s 76 Duty to maintain security and integrity of data
76.—(1) Subject to the provisions of this Part, the designated credit bureau must, in respect of any data that it receives from a licensee —(a) ensure the integrity of the data that the designated credit bureau processes (except where erasing or destroying such data); and (b) protect the data by making reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.[7/2018] (2) Without limiting subsection (1)(a), the designated credit bureau must update its information technology system or any of its books containing any data, at least once a day or at any other frequency that the Minister may prescribe.[7/2018] (3) For the purposes of subsection (1)(a), the integrity of any data of the designated credit bureau is assumed unless the designated credit bureau is required or directed to correct the data under section 78(2)(a), (3)(a), (5) or (6).[7/2018] (4) If the designated credit bureau without reasonable excuse contravenes subsection (1) or (2), the designated credit bureau shall be guilty of an offence and shall be liable on conviction —(a) to a fine not exceeding $250,000; and (b) in the case of a continuing offence, to a further fine not exceeding $25,000 for every day or part of a day during which the offence continues after conviction.[30X [7/2018]