Australian Privacy Principle 13 of the Privacy Act 1988 (Cth) provides that an organisation must take such steps as are reasonable in the circumstances to correct personal information it holds about an individual if it can be established that the information is not accurate, complete, up to date, or relevant or is misleading.