Internal Controls

Audit Approach

Michael Sandor & Associates’ audit approach is aligned with our existing processes and quality assurance methodology. The most appropriate method for ensuring that audit recommendations are followed through will be applied.

While audits play an important part, they constitute only one aspect of the overall approach. Michael Sandor & Associates believes that the underlying principles ensuring that we successfully meet our Contract obligations are clear ownership across our business.


This policy outlines the handling procedures of personal information by Michael Sandor & Associates as set out in accordance with the Australian Privacy Principles in the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) (being amendment to the Privacy Act 1988).

Collection of Information

Michael Sandor & Associates collects company, business and personal information relating to individuals from the following sources: –

(i) Credit Publications
(ii) Industry related gazettes & reports
(iii) Government bodies such as ASIC, Land Titles, Court Records etc
(iv) External or Third parties
(v) Media
(vi) Any public record data base (e.g. Telstra, white pages)

Only the information that is necessary to be collected about any company, business or personal information relating to individuals, is for the purpose of: –

(i) Debt Recovery, Collection or Location services
(ii) Credit Management Services
(iv) Placement of staff for Permanent or Temporary positions
(v) Training Services

Michael Sandor & Associates will only collect personal information by lawful and fair means and not in an unreasonable intrusive way.

At or before the time (or, if that is not practicable, as soon as practicable after)
Michael Sandor & Associates collects personal information about an individual,

Michael Sandor & Associates will make the person aware of: –

(i) Why we are collecting information about them;
(ii) Whom the information may be passed on to;
(iii) And for any other specific reason;

Michael Sandor & Associates will if it is reasonable & practicable to do so, collect personal information about the individual from that individual.

Use and Disclosure

Michael Sandor & Associates will only use and disclose personal information for the primary purpose and will be guided by the provision of the Australian Privacy Principles.

Data Quality

Michael Sandor & Associates will take reasonable steps to make sure that the
personal information it collects uses or discloses is accurate, complete and up to date.

Data Security

Michael Sandor & Associates will take reasonable steps to protect the personal information it holds from misuse and loss and from unauthorized access, modification or disclosure.

Michael Sandor & Associates will take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose for which the information may be used or disclosed under Australian Privacy Principles.


Michael Sandor & Associates will provide this document which clearly expresses the policies on its management of personal information to anyone who asks for it.

Also on request by a person, Michael Sandor & Associates will take reasonable steps to let the person know, generally, what sort of personal information it holds, for what purposes, and how it collects, holds, uses and discloses that information.

Access and Correction

Should an individual request access to their personal information which is held by Michael Sandor & Associates, Michael Sandor & Associates will make this information available.

If Michael Sandor & Associates holds personal information about an individual that the individual is able to establish the information is incorrect, Michael Sandor & Associates will take reasonable steps to correct the information so that it is accurate, complete and up to date.


Michael Sandor & Associates complies with all Industry, Statutory and Regulatory requirements. There is no outsourcing or offshoring arrangements in place, nor will there be in the future. Michael Sandor & Associates hold Professional Indemnity Insurance.

Conflict of Interest

Michael Sandor & Associates actively avoids the potential risk of a conflict of interest arising. From the time that a new file is opened, appropriate measures are in place to detect a potential conflict of interest. Michael Sandor & Associates’ LEAP legal practice system is set up to automatically run a conflict checker. This prevents any matter being opened when a conflict of interest is detected. The team approach means that the constant sharing of information amongst all practitioners within the practice assists with the prompt identification of any potential conflict. If a potential conflict of interest arises, Michael Sandor & Associates will immediately advise you and seek instructions.


Michael Sandor & Associates will strictly protect all information received from all clients and potential clients. Michael Sandor & Associates utilises Trend Micro Business Security which provides web security, network security and email security to the practice.