Personal Information Security
Mandates that APP entities take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including obligations to destroy or de-identify information in certain situations.