Privacy & Confidentiality

Information collected

Depending on the offering and the learner’s interaction with the Institute, records may include:

• Name, employer or sponsor, title, contact information, and registration communications.
• Attendance, participation, activity completion, project submissions, presentation information, rubric results, and certificate decisions.
• Certificate number, issue date, valid-until date, correction or reissue records, and verification communications.
• Payment and transaction information handled by the applicable payment provider; the Institute does not intentionally publish payment credentials.
• Accommodation, complaint, appeal, identity, security-incident, and program-evaluation records when applicable.
• Basic website technical information, such as browser, device, page request, and security logs, when generated by hosting or analytics services.

How information is used

Information is used to communicate with learners and sponsors; schedule and deliver training; verify identity and participation; evaluate achievement; make and document certificate decisions; issue, correct, reissue, and verify certificates; process payments; provide accommodations; handle complaints and appeals; protect assessment and system security; evaluate and improve the program; meet accreditation requirements; and comply with law.

Confidentiality and access controls

Learner contact information, project work, rubric results, accommodation details, and complaint or appeal records are treated as confidential. Access is limited to authorized Institute personnel and service providers who need the information for a defined program function. Reasonable administrative and technical safeguards are used to protect controlled records.

When information may be disclosed

Information may be disclosed:

• With the individual’s authorization or at the individual’s direction.
• To an employer or sponsor when the learner has authorized the disclosure or the sponsor has a legitimate, previously disclosed role in the enrollment.
• To service providers supporting payment, communication, hosting, records, or program delivery under appropriate access limitations.
• To ANAB or its authorized assessors for accreditation assessment and oversight.
• When required by law, subpoena, court order, or a regulator acting within lawful authority.
• In limited form to confirm whether a certificate record is valid and matches the information supplied by the requester.

Records retention

Program records are retained according to the Institute’s controlled retention schedule. Certificate records are maintained beyond the certificate’s five-year term so learners, certificate holders, employers, regulators, and other legitimate stakeholders have reasonable access to verification. Records are securely disposed of when their authorized retention period ends.

Program evaluation

Learner feedback and program-performance information may be analyzed to evaluate and improve the certificate program. Reports used for management review, advisory-group review, or public performance summaries are aggregated or de-identified when individual identification is not necessary.

Questions, access and corrections

To ask what program information the Institute maintains about you, request correction of inaccurate identifying information, or raise a privacy concern, email [email protected]. Identity verification may be required before access, correction, or disclosure.