Queensland Consolidated Regulations Queensland Consolidated Regulations(1) TCA must prepare, and make publicly available, a document that sets out its policies on the management of personal information held by it.
Examples of how a document is made publicly available--
making a document available at TCA's office
making a document available on the IAP website
(2) If asked by an individual about whom TCA holds personal information, it must, within 28 days after receiving the request, give the individual the following information if it can reasonably give the information--
(a) the kinds of information it holds about the individual;
(b) the purpose for which the information is held;
(c) the way in which it collects, holds, uses and discloses the information;
(d) the persons and entities to whom the information may be disclosed;
(e) that the collection of the information is authorised under this part;
(f) that, under this part, the individual has rights of access to the information or to have the information changed to ensure it is accurate, up-to-date and complete;
(g) how the rights mentioned in paragraph (f) can be exercised.
(3) TCA does not fail to comply with subsection (2) if--
(a) it is not possible for TCA to give the individual the information required to be given under subsection (2) (the required information) within 28 days after receiving the request; and
(b) TCA--
(i) within 28 days after receiving the request, gives the individual an interim reply that--
(A) gives the individual as much of the required information as TCA can give within the 28 days; and
(B) states the reason TCA can not give the individual the rest of the required information; and
(C) states an estimate of how long it will take TCA to give the individual the rest of the required information; and
(ii) as soon as possible after the interim reply is given to the individual, takes reasonable steps to give the individual the rest of the required information.
(4) TCA must, if asked by an individual about whom TCA holds personal information, give the individual access to the personal information without undue delay or cost.
(5) Subsection (2), (3) or (4) does not require TCA--
(a) to inform an individual that a report under section 55T or 55U exists or has been made; or
(b) to give an individual access to the report.