Authentic statutory obligations decomposed into atomic machine-actionable conditions, actions, and verification standards.
An APP entity must take reasonable steps to protect personal information it holds from misuse, interference and loss, and from unauthorized access, modification or disclosure. Where an eligible data breach has occurred, the entity must notify affected individuals and the Commissioner as soon as practicable.
