Privacy and security

• What is personal information and the Privacy Act?

  Data can contain values that identify a specific individual. This is called 'personal information' in New Zealand but is sometimes referred to as Personal Identifiable Information (PII). The Privacy Act 1993 controls how 'agencies' collect, use, disclose, store and give access to personal information. The Privacy Act applies to almost every person, business or organisation in New Zealand.

• How to carry out a privacy impact assessment on your dataset

  A privacy impact assessment (PIA) is a tool used by agencies to help them identify and assess the privacy risks arising from their collection, use or handling of personal information. A PIA will also propose ways to mitigate or minimise these risks.

• Controlling access to your data to keep it safe

  Protecting the information people supply is essential to retaining their trust and confidence. Without cooperation, willingness to provide data can be too low and threaten its accuracy or the usefulness. Protecting confidentiality increases public confidence in the data system.

• Managing people’s requests to correct data you hold about them

  If you collect information about people you may get requests to correct that information. Knowing your responsibilities and having a system for managing corrections will improve data quality and ensure your legal responsibilities are fulfilled.

• Understanding data confidentiality