Document ID: chunk:federal_register_of_legislation:C2015C00053:clause:1_11
Version: federal_register_of_legislation:C2015C00053
Segment Type: clause
Provision Reference: sch 1 cl 11
Character Range: 62179–63134

11  Australian Privacy Principle 11—security of personal information
 11.1 If an APP entity holds personal information, the entity must take such steps as are reasonable in the circumstances to protect the information:
 (a) from misuse, interference and loss; and
 (b) from unauthorised access, modification or disclosure.
 11.2 If:
 (a) an APP entity holds personal information about an individual; and
 (b) the entity no longer needs the information for any purpose for which the information may be used or disclosed by the entity under this Schedule; and
 (c) the information is not contained in a Commonwealth record; and
 (d) the entity is not required by or under an Australian law, or a court/tribunal order, to retain the information;
the entity must take such steps as are reasonable in the circumstances to destroy the information or to ensure that the information is de‑identified.

Part 5—Access to, and correction of, personal information