CTHRepealedLegislation
Privacy Act 1988 - Guidelines approved under section 95A - December 2001
4Data security
Start here
Get a plain-English read of 4
Turn the raw legal text into a practical explanation grounded in Privacy Act 1988 - Guidelines approved under section 95A - December 2001.
4 Data security
4.1 An organisation must take reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure.
4.2 An organisation must take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose for which the information may be used or disclosed under National Privacy Principle 2.