Schedule 8 of the Privacy Act 2020 provides for the collection limitation principle and the security safeguards principle. Any personal data should be obtained with the knowledge and consent of the data subject. Personal data should be protected by reasonable security safeguards against such risks as loss or unauthorised access, destruction, use, modification or disclosure of data.                                                                                                                                                                                                       