30TCA’s obligation to make individuals aware of personal information held

30 TCA’s obligation to make individuals aware of personal information held

(1) TCA must prepare, and make publicly available, a document that sets out its policies on the management of information. (2) If an individual so requests, TCA must take reasonable steps to inform him or her of: (a) the kinds of information it holds about him or her; and (b) the purpose for which the information is held; and (c) the way in which it collects, holds, uses and discloses the information; and (d) the persons and authorities to whom or to which the information may be disclosed; and (e) that the collection of the information is authorised by this Act; and (f) that he or she has the rights of reasonable access to, and of correction of, the information, and how those rights can be exercised. (3) TCA must, on request by an individual about whom TCA holds personal information, give him or her access to the information, and must do so without undue delay or cost. (4) With the consent of a participating operator, TCA may use or disclose IAP information about the operator for any purpose if the information: (a) does not identify any individual; and (b) contains nothing by which the identity of any individual can reasonably be ascertained.