Document ID: chunk:federal_register_of_legislation:F2016C00635:clause:1_37
Version: federal_register_of_legislation:F2016C00635
Segment Type: clause
Provision Reference: sch 1 cl 37
Character Range: 45746–46492

37  IAP auditors' obligations in regard to collecting IAP information
 (1) An IAP auditor may collect IAP information that is reasonably necessary to enable the auditor to prepare an audit report on an IAP service provider.
 (2) An IAP auditor must take reasonable steps to ensure that IAP information that it collects:
 (a) is necessary for, or is directly related to, the purpose for which it is collected, or a directly related purpose; and
 (b) is not excessive for that purpose; and
 (c) is accurate, up‑to‑date and complete.
 (3) An IAP auditor must take reasonable steps to ensure that the collection of IAP information does not intrude to an unreasonable extent on the personal privacy of any individual to whom the information relates.