16Records must be protected from misuse etc.

#### 16 Records must be protected from misuse etc. (1A) This section applies in relation to a record of one or more of the following: (a) student identifiers; (b) schools identifiers; (c) school identity management information. (1) The Registrar must take reasonable steps to protect any such record kept by the Registrar: (a) from misuse, interference and loss; and (b) from unauthorised access, modification or disclosure. (2) If any other entity keeps such a record, the entity must take reasonable steps to protect the record: (a) from misuse, interference and loss; and (b) from unauthorised access, modification or disclosure. (3) Subsection (2) does not apply to an individual who keeps a record of the student identifier, schools identifier or school identity management information of the individual. > Note: A contravention of this section is taken to be an interference with the privacy of an individual for the purposes of the Privacy Act 1988 (see section 23 of this Act).