The Victorian Curriculum and Assessment Authority (the Authority) is a statutory authority continued under Part 2.5 of the Education and Training Reform Act 2006 (Vic).

The Authority provides the Insight Assessment Platform (Insight) to Victorian schools free of charge, for the delivery of classroom assessments to F-10 students to support teaching and learning at an individual, school and system level. From January 2026, Insight incorporates the Digital Assessment Library (DAL). All information previously collected and stored on the DAL has been transferred to Insight.

In order to provide Insight to schools and students, the Authority collects personal information (which may include sensitive information) within the meaning of the Privacy and Data Protection Act 2014 (Vic) and may collect health information within the meaning of the Health Records Act 2001 (Vic) (collectively “personal information” for the purposes of this notice) about students and school staff. This information is used by employees and contractors of the Authority to create user accounts, create and store student assessment results and provide those results to teachers, principals and sector authorities and otherwise to operate and maintain Insight. 

The Authority discloses personal information about students and school staff, and student results, to sector authorities, on condition that it is collected, used and disclosed by those authorities in accordance with their obligations under applicable privacy legislation.  The sector authority for government schools is the Victorian Department of Education. The sector authority for Catholic schools is the Victorian Catholic Education Authority and/or Melbourne Archdiocese Catholic Schools Ltd. 

A third party contractor, LinkIt!, collects and stores personal information and results on behalf of the VCAA. LinkIt! stores the collected information on Amazon Web Services (AWS) infrastructure in a datacentre located in Sydney. For further information on AWS Data Privacy, visit their website: https://aws.amazon.com/compliance/australia-data-privacy/. LinkIt! privacy policy is available at: https://www.linkit.com/resources/privacy-policy

Personal information about users collected by the VCAA will not otherwise be used or disclosed by the VCAA, except with the prior consent of the individual, or if the VCAA is required or otherwise permitted by law to do so.

If personal information is not provided, Insight cannot be used by a school staff member, nor can it be used for a particular student’s assessments.

When an individual's personal information is provided to the Authority by a third party, the Authority requests that the individual is made aware their personal information will be or has been provided to the Authority, the purpose for which it will be or was provided and to whom it will be or is likely to be disclosed.

An individual can ask for personal information the Authority holds about them, if any, and request its correction if inaccurate. To do so, contact the VCAA Insight Service Desk at insight@education.vic.gov.au

Further information about how the Authority collects, uses and discloses personal information (including sensitive information) and health information is available in the Authority’s Privacy Policy.