Personal information should not be retained any longer than is reasonably necessary, and then disposed of appropriately.

Agencies must ensure the accuracy of personal information before using it.

There are limited circumstances in which an agency may use and disclose personal information, including overseas.

Agencies may assign their own unique identifiers to personal information they hold about an individual, but must not use existing unique identifiers to announce their records.

Articles Related to 'Retention, Accuracy, Disclosure, and Unique Identifiers'

Principle 8 - Accuracy

An agency that holds personal information must not use or disclose that information without taking any steps that are, in the circumstances, reasonable to ensure that the information is accurate, up to date, complete, relevant, and not misleading.

Principle 9 - Retention and Destruction

An agency that holds personal information must not keep that information for longer than is required for the purposes for which the information may lawfully be used.

Principle 10 - Use

An agency that holds personal information that was obtained in connection with one purpose may not use the information for any other purpose unless an exception applies.

Principle 11 - Disclosure

An agency that holds personal information must not disclose the information to any other agency or person unless an exception applies.

Principle 12 - Offshore Disclosure

An agency may disclose personal information to a foreign person or entity in reliance on IPP11 (disclosure) in a limited number of circumstances.

Principle 13 - Unique Identifiers

An agency may assign a unique identifier to an individual for use in its operations only if that identifier is necessary to enable the agency to carry out one or more of its functions efficiently. An agency may not assign an identifier that is the same as has been assigned by another agency to that individual.