Privacy Policy
Privacy Policy
The Privacy Act sets out 12 information privacy principles dealing with the collection, holding, use and disclosure of personal information, and the assigning of unique identifiers. The principles also give you a right to access information about yourself and to ask for it to be corrected.
The 12 principles and our application of each is as follows:
- Purpose of collection of personal information: Information must be collected for a lawful and necessary purpose.
- Source of personal information: We must collect personal information from you unless circumstances apply where this would not be reasonably possible.
- Collection of information from subject: We have obligations under this Principle to ensure that it provides full disclosure to the individual about all aspects of who will have access to the information and what the information will be used for.
- Manner of collection of personal information: We must collect personal information in a fair and lawful way which does not overly intrude into the personal affairs of the individual.
- Storage and Security of personal information: We must ensure that personal information is stored securely against loss and misuse.
- Access to personal information: We need to provide confirmation of whether it holds personal information and to allow access to the personal information it holds.
- Correction of personal information: An individual can request we correct personal information held.
- Accuracy, etc., of personal information to be checked before use: We must ensure that personal information it uses is accurate before disclosure or use.
- Agency not to keep personal information for longer than necessary: We cannot keep personal information for longer than required.
- Limits on use of personal information: We must use personal information for the purpose for which it was collected.
- Limits on disclosure of personal information: We must not disclose personal information to any other agency.
- Disclosure of personal information outside New Zealand: We may disclose personal information to a foreign person or entity if authorised by an individual.
- Unique identifiers: We may use a unique identifier, for example a Customer Number for an individual if it is necessary for us to carry out its functions in an efficient way.
For more information, please refer to the Privacy Commissioner's guide, to the Privacy Act 1993 and its amendments, or call the Privacy Commissioner's privacy hotline: (0800) 803 909.
