Principle 4 –Storage and Security of personal information
A record-keeper who has possession or control of a record that contains personal information shall ensure:
(a) that the record is protected, by such security safeguards as it is reasonable in the circumstances to take, against loss, against unauthorised access, use, modification or disclosure, and against other misuse; and
(b) that if it is necessary for the record to be given to a person in connection with the provision of a service of the record keeper, everything reasonably within thde power of the record keeper is done to prevent unauthorised use or disclosure of information contained in the record
http://www.privacy.gov.au/materials/types/download/8704/6541 |