Privacy Principles

Question 1

What section are the IPPs in

Answer 1

Section 22

Question 2

What is the definition of “personal information”?

Answer 2

Information about an identifiable individual, including information relating to death

Question 3

What is the “Purpose of collection of personal information” principle?

Answer 3

IPP 1 - data minimisation.

Agencies must only collect PI for a lawful purpose connected with their functions and activities.

Question 4

What’s the “Source of personal information” principle

Answer 4

IPP2 - if an agency collects PI it must collect it from the individual concerned

Question 5

Are there exceptions to IPP2?

Answer 5

Yes - examples are where an agency reasonably believes:

• doing so would not prejudice the individual’s interests
• doing otherwise would prejudice the purpose of collection
• that the individual had authorised third party collection
• legal and public sector reasons
• impracticality

Question 6

What is IPP3?

Answer 6

Collection of information from subject - agency must take steps to ensure the individual knows the:

• why?
• what?
• where?
• consequences of not providing information
  rights

Question 7

What does s23 provide?

Answer 7

Agency does not breach IPPs for personal information overseas if it discloses under or required by the law of a jurisdiction other than NZ

Question 8

What’s the section related to personal information stored overseas?

Answer 8

Section 23

Question 9

What’s the rule and section of PA2020 relating to PI stored overseas?

Answer 9

Section 23 - agency does not breach IPPs for personal information overseas if it discloses under or required by the law of a jurisdiction other than NZ

Question 10

What does IPP 12 relate to?

Answer 10

Disclosure of PI outside NZ. An agency can only rely on the disclosure principles in IPP11 if IPP 12(1) applies