Privacy Act changes - in plain English!
A quick plain English update on the Privacy Act changes (1 December 2020).
It’s not everyone’s favourite subject – we thought you’d appreciate a few highlights from an employment perspective.
What’s actually changed?
-
A new principle that covers sending information overseas.
-
Three principles have been updated to reflect how we operate today, i.e. our use of technology.
-
If someone’s privacy is breached there is a new reporting process.
-
Overseas companies who collect data on New Zealanders (including on your behalf) need to comply with our new law.
-
The Privacy Commission has been given new enforcement measures, including fines of up to $10,000.
Ask yourself these general questions:
-
Are you confident that you only collect personal information that is necessary for you to know?
-
Are you clear about what personal information is being collected and for what purpose?
-
Are you confident that your data is being stored securely?
-
Are your team clear about privacy rules (relating to them in their role and personally)?
If it’s not needed, don’t collect it!
What do you need to do employment / people wise?
-
Update your Privacy Policy or Statement.
-
Update your Employment Agreements.
-
Set up a reportable breach process and confirm who is responsible for leading this.
-
Is your online presence (websites, social media) compliant?
-
Talk to your team about what has changed and what everyone is responsible for.
-
Before you do something people related, stop and think, does this meet my privacy obligations? If not, stop!
If you would like to know more, head to the Privacy Commissioner’s website. There is a 30 minute tutorial that covers the key points. https://www.privacy.org.nz/tools/online-privacy-training-free/