{"id":102,"date":"2026-09-01T23:50:18","date_gmt":"2026-09-01T23:50:18","guid":{"rendered":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/?page_id=102"},"modified":"2026-09-02T02:54:36","modified_gmt":"2026-09-02T02:54:36","slug":"elementor-page-102","status":"publish","type":"page","link":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/?page_id=102","title":{"rendered":"Privacy act"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Act 2020<\/h2>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t

Introduction-<\/h4>\n\t\t
\n\t\t\t\t\t

The Privacy Act 2020 is a New Zealand law that helps protect people\u2019s personal information. It explains what businesses, organisations and government agencies should do when they collect, store, use or share information about people.Personal information can include things like a person\u2019s name, address, phone number, email address, photograph, financial details or other information that can identify them.The Act is especially important in IT because most organisations now use computers, websites, databases and cloud systems to store information. IT workers need to make sure this information is handled safely and responsibly. The Privacy Act came into force on 1 December 2020 and replaced the Privacy Act 1993. <\/p>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t
<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t

Why Is the Privacy Act Important?<\/h3>\n\t\t\t\t\t

The Privacy Act is important because people should have some control over their personal information
For example, when someone creates an account on a website, the company might ask for their:
Name
Email address
Phone number*
Address
Date of birth*
Payment information.
The organisation should have a good reason for collecting this information and should explain how it will be used.
The Act also helps people to -
Know when their information is being collected
* Understand why their information is needed
* Access information held about them
* Ask for incorrect information to be corrected
* Have their information protected from misuse
* Expect their information to be handled appropriately <\/p>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t

Principle 1 \u2013 Purpose of Collection<\/h3>\n\t\t\t\t\t

Organisations should only collect personal information when they have a genuine and lawful reason for needing it.For example, an online store may need a customer\u2019s name and delivery address to send an order. However, it should not collect extra personal information if it is not needed. This means organisations should think carefully about what information they really need before collecting it.

<\/p>\n\t\t\t\t\t

Principle 2 \u2013 Source of Information<\/h3>\n\t\t\t\t\t

Personal information should normally be collected directly from the person it is about. For example, if a company needs your phone number, it will normally ask you directly instead of getting it from another person. There are some situations where information can legally be collected from another source, such as when the person has given permission or the information is publicly available.
<\/p>\n\t\t\t\t\t

Principle 3 \u2013 Being Open About Collection<\/h3>\n\t\t\t\t\t

when an organisation collects information directly from someone, it should explain what information it is collecting and why it needs it.For example, when signing up for a website, a privacy notice might explain:
What information is being collected*
Why it is needed*
How it will be used*
Who may receive it
What rights the person has
This helps people make an informed decision about providing their information.\u2e3b
Principle 3A \u2013 Information Collected From
Another SourcePrinciple 3A is a newer requirement that came into force on 1 May 2026. It applies when an organisation collects personal information about someone from another source rather than directly from that person. In these situations, the organisation generally needs to take reasonable steps to make the person aware that their information was collected.They may need to explain:* That their information was collected* Why it was collected* Who may receive it* Which organisation collected it* Which organisation is holding it* Their rights to access and correct the information There are exceptions to this requirement in some situations.<\/p>\n\t\t\t\t\t

Privacy and IT<\/h2>\n\t\t\t\t\t

The Privacy Act is closely connected to the IT industry.IT professionals may work with:* Websites* Customer databases* Employee records* Cloud storage* Mobile applications* Online accounts* Payment systems* Email systems* Health information Because of this, privacy should be considered when a system is being designed, not only after a privacy problem occurs. For example, when creating a registration form, a developer should ask: \u201cDo we really need all this information?\u201d If the answer is no, the information should not be collected unnecessarily.
IT professionals should also make sure that databases are secure and that only authorised people can access private information.<\/p>\n\t\t\t\t\t

M\u0101ori Data Sovereignty<\/h2>\n\t\t\t\t\t

Privacy can also be understood from a M\u0101ori perspective.M\u0101ori data sovereignty is about M\u0101ori rights and interests in relation to M\u0101ori data. It recognises that data can have importance not only to individual people but also to wh\u0101nau, hap\u016b, iwi and M\u0101ori communities.M\u0101ori data can include information about:
* M\u0101ori people
* Whakapapa
* Te reo M\u0101ori
* M\u0101ori culture
* M\u0101ori communities
* M\u0101ori resources and environments
* M\u0101tauranga M\u0101oriTe Mana Raraunga describes M\u0101ori data as information or knowledge about or from M\u0101ori people, language, culture, resources and environments. It also promotes M\u0101ori governance over M\u0101ori data. This means that organisations should think carefully about how M\u0101ori data is collected, stored, accessed and shared.<\/p>\n\t\t\t\t\t

Te Mana Raraunga<\/h2>\n\t\t\t\t\t

Te Mana Raraunga is the M\u0101ori Data Sovereignty Network.It promotes M\u0101ori rights and interests in data and supports the safe and ethical use of data for M\u0101ori people, language and culture.
It also supports M\u0101ori governance over M\u0101ori data.
Some of the principles connected with M\u0101ori data sovereignty include
- Rangatiratanga \u2013 authority and control* Whakapapa \u2013 relationships* Whanaungatanga \u2013 relationships and responsibilities* Kotahitanga \u2013 collective benefit
* Manaakitanga \u2013 care and reciprocity
* Kaitiakitanga \u2013 guardianship These ideas show that protecting data can be about more than passwords and computer security. It can also involve relationships, culture, responsibility and who has authority over information.
The Office of the Privacy Commissioner also recognises that tikanga M\u0101ori and te ao M\u0101ori perspectives can be important when considering privacy and sensitive personal information.<\/p>\n\t\t\t\t\t

Refernce-<\/h3>\n\t\t\t\t\t

Office of the Privacy Commissioner. (2026). Privacy Act 2020. Office of the Privacy Commissioner \u2013 Privacy Act 2020\u2060,
Te Mana Raraunga. (n.d.). M\u0101ori Data Sovereignty Network. Te Mana Raraunga<\/p>\n\t\t\t\t\t

<\/h2>\n\t\t\t\t\t

<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Privacy Act 2020 Introduction- The Privacy Act 2020 is a New Zealand law that helps protect people\u2019s personal information. It explains what businesses, organisations and government agencies should do when they collect, store, use or share information about people.Personal information can include things like a person\u2019s name, address, phone number, email address, photograph, financial details […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-102","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages\/102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=102"}],"version-history":[{"count":9,"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages\/102\/revisions"}],"predecessor-version":[{"id":126,"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=\/wp\/v2\/pages\/102\/revisions\/126"}],"wp:attachment":[{"href":"https:\/\/wordpress.ishmit.dipwww.visioncollege.ac.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}