Office of the New Zealand Privacy Commissioner at www.privacy.org.nz. Further information is available in the WorkPro Privacy Policy, Candidate Terms of Access and Candidate Data Management Conditions.