Section Sch6-6 — Privacy Act 2020: No new databank

6 No new databank (1) Subject to subclauses (2) and (3), the agencies involved in an authorised information matching programme must not permit the information used in the programme to be linked or merged in such a way that a new separate permanent register or databank of information is created about all or any of the individuals whose information has been subject to the programme. (2) Subclause (1) does not prevent an agency from maintaining a register of individuals in respect of whom further inquiries are warranted following a discrepancy revealed by the programme, but information relating to an individual may be maintained on a register of that kind only for so long as is necessary to enable those inquiries to be carried out, and in no case longer than is necessary to enable any adverse action to be taken against an individual. (3) Subclause (1) does not prevent an agency from maintaining a register for the purpose of excluding individuals from being selected for investigation, but that register may contain only the minimum amount of information necessary for that purpose.