Data can contain values that identify a specific individual. This is called 'personal information' in New Zealand but is sometimes referred to as Personal Identifiable Information (PII). The Privacy Act 1993 controls how 'agencies' collect, use, disclose, store and give access to personal information. The Privacy Act applies to almost every person, business or organisation in New Zealand.
A privacy impact assessment (PIA) is a tool used by agencies to help them identify and assess the privacy risks arising from their collection, use or handling of personal information. A PIA will also propose ways to mitigate or minimise these risks.
Protecting the information people supply is essential to retaining their trust and confidence. Without cooperation, willingness to provide data can be too low and threaten its accuracy or the usefulness. Protecting confidentiality increases public confidence in the data system.
If you collect information about people you may get requests to correct that information. Knowing your responsibilities and having a system for managing corrections will improve data quality and ensure your legal responsibilities are fulfilled.