Proposed change: Add a sentence at the end of this paragraph The PIMS must address how personal information will be monitored throughout its lifecycle, from collection to secure destruction, including all processes, systems, applications, media (electronic or otherwise) and other organisations where the information may reside or pass through.