QLDIn ForceAct
Information Privacy Act 2009
sch.3-sec.11QPP 11—security of personal information
Start here
Get a plain-English read of sch.3-sec.11
Turn the raw legal text into a practical explanation grounded in Information Privacy Act 2009.
### sch.3-sec.11 QPP 11—security of personal information
If an agency holds personal information, the agency must take reasonable steps to protect the information—
from misuse, interference or loss; and
from unauthorised access, modification or disclosure.
If—
an agency holds personal information about an individual; and
the agency no longer needs the information for a purpose for which the information may be used or disclosed by the agency under the QPPs; and
the information is not contained in a public record; and
the agency is not required under an Australian law, or a court or tribunal order, to retain the information;
the agency must take reasonable steps to destroy the information or to ensure the information is de-identified.
sch 3 s 11 amd 2017 No. 17 s 129
sub 2023 No. 32 s 74
(sch.3-sec.11-ssec.11.1) If an agency holds personal information, the agency must take reasonable steps to protect the information— from misuse, interference or loss; and from unauthorised access, modification or disclosure.
(sch.3-sec.11-ssec.11.2) If— an agency holds personal information about an individual; and the agency no longer needs the information for a purpose for which the information may be used or disclosed by the agency under the QPPs; and the information is not contained in a public record; and the agency is not required under an Australian law, or a court or tribunal order, to retain the information; the agency must take reasonable steps to destroy the information or to ensure the information is de-identified.
- (a) from misuse, interference or loss; and
- (b) from unauthorised access, modification or disclosure.
- (a) an agency holds personal information about an individual; and
- (b) the agency no longer needs the information for a purpose for which the information may be used or disclosed by the agency under the QPPs; and
- (c) the information is not contained in a public record; and
- (d) the agency is not required under an Australian law, or a court or tribunal order, to retain the information;