Contact

Refund Policy

1. Purpose

This policy establishes QMSAI’s commitment to maintaining the confidentiality of all information obtained or created during the certification process. It ensures the protection of sensitive data belonging to clients, candidates, and stakeholders, in compliance with ISO/IEC 17024:2012 Clause 4.5.

2. Scope

This policy applies to all QMSAI personnel, contractors, committees, and other entities involved in certification activities. It covers:

  • Client Information – Business details, proprietary data, and other sensitive records.
  • Candidate Information – Personal details, examination results, and certification records.
  • Certification Materials – Exam content, assessments, and internal certification decisions.

3. Policy Statement

QMSAI is dedicated to ensuring that all information collected or generated in the course of certification activities is kept strictly confidential. Any breach of confidentiality will be treated as a serious violation of our organizational standards and may result in disciplinary action or legal consequences.

4. Roles & Responsibilities

  • Board of Directors – Oversees the enforcement of this policy.
  • Confidentiality Committee – Monitors compliance and investigates confidentiality breaches.
  • Certification Manager – Ensures all employees and contractors understand and adhere to confidentiality requirements.
  • All Personnel – Responsible for safeguarding confidential information and reporting any suspected breaches.

5. Confidentiality Measures

5.1 Information Classification (Clause 4.5.1)

All certification-related information is classified as confidential unless publicly available or legally required to be disclosed. This includes:

  • Candidate Data – Personal details, certification progress, and examination results.
  • Client Information – Proprietary and business-sensitive data.
  • Examination & Assessment Materials – Content, validation, and scoring processes.
  • Certification Decisions – Internal records, assessments, and related documents.

5.2 Access Control (Clause 4.5.2)

  • To prevent unauthorized access:
  • Restricted Access – Only authorized personnel can access confidential information.
  • Electronic Security – Secure storage in password-protected systems with encryption for sensitive data.
  • Physical Security – Confidential documents are stored in locked cabinets or secure areas.

6. Disclosure of Information

6.1 Permitted Disclosures (Clause 4.5.3)

Confidential information may only be disclosed under the following conditions:

  • With Written Consent – Prior approval from the concerned individual or organization.
  • Legal & Regulatory Compliance – When disclosure is required by law or an authorized regulatory body (affected parties will be notified unless prohibited).
  • Contractual Agreements – Any data shared with third parties must be protected under a written confidentiality agreement.

6.2 Third-Party Information Requests

  • No confidential information will be disclosed to third parties without proper authorization.
  • All requests for disclosure will be reviewed and approved by designated personnel.

6.3 Confidentiality Agreements (Clause 4.5.4)

  • All personnel, contractors, and committee members involved in certification activities must sign a Confidentiality Agreement as a condition of engagement.
  • Any breach of these agreements will result in disciplinary action.

7. Breach of Confidentiality

7.1 Reporting and Investigation

  • Any suspected or actual breach must be reported to the Certification Manager or Confidentiality Committee immediately.
  • Investigations will be conducted to assess the extent of the breach and identify responsible parties.
  • Corrective actions may include policy revisions, security reinforcements, or personnel disciplinary measures.

7.2 Consequences of Breach

  • Violators may face disciplinary actions, termination, or legal consequences if confidentiality is compromised.
  • QMSAI may pursue legal action if the breach results in significant harm.

8. Monitoring and Compliance

  • The Confidentiality Committee will conduct periodic reviews to ensure continued compliance.
  • Regular audits will be performed to verify adherence to confidentiality measures.
  • Any updates to the policy will be communicated to all personnel and stakeholders.

9. Retention & Disposal of Confidential Information

  • Confidential information will only be retained for as long as necessary, in compliance with legal and regulatory requirements.
  • Once the retention period expires, records will be securely disposed of or anonymized to maintain confidentiality.

10. Handling Confidentiality Complaints

  • Any individual or organization may submit a complaint regarding the mishandling of confidential information.
  • Complaints will be addressed through QMSAI’s established complaint-handling procedures

11. Policy Review & Updates

  • This policy will be reviewed annually or whenever regulatory changes or operational updates occur.
  • Feedback from personnel, contractors, and audits will be considered in policy updates

12. References

  • ISO/IEC 17024:2012 Clause 4.5 – Confidentiality
  • QMSAI Internal Procedures for Data Protection & Confidential Information Handling
Home
Blog
Contact