Document ID: chunk:federal_register_of_legislation:F2021L00712:body:0:p5
Version: federal_register_of_legislation:F2021L00712
Segment Type: other
Provision Reference: 
Character Range: 11890–14844

to lodge a complaint under the Privacy Act.
3)                   Unless required or authorised by law, an agency must not take administrative action that interferes with the individual's opportunity to exercise any rights of appeal or review.
4)                   If:
              1. an individual has supplied data prior to 1 January 1991; and
              2. that data is to be used, or is likely to be used, in a program;
         then:
c.                    the relevant assistance agency must notify the person in writing either before the data is first used, or as soon as practicable after the data is likely to be used for this purpose.
5)                   Written records made in accordance with section 11(5A) of the Data-matching Act must be retained on or linked to the individual's file.
16.              Destruction of data where no discrepancy produced
1)                   If personal information from source agencies is used in a data matching cycle and does not produce a discrepancy, the matching agency must destroy the personal information as soon as practicable after commencing Step 5 in the data matching cycle.
2)                   Destruction of personal information referred to in subsection (1) is to be completed no later than 24 hours after the completion of Step 5 of the data matching cycle, unless additional time is required because of a computer malfunction or industrial action.
17.              Management and destruction of data where discrepancy produced
1)                   In cases where a discrepancy occurs as a result of Steps 1, 4 and 5 in a data matching cycle, the results must be supplied to the relevant source agency within 7 days of completion of the relevant step.
2)                   Source agencies must deal with the results in accordance with section 10 of the Data-matching Act.
3)                   If the source agency decides to take no further action in relation to the discrepancy, the information must be destroyed within 14 days where it is reasonably practicable to do so.
4)                   In the case of a discrepancy:
              1. a source agency may refer the discrepancy to another source agency for action in accordance with section 10 of the Data-matching Act; and
              2. subject to section 10(3A) of the Data-matching Act, the agency receiving the discrepancy must commence any action within 12 months from the date of receiving the discrepancy.
5)                   If a source agency receives information from the matching agency or another source agency giving rise to an action within the meaning of section 10(1) of the Data-matching Act, the source agency must destroy that information on final completion of the action.
6)                   For the purposes of subsection (5), 'final completion of the action' means:
              1. where the Australian Federal Police has carriage of the matter and the source agency is satisfied with the progress of