Information Privacy Act 2014

1.1 The object of this TPP is to ensure that public sector agencies manage personal information in an open and transparent way.

Compliance with the TPPs etc

1.2 A public sector agency must take reasonable steps to implement practices, procedures and systems relating to the agency’s functions or activities that—

will ensure that the agency complies with the TPPs and any TPP code that binds the agency; and

will enable the agency to deal with inquiries or complaints from individuals about the agency’s compliance with the TPPs or a code.

TPP privacy policy

1.3 A public sector agency must have a clearly expressed and up‑to‑date policy (the TPP privacy policy) about the management of personal information by the agency.

1.4 Without limiting TPP 1.3, the TPP privacy policy of the public sector agency must contain the following information:

the kinds of personal information that the agency collects and holds;

how the agency collects and holds personal information;

the purposes for which the agency collects, holds, uses and discloses personal information;

how an individual may access personal information about the individual that is held by the agency and seek the correction of the information;

how an individual may complain about a breach of the TPPs, or any TPP code that binds the agency, and how the agency will deal with the complaint;

whether the agency is likely to disclose personal information to overseas recipients;

if the agency is likely to disclose personal information to overseas recipients—the countries in which the recipients are likely to be located if it is practicable to state those countries in the policy.

Availability of TPP privacy policy etc

1.5 A public sector agency must take reasonable steps to make its TPP privacy policy available—

free of charge; and

in an appropriate form.

Example

on the agency’s website

1.6 If a person requests a copy of the TPP privacy policy of a public sector agency in a particular form, the agency must take reasonable steps to give the person a copy in that form.

Note Person includes a reference to a corporation as well as an individual (see Legislation Act, s 160).