Document ID: chunk:federal_register_of_legislation:F2016C00635:clause:1_17
Version: federal_register_of_legislation:F2016C00635
Segment Type: clause
Provision Reference: sch 1 cl 17
Character Range: 25031–26410

17  IAP service providers' obligations in regard to quality and security of IAP information
 (1) An IAP service provider must take reasonable steps to ensure that the IAP information it collects:
 (a) is necessary for, or is directly related to, the purpose for which it is collected, or a directly related purpose; and
 (b) is not excessive for that purpose; and
 (c) is accurate, up‑to‑date and complete.
Penalty: $6 000.
 (2) An IAP service provider must take reasonable steps to ensure that the collection of IAP information does not intrude to an unreasonable extent on the personal privacy of any individual to whom the information relates.
 (3) If an individual (including an individual who is a participating operator) about whom an IAP service provider holds personal information so requests, an IAP service provider must make appropriate alterations to the personal information to ensure that the information is accurate, complete, up‑to‑date and not misleading
 (4) If the IAP service provider considers that the personal information the subject of such a request is not inaccurate, incomplete, out‑of‑date or misleading, it may refuse to comply with the request, but must then:
 (a) give the individual a statement in writing of its reasons for refusing; and
 (b) if the individual so requests, attach to, or include with, the information a statement by him or her.