An intelligent access program service provider must ensure, so far as is reasonably practicable, intelligent access program information collected by the service provider is protected against unauthorised access, unauthorised use, misuse, loss, modification or unauthorised disclosure.
Maximum penalty—$20000.