10.1 An organisation must take such steps (if any) as are reasonable in the circumstances to ensure that the personal information that the entity collects is accurate, up-to-date, complete and relevant to its purpose.  According to the OAIC, what steps are reasonable depends not only upon circumstances, but on the sensitivity of the information and the nature of the organisation.

​

10.2 If the source of information is known to be reliable, then it may be reasonable to take no steps. (See definition of reasonable steps).

​