Australian privacy and regulatory alignment

SupportWise is designed with Australian privacy principles and education-sector expectations in mind. This page provides a practical mapping between SupportWise’s current information-handling approach and the 13 Australian Privacy Principles (APPs).

This mapping is provided to support customer review. It is not legal advice or a blanket representation that every school, deployment or processing activity is automatically compliant with every Australian privacy requirement.

Australian Privacy Principles

The Privacy Act 1988 (Cth) contains 13 Australian Privacy Principles covering the lifecycle of personal information. The table below explains how each principle relates to SupportWise.

APP	Principle	SupportWise approach
APP 1	Open and transparent management of personal information	Solvanta publishes privacy, security and subprocessor information, documents key data flows and provides channels for privacy and assurance enquiries.
APP 2	Anonymity and pseudonymity	SupportWise generally requires identified users and learners because the service coordinates real school support allocations. Where identification is not required for a particular interaction with Solvanta, the applicability of anonymity or pseudonymity is considered separately.
APP 3	Collection of solicited personal information	SupportWise is designed to process information reasonably required for learner-support coordination, authentication, integrations, reporting and service operation. Schools should avoid providing information that is not needed for those purposes.
APP 4	Dealing with unsolicited personal information	Information that is not required for the service should not be intentionally retained simply because it has been supplied. Schools should also avoid placing unrelated sensitive information into free-text fields or import files.
APP 5	Notification of the collection of personal information	Solvanta provides public privacy information about SupportWise. Schools remain responsible for any collection notices or communications they are required to provide to their own staff, learners or families in relation to their use of the service.
APP 6	Use or disclosure of personal information	Customer data is used to provide, secure, maintain and support SupportWise and for other purposes permitted by the applicable agreement or law. Disclosures to service providers are limited to documented operational purposes.
APP 7	Direct marketing	School operational data and learner data are not used for third-party advertising. Marketing activities are handled separately from the operation of customer workspaces and are subject to applicable consent and communication requirements.
APP 8	Cross-border disclosure of personal information	Core application and learner data is hosted in Australia. Some supporting subprocessors may process limited metadata, email addresses or notification content outside Australia. These providers and locations are documented in the current Subprocessor Register.
APP 9	Adoption, use or disclosure of government-related identifiers	SupportWise does not use a government-related identifier as its own general account identifier. Where a school provides an education or other government-related identifier for an authorised school purpose, it should only be processed to the extent required for that agreed purpose.
APP 10	Quality of personal information	Schools control the source information supplied to SupportWise and can update or re-import records. SupportWise should not be treated as the authoritative source where the originating school system remains the system of record.
APP 11	Security of personal information	SupportWise uses authentication, role-based permissions, workspace separation, encryption, managed cloud security controls, audit history, backups and recovery processes to protect personal information. Retention and deletion controls are also part of the information lifecycle.
APP 12	Access to personal information	Schools can access and manage the information held in their workspace. Requests made directly to Solvanta for access to personal information are handled through the applicable privacy process, subject to legal and contractual requirements.
APP 13	Correction of personal information	Schools can correct or replace information in SupportWise and, where data originates from another school system, should normally correct the authoritative source as well. Privacy correction requests can also be raised directly with Solvanta.

The authoritative descriptions and requirements of each APP are maintained by the Office of the Australian Information Commissioner. See the OAIC Australian Privacy Principles guidelines.

How to read this mapping

This page explains how SupportWise is designed and operated. It does not remove the need for a school or education organisation to consider:

whether the information it proposes to enter or integrate is necessary;
the legal authority and notices that apply to its own collection and use of that information;
whether any sensitive information is being introduced into SupportWise unnecessarily;
jurisdiction-specific privacy, records-management or information-sharing rules; and
any internal privacy, security or procurement approval process.

State and territory requirements

Education providers may also be subject to state or territory privacy, records-management, information-sharing and education policies. SupportWise does not claim that one configuration automatically satisfies every jurisdiction’s requirements. Solvanta provides product, hosting, security and data-flow information so each organisation can complete its own assessment.

If your school requires a system-specific questionnaire or assessment, send it to hello@solvanta.com.au. Solvanta can provide product-specific information for the school’s review.

Data protection

Operations & resilience

Review resources

Australian privacy and regulatory alignment

Australian Privacy Principles

How to read this mapping

State and territory requirements

​Australian Privacy Principles

​How to read this mapping

​State and territory requirements

Australian Privacy Principles

How to read this mapping

State and territory requirements