Queensland Consolidated Regulations(1) An IAP service provider must keep, in a way complying with subsection (2), records of the IAP information that the IAP service provider collects.
Maximum penalty--60 penalty units.
(2) Records kept under subsection (1) must be organised in a way that allows the records to be conveniently and properly audited.
(3) An IAP service provider must keep--
(a) a copy of a noncompliance report made by an approved intelligent transport system used by the IAP service provider; and
(b) the information that was relied on to make the report;
for at least 4 years after the report is made.
Example of information that was relied on to make the report--
GPS information about a vehicle's position at a particular time
Maximum penalty--60 penalty units.
(4) An IAP service provider must take reasonable steps to protect IAP information collected by the IAP service provider against unauthorised access, unauthorised use, misuse, loss, modification or unauthorised disclosure.
Maximum penalty--60 penalty units.
(5) An IAP service provider must take reasonable steps to destroy IAP information held by the IAP service provider, other than information required to be kept under subsection (3), 1 year after the information is collected by the IAP service provider.
Maximum penalty for subsection (5)--60 penalty units.