You are using a version of the website built for webcrawlers and people whose devices cannot use javascript. Some functionality may not be available.
Contents (1998 - 133)
Skip contents
Privacy and Personal Information Protection Act 1998 No 133
Current version for 1 July 2017 to date (accessed 20 September 2017 at 10:11)
Part 2 Division 1 Section 12
12   Retention and security of personal information
A public sector agency that holds personal information must ensure:
(a)  that the information is kept for no longer than is necessary for the purposes for which the information may lawfully be used, and
(b)  that the information is disposed of securely and in accordance with any requirements for the retention and disposal of personal information, and
(c)  that the information is protected, by taking such security safeguards as are reasonable in the circumstances, against loss, unauthorised access, use, modification or disclosure, and against all other misuse, and
(d)  that, if it is necessary for the information to be given to a person in connection with the provision of a service to the agency, everything reasonably within the power of the agency is done to prevent unauthorised use or disclosure of the information.