A project plan, client email or workplace report might be strong evidence of what you can do. It might also contain pricing, customer details or information your employer has asked you not to share. If your RPL evidence contains confidential business information, the safest approach is to deal with that before you submit it—not assume it will be kept confidential once sent.
Can I use confidential workplace documents for RPL?
Possibly, but you should not submit a document simply because you created it or have access to it. Your employment contract, workplace policies, client agreements or professional obligations may restrict how it can be used outside the business. This matters for commercially sensitive information as well as personal information about customers, colleagues or patients.
Ask your employer or the relevant document owner what you are permitted to share. Where appropriate, seek written permission that identifies the material you may use and any conditions, such as redacting names or sharing it only with an RTO assessor. If permission is refused, ask about another way to demonstrate the same skills.
What should I check before submitting evidence?
Review each file, including attachments, screenshots and document properties, for information that does not need to be assessed. Common examples include:
- Customer, patient or employee names, contact details and identifying numbers.
- Prices, margins, supplier terms, tenders and unpublished financial results.
- Passwords, access details, security procedures and internal system screenshots.
- Confidential designs, processes, contracts or intellectual property.
Removing a name is not always enough: a date, location and job description may still identify a person or business. Check tracked changes, comments, file names and metadata too. The Office of the Australian Information Commissioner provides Australian guidance on privacy and the handling of personal information. Privacy obligations depend on the circumstances, so seek appropriate advice if you are unsure what applies.
How can I protect information without weakening my evidence?
Make a working copy and redact carefully
Keep the original in its authorised location and prepare a copy for assessment. Remove only information the assessor does not need. For example, you might replace a customer’s name with “Client A” while leaving the steps you completed, your decisions and the outcome visible. Use a method that removes the underlying text rather than placing an opaque shape over it; covered text can sometimes be recovered from a PDF.
Do not change figures, dates or outcomes to make a document look stronger. If a necessary detail cannot be shared, explain what was removed and why. The RTO may decide that a heavily redacted document does not establish enough about your work.
Ask about alternative evidence
Depending on the qualification and the RTO’s assessment requirements, alternatives may include a de-identified work sample, a workplace supervisor’s statement, a description of a process you carried out, an interview or a practical demonstration. A supervisor’s statement should accurately describe what you personally did; it does not automatically replace other evidence.
Use training.gov.au to find the relevant qualification and units of competency, then ask the RTO how its assessor can evaluate your skills without receiving unnecessary confidential material. The Australian Skills Quality Authority provides information about the standards that apply to registered training organisations.
Who decides whether the revised evidence is enough?
The RTO’s assessor decides whether your evidence meets the applicable assessment requirements. They may ask for clarification, additional documents or another form of assessment. Redaction and employer permission can help you share information appropriately, but neither guarantees an RPL outcome. RPL Access can help you think through evidence options and prepare questions for the RTO; it does not conduct the RTO’s assessment or issue the qualification.
Before uploading anything, ask the RTO what submission method it uses, who needs access and how to raise a confidentiality concern. Follow your employer’s approved transfer process as well. Avoid sending sensitive files through an unapproved personal email account or public file-sharing link.
What if I have already submitted confidential information?
Contact the RTO promptly. Identify the file, explain the concern and ask what can be done to restrict access, replace the file or delete a copy where appropriate. Tell your employer or the relevant privacy or security contact if your workplace procedures require it. Do not assume that withdrawing a document automatically removes every copy or reverses a disclosure.
If you are unsure whether a work sample is suitable, pause before submitting it. A short conversation about permission, redaction and alternatives is usually more useful than sending a complete file and hoping its sensitive details will not matter.