National Transport Commission (Model Legislation—Intelligent Access Program) Regulations 2006
17IAP service providers’ obligations in regard to quality and security of IAP information
Start here
Get a plain-English read of 17
Turn the raw legal text into a practical explanation grounded in National Transport Commission (Model Legislation—Intelligent Access Program) Regulations 2006.
17 IAP service providers’ obligations in regard to quality and security of IAP information
(1) An IAP service provider must take reasonable steps to ensure that the IAP information it collects: (a) is necessary for, or is directly related to, the purpose for which it is collected, or a directly related purpose; and (b) is not excessive for that purpose; and (c) is accurate, up‑to‑date and complete.
Penalty: $6 000.
(2) An IAP service provider must take reasonable steps to ensure that the collection of IAP information does not intrude to an unreasonable extent on the personal privacy of any individual to whom the information relates. (3) If an individual (including an individual who is a participating operator) about whom an IAP service provider holds personal information so requests, an IAP service provider must make appropriate alterations to the personal information to ensure that the information is accurate, complete, up‑to‑date and not misleading (4) If the IAP service provider considers that the personal information the subject of such a request is not inaccurate, incomplete, out‑of‑date or misleading, it may refuse to comply with the request, but must then: (a) give the individual a statement in writing of its reasons for refusing; and (b) if the individual so requests, attach to, or include with, the information a statement by him or her.