DCCEEW Privacy Notice

You are receiving this notice because you have provided, or will be providing, your personal information to the Department of Climate Change, Energy, the Environment and Water (the Department) as part of your participation in an online traceability system (AWTS - Australia’s Wildlife Traceability System) for regulated wildlife trade (the System). The System may also be accessed and used by the National EPA to regulate wildlife trade under the Environment Protection and Biodiversity Conservation Act 1999 and the Environment Protection and Biodiversity Regulations 2025.

The System:

• will be required to be used by coral fishers who want to export coral product collected from Australian waters and exported under particular source codes (namely C – captive bred and F – animals born in captivity);
• will feature an online platform that will support regulatory and business stakeholders within the supply chain; and
• intends to track coral products through the supply chain to the point of export from Australia (the Tracking Process)

Personal information will be collected in accordance with the Department’s ‘Privacy Policy’.

Through the use of the System and the Tracking Process, it is possible that the following personal information about you may be collected, your:

• name, phone number, email address, location, publicly available permit numbers, any other business information (including but not limited to details of your employment and/or consignment information) to the extent that it might allow you to be reasonably identified.

The System will be utilised to:

1. enable the Department and the National EPA to monitor individual business trade;
2. evidence compliance with an approved:
   1. captive breeding program
   2. wildlife trade operation approval; and/or
   3. wildlife trade management plan;

   as administered in accordance with the Environment Protection and Biodiversity Conservation Act 1999 (Cth) (the EPBC Act), the Environment Protection and Biodiversity Conservation Regulations 2025 (Cth) and the Environment Protection Reform Legislation Amendment (Consequential Amendments) Regulations 2026.

3. facilitate the means:
   1. to contact users regarding their coral inventory and any updates to the system, rules, regulations and CITES matters;
   2. to monitor users’ activities to ensure compliance with approvals made under the EPBC Act;
   3. for users to monitor information collected by the System, to assist with consignments and inventory handling; and
   4. assist with demonstrating that Australia is meeting its obligations under the Convention on International Trade in Endangered Species of Fauna and Flora.

The System is being delivered by OriginsNext Pty Ltd (OriginsNext) and is a multi-tenant Software as a Service (SaaS) platform that is hosted in Microsoft Azure Cloud. Therefore, your personal information will be disclosed to OriginsNext and Microsoft through your use of the System.

OriginsNext is based in Australia. However, OriginsNext does collect information globally and may transfer, process, and store your information outside of Australia, to wherever they or their third-party service providers operate for the purpose of providing you with services. Some of the third parties described in the OriginsNext Privacy Policy, which provide services to OriginsNext under contract, are based in other countries that may not have equivalent privacy and data protection laws to Australia.

Microsoft is based in the United States of America (the USA). Typically, Microsoft’s primary storage of your personal information will be your location/region, or in the USA. However, your personal information will often be stored with a backup to a data centre in another region (i.e. it is likely that personal information collected will be transmitted to and stored by Microsoft on servers located outside Australia.

You can request that your personal information not be input into the System. This may mean that you will be unable to participate in the use of the System and/or export coral product collected from Australian waters.

Your personal information will be handled by the Department in accordance with the Privacy Act 1988 (Cth) and our Privacy Policy. However:

• OriginsNext acts in accordance with the OriginsNext Privacy Policy and OriginsNext Terms & Conditions; and
• Microsoft Azure Cloud is developed and owned by Microsoft, and acts in accordance with the Microsoft Privacy Statement – Microsoft privacy and the Microsoft Terms of Use | Microsoft Legal.

Therefore, the Department is required to inform you that by agreeing to the use of OriginsNext and Microsoft Azure Cloud:

• you consent to your personal information being collected, used, disclosed and stored as set out in the “Microsoft Privacy Statement” and the “OriginsNext Privacy Policy” and agree to abide by “Microsoft’s Terms of Use” and “OriginsNext Terms & Conditions”;
• you understand and acknowledge that these services may be located outside of Australia (including but not limited to the USA) and the legislation of the relevant country (including but not limited to the USA) will apply;
• Australian Privacy Principle 8.1 contained in Schedule 1 of the Privacy Act may not apply; and
• you understand and acknowledge that, where applicable, you may not be able to seek redress under the Privacy Act, but will need to seek redress under the laws of the relevant country (including but not limited to the USA).

This privacy notice explains how your personal information may be collected, handled, used and disclosed by the Department in relation to the System.

Our Privacy Policy explains how you can access or correct your personal information, and how to make a complaint. This is available at https://www.dcceew.gov.au/about/commitment/privacy.

If you have questions, please contact the Department at privacy@dcceew.gov.au.