You are using a version of the website built for webcrawlers and people whose devices cannot use javascript.
Some functionality will not be available.
Warning: This page is an archive.
General administrative information and links are not current and should not be used.
Contents (1998 - 133)
Privacy and Personal Information Protection Act 1998 No 133
Current version for 15 December 2017 to date (accessed 27 May 2018 at 07:43)
Part 2 Division 1 Section 12
12   Retention and security of personal information
A public sector agency that holds personal information must ensure:
(a)  that the information is kept for no longer than is necessary for the purposes for which the information may lawfully be used, and
(b)  that the information is disposed of securely and in accordance with any requirements for the retention and disposal of personal information, and
(c)  that the information is protected, by taking such security safeguards as are reasonable in the circumstances, against loss, unauthorised access, use, modification or disclosure, and against all other misuse, and
(d)  that, if it is necessary for the information to be given to a person in connection with the provision of a service to the agency, everything reasonably within the power of the agency is done to prevent unauthorised use or disclosure of the information.