Document ID: chunk:federal_register_of_legislation:F2021L00231:clause:1_19
Version: federal_register_of_legislation:F2021L00231
Segment Type: clause
Provision Reference: sch 1 cl 19
Character Range: 34949–36105

19  Australian Privacy Principle 11: Security of personal information (as customised for the purposes of this Code)
       (1)    If a Research Organisation holds identifiable research information, the Research Organisation must take such steps as are reasonable in the circumstances to protect the information:
         (a)    from misuse, interference and loss; and
         (b)    from unauthorised access, modification or disclosure.
       (2)    If:
         (a)    a Research Organisation holds identifiable research information about an individual; and
         (b)    the Research Organisation no longer needs the information for any purpose for which the information may be used or disclosed by the Research Organisation under this Code; and
         (c)    the information is not contained in a Commonwealth record; and
         (d)    the Research Organisation is not required by or under an Australian law, or a court/tribunal order, to retain the information;
         (e)    the Research Organisation must take such steps as are reasonable in the circumstances to destroy the information or to ensure that the information is de‑identified.