{"id":14,"date":"2026-08-31T21:35:45","date_gmt":"2026-08-31T21:35:45","guid":{"rendered":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/?page_id=14"},"modified":"2026-09-09T02:24:13","modified_gmt":"2026-09-09T02:24:13","slug":"home","status":"publish","type":"page","link":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/","title":{"rendered":"The Privacy Act 2020 (NZ)"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n \t\t\t\"\"\/\t\t\n<\/div>\n
\n \t\t\t

Overview of Privacy Act 2020(NZ)<\/h2>\n\t\t\t\t\t

The Privacy Amendment Act 2025 brought into force information privacy principle (IPP) 3A from 1 May 2026, adding to the Privacy Act\u2019s set of 13 IPPs. IPP3A is a new notification obligation, covering the collection of personal information other than from the individual concerned (that is, indirect collection). It sits alongside the existing notification obligation IPP3, covering collection of information from the individual concerned. To avoid any confusion, the set of IPPs is still numbered 1-13 with new IPP 3A being inserted to follow IPP3. We will be gradually updating our website content as resources allow to reflect this change. We have guidance on the new IPP3A. A number of codes of practice have also been amended following consultation to include new rule 3A.<\/strong><\/p>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tLearn More<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n
\n \t\t\t

Principles of Privacy Act 2020\u200b<\/strong><\/h2>\n\t\t\t\t\t

Principle 1 - Purpose for collection-<\/strong>
<\/strong>Principle 1 states that organisations must only collect personal information if it is for a lawful purpose connected with their functions or activities,and the information is necessary for that purpose. This principle is about data minimisation.<\/a>

Principle 2 - Source of personal information-<\/strong>
<\/strong>Principle 2<\/a> states that personal information should be collected directly from the person it is about. The best source of information about a person is usually the person themselves. Collecting information from the person concerned means they know what is going on and have some control over their information.

Principle 3 - Manner of collection<\/strong>
Principle 3<\/a> states that personal information must be collected in a way that is lawful and seen as fair and reasonable in the circumstances.

Principle 4 - Storage and security of information<\/strong>
Principle 4<\/a> states that organizations must ensure there are safeguards in place that are reasonable in the circumstances to prevent loss, misuse or disclosure of personal information.

Principle 5 - Access to personal information<\/strong>
Principle 5<\/a> states that people have a right to ask for access to their own personal information.

Principle 6 - Correction of personal information<\/strong>
Principle 6<\/a> states that a person has a right to ask an organization or business to correct information about them if they think it is wrong.

Principle 7 - Accuracy of personal information<\/strong>
Principle 7<\/a> states that an organization must check before using or disclosing personal information that it is accurate, up to date, complete, relevant and not misleading.

Principle 8 - Retention of personal information<\/strong>
Principle 8<\/a> states that an organization should not keep personal information for longer than it is required for the purpose it may lawfully be used.<\/p>\n\t\t\n<\/div>\n

\n \t\t
\n\t\t\t\t\t

Relevance to IT Practices<\/h2>\t\t\t\t<\/div>\n\t\t\t\t\t

Data Collection:<\/strong> Enforces data minimization; IT systems should only capture required user identifiers.

Data Storage:<\/strong> Mandates robust encryption, access controls, and secure local or cloud environments.

Data Sharing:<\/strong> Requires explicit legal authority or clear individual consent before transferring data between systems or third parties.

<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Alignment with M\u0101ori Data Sovereignty (Te Mana Raraunga)<\/h2>\n\t\t\t\t\t

Data as Taonga:<\/strong> Recognizes that M\u0101ori data is a treasured cultural asset (taonga<\/em>) requiring high-level stewardship rather than mere ownership.

Core Principles Integration:<\/strong> Aligns with Rangatiratanga<\/em> (authority\/control), Kotahitanga<\/em> (guardianship), and Kotahitanga<\/em> (collective benefit) in data ecosystems.

Protection Importance:<\/strong> Prevents culturally insensitive analysis, misuse, or overseas cloud vulnerabilities (such as foreign subpoena laws) that compromise indigenous self-determination. <\/p>\n\t\t\n<\/div>\n

\n \t\t\t

NZ\u2019s Cybersecurity Strategy 2019<\/h2>\n\t\t\t\t\t

Vision and Objectives<\/strong>

Vision:<\/strong> \"New Zealand is confident and secure in the digital world\".

Goals:<\/strong> Achieve broad cyber resilience, build local capability, counter cybercrime, and foster international cooperation. <\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Core Components \/ Priority Areas<\/h2>\n\t\t\t\t\t

Aware and Active Citizens:<\/strong> Elevating national cyber literacy so everyday users recognize and mitigate digital risks.

Resilient and Responsive NZ:<\/strong> Hardening government networks, critical infrastructure, and business supply chains against intrusions.

Workforce and Ecosystem:<\/strong> Investing in trained cybersecurity professionals and research initiatives.

Tackling Cybercrime:<\/strong> Enhancing legal mechanisms and law enforcement coordination.

Internationally Active:<\/strong> Working with global allies to deter malicious actors.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Guidance for Organizations<\/h2>\n\t\t\t\t\t

Risk Management:<\/strong> Encourages structured evaluations to address gaps between current and desired security postures.

Collaboration:<\/strong> Promotes information sharing regarding active threats between industry sectors and government bodies.

Preparedness:<\/strong> Urges entities to implement baseline technical controls, incident response playbooks, and continuous staff training.

If you'd like, I can provide:

Specific details onInformation Privacy Principles (IPPs) 8 through 13<\/strong>

A deeper breakdown of M\u0101ori data governance frameworks<\/strong>

Actionable steps for business cyber compliance<\/strong> in New Zealand<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Refrences - https:\/\/www.privacy.org.nz\/privacy-principles\/<\/p>\n\t\t\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Overview of Privacy Act 2020(NZ) The Privacy Amendment Act 2025 brought into force information privacy principle (IPP) 3A from 1 May 2026, adding to the Privacy Act\u2019s set of 13 IPPs. IPP3A is a new notification obligation, covering the collection of personal information other than from the individual concerned (that is, indirect collection). It sits […]<\/p>\n","protected":false},"author":1,"featured_media":27,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-14","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages\/14","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14"}],"version-history":[{"count":62,"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages\/14\/revisions"}],"predecessor-version":[{"id":212,"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages\/14\/revisions\/212"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/media\/27"}],"wp:attachment":[{"href":"https:\/\/wordpress.jashan.dipwww.visioncollege.ac.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}