Queensland Consolidated Regulations Queensland Consolidated Regulations(1) TCA must take reasonable steps to protect IAP information collected by it against unauthorised access, unauthorised use, misuse, loss, modification or unauthorised disclosure.
(2) TCA must take reasonable steps to destroy IAP information collected by it 1 year after the information is collected by it unless the information is required as evidence.
(3) TCA is taken to have complied with subsection (2) if it permanently removes anything by which an individual can be identified from the IAP information that it holds.