Privacy Policy & Data Governance
Our commitment to safeguarding personal identifiable information (PII), examination transcripts, and certification registry records under international data protection frameworks.
1. Institutional Commitment to Privacy
OSHA International (“the Consortium”, “we”, “us”, or “our”) operates with unwavering integrity regarding the confidentiality of information entrusted to us by students, certified practitioners, Authorized Training Providers (ATPs), and corporate client organizations worldwide.
This Privacy Policy delineates how personal data is collected, processed, verified, stored, and protected in compliance with the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable international privacy frameworks.
2. Data Collected & Registry Information
To administer educational programs, certify competencies, and publish public verification records, we process the following categories of information:
- Candidate & Practitioner Identification: Full legal name, date of birth, photographic identity verification, professional title, and organizational employer.
- Contact Details: Professional and personal email addresses, phone numbers, and regional mailing coordinates.
- Academic & Examination Records: Proctored exam scores, curriculum completion timestamps, continuing professional development (CPD) logs, and certification issue dates.
- Public Trust Ledger Records: Alphanumeric verification PINs, credential titles, post-nominal grades (e.g., AIOSH, MIOSH), and active status indicators.
3. Purpose of Processing & Legal Basis
We process personal information under the following legitimate institutional grounds:
4. Data Retention & Cryptographic Security
To ensure lifelong verification rights for credential holders, certification validity records are maintained indefinitely in tamper-evident, encrypted archives. We utilize industry-standard 256-bit TLS encryption in transit and AES-256 encryption at rest. Personal identifying information unrelated to certification is expunged in accordance with statutory retention schedules.
5. Your Legal Rights
Subject to applicable local jurisdiction, individuals hold rights to access, rectify, or request restriction of personal information held by OSHA International. Due to international fraud prevention standards, historical examination scores and issued certification logs cannot be expunged if a public credential is active.
For data privacy requests or inquiries, contact our Data Governance Bureau at privacy@oshainternational.org or via our contact desk.