Recruitment Privacy at Telstra

Your privacy matters to us

Privacy matters to us and we know it matters to you. This statement describes the categories of personal information we may process, how your personal information may be processed and how your privacy is safeguarded in the course of our relationship with you.

Telstra Recruitment Privacy Statement

This statement is also available in Bahasa Indonesian (PDF, 140KB)Bahasa Malaysian (PDF, 136KB)French (PDF, 160KB) and German (PDF, 119KB)


This is our privacy statement which sets out how Telstra Group Limited and controlled entities (collectively "Telstra") jointly manage your personal information, including sensitive personal information (together referred to as "personal information"), for recruitment or other career related purposes.

If you are subsequently employed or engaged (directly or indirectly) by Telstra, our Telstra Employee and Contractor Privacy Statement will apply.

This privacy statement describes the categories of personal information we may process, how your personal information may be processed and how your privacy is safeguarded in the course of our relationship with you.

It is intended to comply with our obligations to provide you with information about Telstra's processing of your personal information under privacy laws. 

Last updated: 8 March 2024

The categories of information we collect and hold

Depending on the nature of the role or position, we may collect and hold a range of different information and opinions (based on local requirements) about you for the purposes described in this privacy statement.

If you have applied for a position with us, the categories of personal information may include (but are not limited to) details such as your name, date of birth/age, contact details, address/location, title, gender, identification documents, resume/CV, employment history, education qualifications, residency/citizenship status, work permit/visa details, professional licenses, referee details, military service and veteran details, results of psychometric tests, security/background checks, video interviews, references, identity and police checks.  

Sensitive Personal Information

We may also collect personal information about you which may be considered sensitive or protected under applicable laws (such information may include, title, gender, ethnicity, criminal record, physical and mental health, identity reference numbers, and other protected sensitive information) ("Sensitive Personal Information"). 

How we process your information

We may collect and record your personal information from a variety of sources, but mainly directly from you (such as from your application form, interviews, videos, verbal information over the phone, written correspondence, SMS and emails that you may send through).

We may also obtain some information from publicly available sources (e.g., LinkedIn, Seek, Facebook, and Naurki) as well as from third parties, for example, references from a previous employer, medical reports and test results from external professionals or where we engage a third party to carry out background checks including police and identity checks (where permitted by applicable law), conference organisers and recruitment agencies.

You might sometimes provide personal information about other individuals to us (e.g. your referee contact details). If so, you must have first: 

  • obtained consent from those individuals for us to collect that information (if required under applicable laws);
  • informed those individuals that you are providing that information to us and the purposes for which you are providing that information (if required under applicable laws); and
  • advised them of the matters in this Recruitment Privacy Statement

You also consent to them providing information about you to us. 

How we hold your information

We may store your personal information in hard copy or electronic format, in locations both inside and outside of your local country (See More about holding of your information), in storage facilities that we own and operate ourselves, or that are owned and operated by our service providers. 

Telstra will ensure that any restrictions imposed by applicable privacy laws in relation to obtaining, holding, use and the transfer of personal information by Telstra to any recipients (including overseas recipients) are observed. 

While we have put in place appropriate technical and organisational measures to maintain the security of your information and to protect it from unauthorised access, use and disclosure, you have a responsibility to ensure the security of the data and you must not share your username or password with anyone.

What is the purpose and lawful basis for which data are processed?

You acknowledge and agree that we may collect, store, use or disclose such personal information for the purposes for which the personal information was received or collected or as otherwise permitted under applicable laws.

We may use and process your information for recruitment and engagement purposes (for example, job opportunities, including SMS notifications and SMS chat and providing you with employment marketing correspondence regarding careers seminars etc).

You may opt-out from receiving employment marketing correspondence from us at any time, by following the "opt-out" instructions contained in the correspondence or by writing to us at the contact details below under the section 'How to exercise your privacy rights, make a complaint or report a breach’.

We may also use your personal information to verify your identity and other details, contact referees and conduct police and other background checks. Where applicable, your information may also be used to match information with the identity document issuer or record holder in your local jurisdiction by our third-party provider/s.

If you are a resident of the European Union (EU) or United Kingdom (UK) please also read EU and UK Residents information below to understand in more detail the lawful basis under which we process your personal information: What is the purpose and lawful basis for which data are processed?

Retention of your information

We endeavour to ensure that personal information is kept as current as possible, and that irrelevant or excessive data is deleted or made anonymous as soon as reasonably practicable. However, some personal information may be retained for varying time periods to comply with legal and regulatory obligations and for other legitimate business reasons.

We will generally retain your personal information only so long as it is required for purposes for which it was collected. If you are successful in the role, we will retain your information as part of your employment record.

If you choose not to provide certain personal information (including any mandatory information), we may not be able to progress your job application or provide you with correspondence and other information regarding employment or engagement at Telstra. 

When we disclose your information

In some cases, Telstra may disclose your information to our related bodies corporate, recruitment agencies and other third parties as permitted by applicable law.  

The categories of personal information that we share with these third parties are detailed above. These parties may be involved in organizing and running marketing initiatives, the recruitment/engagement process and/or assisting us with the purposes for which we may use your information.
These recipients may be located in various countries (See More about disclosure of your information).

We may transfer information between Telstra related entities to manage your potential recruitment due to location of prospective hiring managers and talent acquisition staff.

Telstra will comply with any restrictions or obligations imposed by applicable privacy laws in relation to the disclosure of personal information.

Your agreement to provide accurate information

You agree to provide your personal information, which is in all respects true, accurate and up to date and is not, in any respect, misleading, deceptive or inaccurate or likely to be misleading or deceptive. 

What are your rights?

Depending on the jurisdiction where you are located, you may be entitled to various data subject rights to:

  • Request access and obtain a copy of the personal information that we hold about you.
  • Request for us to rectify, correct or update any personal information that we hold about you.
  • Request for us to delete your personal information if we no longer need it.
  • Request to restrict the processing of your personal information in certain circumstances, for example, if you are contesting the accuracy of the personal information that, we hold about you.
  • Object to the processing of your personal information in certain circumstances or withdraw your consent. This right is absolute when we process your personal information for direct marketing.
  • Exercise your right to data portability, meaning that you have a right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another organisation without hindrance from us.
  • Exercise your right to nominate and individual to exercise carry out your individual rights in the event of death or incapacity.

Telstra will not sell or share your personal or sensitive information for behavioural advertising, or in a way that could invoke/give effect to limitation rights that exist in specific jurisdictions (including California). 

How to exercise your privacy rights, make a privacy complaint or report a breach

If you or your authorised agent wish to access or have a copy of any of your personal information that we hold, have any other request (such as making updates or corrections to your personal information, or deleting or ceasing the collection, processing or use of your personal information, or obtaining it in a portable format) or if you become aware of an unauthorised disclosure or breach of data please email us at  askhrexternalsupport@telstrahr2.zendesk.com or contact Chief Privacy Officer/Data Protection Officer by emailing us at privacy@online.telstra.com.au at which time we can consider and respond to your request. 

Please note that there may be some circumstances (e.g., exemptions under privacy laws) where Telstra may not always grant your request (individuals will not be subject to discrimination for exercising their privacy rights).  

We may require additional information from you for verification purposes upon receipt of your request.
This information will depend on the right you are exercising and the legal requirements of the jurisdiction in which you are located.

You may also use these contact details to notify us of any privacy complaint you have against us, including if you think that we have failed to comply with applicable privacy laws.

We are committed to acknowledging your complaint in a prompt manner and will give you an estimated timeframe for when we will respond to your complaint. While we hope that we will be able to resolve any complaints you may have without needing to involve third parties, you may also be able to lodge a complaint with a relevant regulator in your local jurisdiction. 

More about disclosure and holding of your information

In some cases, Telstra may hold or disclose your information to our related bodies corporate, recruitment agencies and other third parties as permitted by applicable law. These recipients may be located in various countries, Including Australia, USA, Canada, countries within the Europe Union (including but not limited to , France, Germany, Ireland, Sweden, Switzerland), the United Kingdom, UAE (Dubai), Oman, China (including Hong Kong)), Taiwan, South Africa, Singapore, Japan, South Korea, Malaysia, Thailand, the Philippines, Russia, , Indonesia, India, and New Zealand.


For transfers outside of the European Economic Area or the United Kingdom, or countries deemed adequate by either of these jurisdictions, we enter into the standard contractual clauses.

About this statement

This statement has been issued by Telstra. From time to time we may need to change this statement.

If we do, we will post the updated version on our careers page), and it will apply to all of your personal information held by us at that time. This Telstra Recruitment Privacy Statement was last updated on 8 March 2024.

In the event of any conflict between the English and any other language version of this policy, the English version will prevail. For information about tailored digital advertising and your privacy choices when visiting our website, please see our page: Advertising and your information.

Applicable to EU and UK residents only:

What is the purpose and lawful basis for which data are processed?

Where applicable data protection laws require us to process your personal information on the basis of a specific lawful justification, we generally process your personal information under one of the following bases: 

  • the processing is necessary for the legitimate interests pursued by Telstra (being those purposes described in the section above), except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal information;
  • the processing is necessary for compliance with a legal obligation to which Telstra is subject; or
  • the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into such a contract.

We may on occasion process your personal information for the purpose of the legitimate interests pursued by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal information. 

We have identified the following purposes for processing personal information. These purposes each relate to a lawful basis for processing, as required under applicable law.  These purposes include:

No. Purpose for processing Lawful Process
a. Recruitment and selection

This processing is necessary to take steps at the applicant's request to enter a contract of employment or engagement
This processing is also necessary for the purpose of the legitimate interests pursued by Telstra. Telstra considers that it has a legitimate interest in fully assessing applications for employment or engagement to ensure that only suitable and appropriate candidates are both assessed and selected.  

b. Appropriate vetting for recruitment and team allocation including, where relevant and appropriate credit checks, right to work verification, identity fraud checks, criminal record checks (if and to the extent permitted by applicable laws), relevant employment history, relevant regulatory status and professional qualifications;   This processing is necessary for the compliance with legal obligations to which Telstra is subject.
This processing is also necessary for the purpose of the legitimate interests pursued by Telstra. Telstra considers that it has a legitimate interest in managing its business operations in the most effective way and wishes to maintain its world class reputation and continue to attract high calibre employees and contractors.

How does Telstra protect personal data that is transferred outside of the EU or UK?

To safeguard these transfers, where required by law, Telstra implements the Standard Contractual Clauses (“SCCs”) that have been adopted by the European Commission, as well as the Standard Contractual Clauses ("SCCs") that have been adopted by the UK Government, to provide an adequate level of data protection for your personal information. The SCCs ensure that entities within the Telstra Group and suppliers process personal information in accordance with the GDPR, which is widely recognised as a benchmark for privacy protection.

In some cases, it is not appropriate for us to implement the SCCs and we rely on other mechanisms that are provided by the laws of your jurisdiction, such as for the fulfilment of our contract with you or with your explicit consent. 

For more details about a specific transfer of your personal information, please contact us using the details provided above.