AustralianSuper Candidate Privacy Notice

Introduction

This Privacy Notice covers candidates’ personal and sensitive information collected by AustralianSuper Pty Ltd, and our related companies (AustralianSuper) as part of our recruitment and selection process. If you provide personal or sensitive information in another context, such as in your capacity as a member, please refer to our privacy policy.

Protecting your personal information is important and is required by law. The Privacy Act 1988 (Cth) determines that we must handle your personal information in accordance with a set of Australian Privacy Principles. If you are applying for a role in the UK or EU or are based in the UK or EU, please refer to the GDPR Specific Addendum below.

Provision of your personal information to us is not mandatory, however, if you do not provide this when requested, we may be unable to progress your application or offer of employment or consider you for future employment opportunities.

Personal Information Collection and Use

AustralianSuper collects your personal information to consider you for potential employment with us. This includes the position you applied for, other relevant opportunities, and to manage business risks, legal and regulatory obligations and disputes. We also use it for statistical reporting and analysis in relation to recruitment, to understand our website usage and diagnose technical problems, and from time to time request your feedback on your experiences with AustralianSuper. If you are successful in securing a position with AustralianSuper, we will also use your personal information for employment-related purposes. 

We collect personal information about you:

• directly (for example when you provide information by applying for a role or submitting information through our website) where relevant, and with your consent, through third parties such as referees, recruitment agencies, government bodies, and similar sources.

Types of Personal Information Collected

Personal and sensitive information collected during our recruitment process may include, but is not limited to: 

• Contact details (e.g. name, postal and email address, phone number) (“Contact Data”);
• Resume and other correspondence (“Application Data”);
• Employment details and qualifications (e.g. work history, education history and qualifications, licences, certifications, memberships) (“Employment Data”);
• Diversity and Inclusion information (e.g. gender identity, Indigenous status) – used for statistical reporting only (“Diversity Data”);
• Information provided during interviews or assessments including aptitude or other psychometric testing (“Assessment Data”);
• Identity information (e.g. photo ID, passport details, birth certificate, driver's licence details, date of birth, gender) (“Identity Data”);
• Background check information (e.g. criminal history, pre-employment medical declaration, regulatory checks, visa status, work eligibility, references) – collected after a successful application (“Background Check Data”);
• Financial information (e.g. Tax File Number, Tax Residency Status, bank account details) and emergency contact details – collected after a successful application (“Financial Data”); and
• Other information we may consider necessary to our recruitment processes (“Other Data”).

Sharing Your Personal Information

We may share your personal information under certain circumstances, such as:

• When legally required (e.g., fraud prevention)
• For legitimate business reasons (e.g., risk management, verifying identity, legal defence)
• To comply with law enforcement or legal requirements;
• With your permission.

We may share your personal information with various entities, including:

• Our employees, contractors, directors, related companies;
• Service providers (e.g., recruitment agencies, IT support, security providers, background check providers), some of whom may be located outside the country you are applying from or will be working from if successful with your application; 
• Law enforcement and government agencies;
• Professional advisors, auditors, or business partners;
• Fraud prevention agencies;
• Authorised third parties with your permission; and
• Entities involved in potential mergers.

Third-party providers may be used for services such as employment suitability assessment, application process management, and conducting surveys.

How long will your personal information be retained

If you are successful in your application, your Personal Information (or Personal Data, as applicable) may become part of your employee file and shall be retained in accordance with our data retention and destruction policies and standards, as amended or replaced from time to time. 

The precise length of time we will retain your employee file will depend on the type of data, our legitimate business needs and other legal or regulatory rules that may require us to retain it for certain minimum periods. 

If you are unsuccessful in your application, or we have not had any 'meaningful contact' (communication between us either verbal or written, or where you are actively engaging with our online portal) with you, or the company/agency you are working for or with, for three (3) years, we will endeavour to remove you from our talent pool. In addition, you can separately unsubscribe from our talent pool and remove your Personal Information (or Personal Data, as applicable) (including receiving notifications from us) via the portal. If we have 'meaningful contact' with you, we will continue to retain your Personal Information (or Personal Data, as applicable) for 7 years. 

Background Checks

For successful applicants, we conduct education checks and background checks (including police, bankruptcy and work rights) to ensure a safe work environment for all colleagues. These checks help us verify your qualifications, confirm your identity, and comply with legal and regulatory requirements. They also allow us to assess potential risks related to security, financial integrity, and workplace safety. 

AustralianSuper uses third parties Sterling Risq (AU) & Accurate (UK & US) for these checks. We will make you aware if the role you have applied for requires specific background checks and will inform you of any relevant background checks during the recruitment process. 

Accessing and Updating Your Information

You have the right to access and update your personal information, and have it corrected if necessary, by contacting us. We strive to provide this information within 30 days of your request, after verifying your identity. In some cases, we may withhold providing you your information. If we do refuse your request to access your personal information, we will provide you a written response explaining our decision.

Making a Privacy Complaint

If you have a privacy concern, please contact our Privacy Officer:

AustralianSuper Privacy Officer
AustralianSuper Pty Ltd
GPO Box 1901 Melbourne VIC 3001 or email us.

We will investigate your complaint promptly. If dissatisfied with the resolution, you may contact the Office of the Australian Information Commissioner.

 

GDPR Specific Addendum

The following section applies to the collection and use of personal data of candidates who are domiciled in the United Kingdom (“UK”) or European Economic Area (“EEA”).

Personal Data Processed

The Personal Data processed for UK and EEA domiciled candidates has been outlined above under the ‘Types of Personal Information Collected’. For the avoidance of doubt, any reference to ‘Personal Information’ shall be read as ‘Personal Data’ for the purposes of this addendum.

Legal Basis for Collection

We rely on the following basis to process your Personal Data.

1. Consent: You provide us with clear unambiguous consent to process your Personal Data for the purposes of your employment application. 
2. Contract: The processing of your Personal Data is necessary to enter into a contract with you or in order to comply with the terms of the contract (Article 6(1)(b) GDPR). 
3. Legal Obligations: The processing of Personal Data is necessary in order for AustralianSuper to comply with relevant applicable legislation (Article 6(1)(c) GDPR). 
4. Legitimate Interests: The processing of Personal Data is necessary for our and/or related third-parties legitimate interests (as set out in the table below), and those interests are not overridden by your interests or fundamental rights and freedoms. You may request further information about that balancing test by contacting us using the details below (Article 6(1)(f) GDPR).

Table of Legal Basis for processing

Unless personal data is processed on the grounds of consent or our legitimate interests, all personal data that we request from you is obligatory for contractual or statutory reasons as indicated by the legal grounds above.

Use of Artificial Intelligence in Recruitment

AustralianSuper uses a third party artificial intelligence (AI) tool, “Outhire”, to assist with aspects of its recruitment process. The use of Outhire includes automated decision making during the process of reviewing and analysing application materials, comparing a candidate's skills, qualifications and experience against the requirements of a role, conducting AI-assisted screening interviews, and generating candidate summaries, assessments, recommendations and rankings.

To perform these functions, Outhire processes information that candidates provide during the recruitment process, including application materials, interview responses, audio recordings and interview transcripts where applicable. Outhire assesses this information against criteria established for the relevant role and generates outputs designed to assist AustralianSuper in evaluating applications and identifying candidates who may be suitable for further consideration.

The outputs generated by Outhire may influence how applications are assessed, prioritised and progressed through the recruitment process. In particular, AI-generated assessments, recommendations and rankings may be used to assist AustralianSuper in determining which candidates proceed to subsequent stages of recruitment. As a result, the outcomes generated by the tool may affect whether an application progresses.

AustralianSuper does not rely solely on AI-generated outputs when making recruitment decisions and recruitment decisions made by Outhire may be subject to human oversight and review by appropriately authorised personnel.  However, Candidates have the right to request either (1) that Outhire not be used as a part of their application or (2) to request human oversight of any decision made by Outhire. Whether a candidate takes up either option it will not have an impact on the recruitment decision made by AustralianSuper for such Candidate, as per the candidates rights under the DUAA 2025 and Data Protection Legislation. 

For the avoidance of doubt, Candidates have the right to request further information about AustralianSuper's use of AI in recruitment, to express their views regarding an AI-assisted assessment, and to request human review of a recruitment outcome where they have concerns about the role AI may have played in the assessment of their application. Candidates may also exercise any other rights available to them under applicable privacy and data protection laws by contacting AustralianSuper using the details set out in this notice.

Disclosures of your Personal Data

Where appropriate, your personal data may be disclosed by us to third parties as noted in the ‘Sharing Your Personal Information’ section in the Privacy Notice above.

How long will your Personal Data be retained

 Please refer to ‘How long will your Personal Information be retained’ section above in the notice.

International Transfers

In limited circumstances, the use and disclosure of your  Personal Data  may involve transferring your Personal Data outside of the UK. In particular, your Personal Data may be transferred to AustralianSuper's head office in Australia and to AustralianSuper staff located in the United States.If we transfer your personal data to such countries, we will do so in accordance with Applicable Law and will, where necessary, put in place appropriate or suitable safeguards to protect your personal data. As such, transfers will only take place where:

• we have entered into a safeguard outlined in Article 46 UK / EU GDPR, typically being “standard contractual clauses”, with the recipient of your personal data (these are a set of obligations about how your data is protected and used);
• the relevant country has been recognised by the European Commission or UK Secretary of State as providing an adequate level of data protection, or we will implement the approved standard contractual clauses or International Data Transfer Agreement issued by the UK Information Commissioner’s Office; or
• we can rely on another basis under the law, such as the sharing of personal data being necessary for the purpose of a court case, investigation or to protect our legal rights.

In relation to the transfers to AustralianSuper's head office in Australia and to AustralianSuper staff located in the United States, we make use of “standard contractual clauses”.

Your rights in relation to your personal data

You have a number of rights in relation to your personal data. Your rights are important to us. These rights are:

• Access: you have the right to request a copy of the personal data we are processing about you, which we will provide back to you in electronic form. 
• Rectification: you have the right to have incomplete or inaccurate personal data that we process about you rectified. 
• Erasure: you have the right to request that we delete personal data that we process about you, except if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims. 
• Restriction: you have the right to restrict our processing of your personal data where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose. 
• Portability: where processing is based on your consent, you have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another responsible party.  
• Objection: in certain circumstances, you have the right to object to such processing of your personal data on grounds relating to your particular situation.  
• Withdrawing Consent: if you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge. 
• Complaint: If you are unhappy with how we have handled your personal data, we encourage you to contact us in the first instance (see the ‘Contact Us’ section below for our contact details) so that we have the opportunity to address your concerns or complaint. If you are not satisfied with our response to your complaint specifically concerning your personal data, you can also make a complaint to the relevant data protection authorities, including the Information Commissioner's Office if you are based in the UK, or the data protection authority in your country of habitual residence or place of work if you are based in the EEA.

However, these rights may not be exercised in certain circumstances, such as when the processing is necessary to comply with a legal obligation or for the exercise or defence of legal claims. 

Contact Us

If you have any other concerns regarding our collection or use of your Personal Data, you should contact us directly via the contact details below:

AustralianSuper Privacy Officer
AustralianSuper Pty Ltd
130 Lonsdale Street
Melbourne Vic 3000

or email us.

You may also contact our designated UK/EU representative(s) using the contact details set out below. 

• UK representative: AustralianSuper Privacy (International)
• Email: ASINTLPrivacy@australiansuper.com

AustralianSuper may change this notice from time to time as required. We will post the changes on the relevant pages of the AustralianSuper website.

Document last updated on: 28 August 2026.