99K—Keeping personal information listed
(1) A database
operator must not keep personal information about a particular person in the
operator's residential tenancy database for longer than—
(b) if,
under the national privacy principles, the operator of the database is
required to remove the personal information before the end of the 3 year
period mentioned in paragraph (a)—the period ending when the
information must be removed under the national privacy principles.
Maximum penalty: $35 000.
Expiation fee: $2 000.
(2) However, a
database operator may keep the person's name in the operator's
residential tenancy database for longer than the period stated in
subsection (1)(a) or (b) if—
(a)
other personal information about the person in the database is attached to the
name; and
(b) the
other personal information is not required to be removed under
subsection (1) or another law.
(3) This section does
not limit the operation of another provision of this Part or any other law
that requires the removal of the personal information.
(4) In this
section—
"national privacy principles" means the principles stated in Schedule 3
of the Privacy Act 1988 of the Commonwealth.