From its transition day, where an NVR registered training organisation collects personal information about a person enrolling in a VET course (or part of one) and reasonably believes it may be included in reportable data, it gives the person, before or at enrolment, a privacy notice containing at least the Schedule 1 content: why the information is collected, how it is used, that it may be disclosed to NCVER and state training authorities, how NCVER, DEWR and VET data system operators handle it, surveys and opting out, and how to contact the RTO for access, correction, complaints and questions; this is in addition to the organisation's Privacy Act and State or Territory obligations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.