Privacy Policy

Background

The Australian Medical Council Limited (AMC) is a company limited by guarantee. Its Objects are set out in its Constitution, which can be found on its website: www.amc.org.au 

The AMC is an accreditation authority appointed under the Health Practitioner Regulation National Law by the Medical Board of Australia (MBA). As such it undertakes activities such as the accreditation of university and prevocational medical education providers and programs; accreditation of specialist medical education and training programs; regular monitoring of those providers and their programs; accreditation and regular monitoring of providers of programs leading to endorsement of medical registration; accreditation and regular monitoring of CPD homes; and the examination or assessment (by the AMC or accredited workplace providers) of international medical graduates (IMGs) seeking registration to practise medicine in Australia.  

The AMC provides a process for verification of non-Australian medical qualifications by the Educational Commission for Foreign Medical Graduates (ECFMG) (in the USA) and an online portal that contains qualification and assessment information of IMGs.  

It also provides advice on accreditation and standards issues concerning medical education in Australasia to the MBA, and Commonwealth, State and Territory health ministers and health departments. Further detail on the activities of the AMC can be found on its website and in the annual reports accessible through the website. 

This policy sets out how the AMC collects and uses personal information collected or received by the AMC from people with whom it interacts. Those people include: 

a. members, directors and other officers, employees and contractors 

b. members of committees and assessment teams 

c. IMGs including candidates for the AMC’s examinations, candidates participating in workplace based assessment, and IMGs seeking assessment through specialist colleges or the competent authority pathway 

d. AMC examiners, simulated patients, standardised patients, Invigilators, marshals and other persons involved in AMC examinations  

e. others who assist the AMC with the carrying out of the AMC’s activities as outlined above, and 

f. third parties who use or are present at AMC facilities.  

Commonwealth Privacy Legislation

The Commonwealth Privacy Act 1988 sets out requirements for the collection and use of personal information.

Personal information is defined in the Privacy Act as “information or an opinion about an identified individual, or an individual who is reasonably identifiable (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not”. 

Sensitive information is a subset of personal information. It means information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, as well as health information, genetic information and biometric information about an individual. Although the AMC does not seek to collect such information (except in very particular circumstances), any sensitive information it holds will not be disclosed without the individual’s consent (unless disclosure is required by law, for example in compliance with a subpoena).  

Types of personal information the AMC collects

In carrying out its activities the AMC has collected and now collects the following types of personal information:

a. name, contact and personal details, including location, address, email and telephone number 

b. information relating to personal circumstances (e.g., age, date of birth, gender, cultural and linguistic background, disabilities, and other family circumstances, government identifiers (i.e., director identification number). 

c. images of people at AMC events, AMC facilities or during employment 

d. curriculum vitae, including education, qualifications and positions held 

e. history of employment or engagement with the AMC 

f. travel preferences and requirements 

g. account, superannuation fund, and taxation details for payments 

h. details of members’ interests in areas relevant to AMC work 

i. in the case of persons involved with the AMC as standardised patients, information and opinions concerning the health and medical conditions of the standardised patients, and  

j. in the case of examinations, personal information (including sensitive information) disclosed by participants and recorded by the AMC during the course of the examination.  

Information concerning an IMG’s performance in an examination or workplace based assessment (WBA) program is not considered to be “personal information” within the meaning of the Privacy Act, and accordingly is not subject to the provisions of the Australian Privacy Principles. However, the AMC treats such information as generally being confidential, and deals with it broadly in accordance with this policy.  

How the AMC collects personal information

The AMC collects personal information in a variety of ways associated with the types of personal information collected identified above. These ways include through employment engagement processes; submission of information for roles on committees and accreditation teams, as examiners, simulated patients, and standardised patients; completion of travel requests; participation in AMC events; completion of various on-line forms by IMGs as part of the assessment processes; and the making of submissions and complaints to the AMC as part of the accreditation processes.

For IMGs specifically, information is collected and uploaded by the IMG through the AMC candidate system. Information, including personal information, is uploaded to the AMC portal by AMC staff and, in the case of IMGs seeking specialist assessment, by specialist colleges 

Many of the forms utilised by the AMC as part of the AMC portal or for processing IMGs for examinations will contain specific collection consents.  

In the case of the AMC’s websites, the _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. 

Purpose of the AMC collecting and holding personal information

The AMC has collected or now collects or receives personal information for the following purposes:

a. to obtain ECFMG verification of qualifications claimed by IMGs, for the purposes of the AMC, the Australian Health Practitioner Regulation Authority (Ahpra) and specialist colleges 

b. to conduct examinations and determine the performance of candidates, and others involved in examinations 

c. to oversee workplace based assessment of IMGs 

d. to evaluate applications for registration via the Competent Authority Pathway (since 1 July 2014 this function has been undertaken by Ahpra) 

e. to process applications from overseas-trained specialists whose primary medical qualifications are not recognised in Australia and who do not hold a recognised specialist qualification, for assessment by the relevant Australian or Australasian specialist medical college for registration as a specialist 

f. selecting committee members, accreditation teams, standardised and simulated patients and examiners 

g. managing committees, accreditation assessments and monitoring, and examinations 

h. payment of fees and charges 

i. employment of AMC staff and employment related activities 

j. engagement of contractors and consultants 

k. meeting the requirements of superannuation and taxation legislation 

l. arranging AMC-related travel 

m. ensuring the integrity of AMC activities, through a transparent process for declarations of conflict of interest 

n. determining the suitability of persons generally for engagement as standardised or simulated patients, and their suitability to participate in particular clinical examinations 

o. in the case of standardised patients participating in clinical examinations, the AMC will receive and collect opinions from candidates for that examination on the health or medical condition of the standardised patients for the purpose of recording the performance of the candidates, and assessing that performance, and for other purposes ancillary to the clinical examination including training, preparing case studies, and calibrating the examination. This may include occasions when the AMC is involved in examinations of persons not AMC candidates for other health regulation organisations 

p. for training of persons involved in AMC activities, including accreditation contributors, examiners, and simulated patients in clinical examinations 

q. for conducting, arranging or participating in analysis and research into accreditation, examinations, examination candidates, medical education, health workforce issues, and website usage 

r. inclusion of images of people in AMC publications, including the annual report, and  

s. other purposes directly or indirectly associated with the carrying out of the AMC’s activities.  

Use of personal information

In collecting and using personal information, the AMC will comply with the provisions of the Privacy Act and the Australian Privacy Principles. Personal information will be used only for purposes disclosed above or related purposes.  

In the case of sensitive information in relation to standardised patients the AMC will also comply with any applicable state or territory health records legislation.  

Where personal information is used for analysis or research purposes, this will be done so far as the project allows using de-identified data. Where that is not feasible, processes will be established that require all persons involved to adhere to strict privacy and confidentiality requirements. Where footage of clinical examinations is used for purposes other than the examination in which it was recorded, for example for training, research, or calibration, all identifying features of all persons involved will, so far as is practicable, be masked. Where that is not feasible, processes will be established that require all persons involved to adhere to strict privacy and confidentiality requirements.  

Only de-identified data will be permitted to leave the AMC’s direct control.  

Sensitive information of standardised patients will not be used for research purposes without consent.

Release of information

Only the following are given access to personal information collected by the AMC and, in the case of IMGs, qualifications data, examination performance and results held by the AMC:

In Australia

a. staff of the AMC where access to the personal information is necessary to allow the AMC staff to carry out their duties. For example, human resources staff may have access to employment records, and travel organisers may have access to travel preferences

b. technical specialists or consultants engaged by the AMC are given access only to personal information necessary to allow them to undertake the functions for which they were engaged 

c. members of the accreditation or specialist recognition team in relation to which the information was provided 

d. staff of the AMC involved in accreditation 

e. members of AMC accreditation committees 

f. staff of the AMC involved in the processing of AMC examinations and results, appeals, and applications for specialist assessment pathways 

g. technical specialists engaged by the AMC involved in the processing of AMC examinations and results, appeals, and applications for specialist assessment pathways 

h. AMC examiners involved in the conduct of AMC examinations and appeals 

i. researchers involved in specific research projects approved by the AMC 

j. staff of Ahpra and specialist colleges in relation to the registration of individual doctors. Usually this is done via the candidate portal, but from time to time the AMC may provide specific personal information about candidates to Ahpra or specialist colleges. Generally, this is done on request from one of those bodies, but occasionally it may be done on the AMC’s initiative if considered necessary for the proper administration of the Health Practitioner Regulation National Law. ) 

k. staff of training institutions involved in workplace based assessment, and  

l. staff and fellows of the specialist medical colleges involved in the assessment of overseas-trained specialists. 

Overseas

a. staff of ECFMG (in the USA) or other organisations used to confirm the accuracy of claimed qualifications

b. staff of Pearson VUE (in the USA) which conducts online IMG MCQ assessment (NTC), and  

c. staff of organisations providing IT services under contract to the AMC who have a specific need to access personal information held by the AMC for the purpose of carrying out their contract functions.  

Where personal information is given by the AMC to the overseas entities identified above, the AMC is reasonably satisfied that the overseas recipient is subject to a law or binding scheme which protects the personal information in a way which is at least substantially similar to the Privacy Act, and there are mechanisms that the IMG can access to take action, if necessary, to enforce that protection (see Australian Privacy Principle 8).  

Except as disclosed in this policy, personal information and examination performance or results, will not be made available to any other party without the express permission of the individual candidate or individual concerned, except as required by law (for example, in response to a legal summons).  

Note: The AMC will not provide any information about a candidate to the spouse of the candidate, to any other member of the candidate’s family, or to any other person acting on behalf of the candidate, without the individual candidate’s specific written consent by use of the AMC form – Authority to Receive Information Concerning an AMC Candidate/Applicant. 

Bridging courses for AMC examinations 

In the past the AMC has been approached by the coordinators of bridging courses for the AMC examinations for contact lists of persons who were candidates for the AMC MCQ Examination, or who had passed an AMC MCQ Examination and were eligible to proceed to the AMC Clinical Examination.  

The AMC does not provide this information to bridging course coordinators. However, in order to assist candidates preparing for the AMC examinations, from time to time the AMC may circulate information about available bridging courses to individual candidates (on behalf of the bridging course providers). 

Except as disclosed in this policy, personal information will not be made available to any other person without the express permission of the individual concerned, except as permitted by the Privacy Act or as otherwise required by law (for example, in response to a legal summons).  

.  

Storage of personal information by the AMC 

Personal information is held on individual files or files specific to the particular function for which the information was collected. All digital and physical records containing personal information are stored securely within Australia, ensuring compliance with local privacy laws and regulations. Sensitive information concerning standardised patients is held in secure electronic storage. 

The AMC has implemented industry-standard security measures and follows best practice in data security. Our dedicated team of experts continuously monitor and assess our systems to identify and mitigate potential vulnerabilities. We utilise advanced encryption techniques, stringent authentication controls, firewalls, and secure network protocols to protect your information from unauthorised internal or external access or interception during transmission and storage. AMC staff and contractors are only able to access data needed to complete their official duties. 

To further enhance our data security practices, we are implementing the Essential Eight guidelines. These guidelines, recommended by the Australian Cyber Security Centre (ACSC), provide a comprehensive framework for protecting against cyber threats and ensuring the integrity of sensitive information. The AMC’s ongoing commitment to adhering to these guidelines demonstrates our dedication to maintaining the highest level of data security. 

In the case of the AMC portal, access is only granted to authorised persons associated with Ahpra or the Australian specialist colleges.  

Personal access to information held by the AMC

Under the Privacy Act, individuals may have access to their personal information and may request correction of the details of personal information held by the AMC.  

Viewing personal information

Any request for access to personal information must be made to the AMC Privacy Officer. Contact details are provided below. Access to personal information will be provided in line with this Policy.

No person may remove any information held on their personal or other files or computer records. 

Persons seeking to access their personal information must pay any fee advised for access to their personal information. Within 14 days of receipt of an application for access to personal information, the applicant will be notified whether their request will be met and of the access arrangements proposed.  

Photocopies or scans of personal information will generally be supplied on request. (A charge may apply for photocopying information, where the number of copies exceeds 10 pages.) 

Correcting personal information

Any person who believes that personal information held by the AMC is incorrect may seek to have that information corrected by notifying the AMC in writing of the relevant corrections.

Note: Any request to change information held in the AMC records, such as identity details or change of name or qualifications, may be required to be accompanied by documentary evidence in support of the change. 

Complaints about breaches of privacy

Any individual who believes that a breach of privacy in relation to personal information held by the AMC may have occurred should inform the AMC Privacy Officer with all relevant details and copies of any documents. The AMC Privacy Officer will manage the complaint in accordance with the AMC’s relevant Complaints Policy.

Likelihood of disclosure to overseas recipients

The AMC will disclose personal information to overseas recipients in the circumstances identified above under the heading “Release of Information by the AMC”.

Further information

For further information or to view personal information please contact: 

The Privacy Officer 
Australian Medical Council Limited
PO Box 4810
Kingston ACT 2604
Telephone:  02 6270 9777
Email:  amc@amc.org.au 

8 June 2023