(1) A database operator must not keep personal information in the operator’s residential tenancy database for longer than:(a) if the national privacy principles require the operator to remove the personal information within a stated period of less than 3 years—the stated period, or(b) in any other case—3 years.(2) However, this section does not apply to a person’s name if it is necessary to keep the name in the residential tenancy database for the purposes of other personal information about the person in the database that is not required to be removed under this section or another law.(3) This section does not limit the operation of this Act or any other law that requires the removal of the personal information.(4) In this section:
national privacy principles means the principles stated in the Privacy Act 1988 of the Commonwealth.