Personal Information and Privacy Policy
Responsibility for policy: Assistant Vice-Chancellor (Executive)
Approving authority: Vice-Chancellor
Last reviewed: May 2009
Next review date: May 2012
Application
- This policy applies to all staff of the University.
Purpose
- The purpose of this policy is to set out responsibilities with respect to the collection and management of personal information in accordance with the New Zealand Privacy Act 1993.
Related Documents
- This policy should be read in conjunction with the following information sources
- the Privacy Act 1993
- the website of the Privacy Commissioner
- the Staff Code of Conduct
- the Ethical Conduct in Human Research and Related Activities Regulations
Definitions
- In this policy, personal information means information about an identifiable individual.
Collection of Personal Information and Responsibilities
- The collection of personal information by staff of the University is governed by the New Zealand Privacy Act 1993.
- Staff who wish to collect, store, access or use personal information must adhere to the Information Privacy Principles contained in the Privacy Act, which are set out in the Appendix to this policy.
- Staff who wish to collect, store, access or use personal information must also comply with the detailed regulations relating to the archiving of data and privacy and storage of personal information, which are contained in the University's Ethical Conduct in Human Research and Related Activities Regulations and published in the University Calendar.
- Managers are responsible for ensuring that all systems, processes and practices in the areas for which they are responsible, conform with this policy.
- Any questions (by staff or students) about the interpretation of, or compliance with, the Privacy Act, must be referred to the Assistant Vice-Chancellor (Executive).
- Requests for information and complaints of interference with privacy under the Privacy Act (by staff or students) must be referred to the Assistant Vice-Chancellor (Executive).
Breaches
- If a breach of this policy is sufficiently serious, it may be dealt with as a breach of the Staff Code of Conduct.
Appendix
Information Privacy Principles
Approved by the Vice-Chancellor, 8 June 2009


