(1) The Screening Agency must ensure that information made available to other persons, bodies or organisations is:
(a) appropriate and relevant for the purposes of conducting a screening check; and
(b) made available only to authorised persons; and
(c) collected through lawful and fair means; and
(d) accurate, up-to-date, complete and not misleading; and
(e) made available in a timely manner.
(2) The Screening Agency must:
(a) take the steps that are reasonable in the circumstances to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure; and
(b) put in place formal information sharing processes and mechanisms that are reliable, robust and transparent.