Trans-Tasman Mutual Recognition Act 1997

A local registration authority who has possession or control of a record that contains personal information must ensure—

that the record is protected, by such security safeguards as it is reasonable in the circumstances to take, against loss, against unauthorised access, use, modification or disclosure, and against other misuse; and

that if it is necessary for the record to be given to a person in connection with the provision of a service to the local registration authority, everything reasonably within the power of the authority is done to prevent unauthorised use or disclosure of information contained in the record.