The Privacy Act 2020 (NZ)

The purpose of this Act is to promote and protect individual privacy by— (a) providing a framework for protecting an individual’s right to privacy of personal information, including the right of an individual to access their personal information, while recognising that other rights and interests may at times also need to be taken into account; and (b) giving effect to internationally recognised privacy obligations and standards in relation to the privacy of personal information, including the OECD Guidelines and the International Covenant on Civil and Political Rights.

(New Zealand Legislation / New Zealand government)

privacy act

Some important principles are

Principle 1   - Purpose for collection
Principle 2   - Source of information - collection from the individual
Principle 3   - what to tell the individual when you collect their information directly
Principle 3A - What to tell the individual when you collect their information from another source
Principle 4   - Manner of collection
Principle 5   - Storage and security of information
Principle 6   - Providing people access to their information
Principle 7   - Correction of personal information
Principle 8   - Ensure accuracy before using information
Principle 9   - Limits on retention of personal information
Principle 10 - Use of personal information
Principle 11 - Disclosing personal information
Principle 12 - Disclosure outside New Zealand
Principle 13 - Unique identifiers

(Office of the privacy Commissioner)

Importance for IT

The Privacy Act 2020 is important in IT because organisations collect and store personal information through websites, databases, applications and cloud systems. This information can include names, addresses, phone numbers, email addresses and other personal details. IT professionals need to make sure this information is collected for a proper purpose and kept safe from unauthorised access, loss or misuse. They should also use suitable security measures, such as passwords, access controls and secure systems. Personal information should only be used or shared when there is a valid reason. Following the Privacy Act helps organisations protect people’s privacy and build trust with their customers and users.

Author: Office of the Privacy Commissioner (NZ)

Maori Data Sovereignty

Māori Data Sovereignty recognises that Māori data should be subject to Māori governance. Māori data sovereignty supports tribal sovereignty and the realisation of Maori and Iwi aspirations.

(Te Mana Raraunga)

act nz

Reference List (APA style)
Privacy Act 2020
.https://www.legislation.govt.nz/act/public/2020/0031/latest/LMS23227.html
Office of the Privacy Commissioner. (n.d.). Privacy Act 2020 – Privacy principles.
https://www.privacy.org.nz/privacy-principles/
Te Mana Raraunga. (n.d.). What is Māori data sovereignty?
https://www.temanararaunga.maori.nz/