The Privacy Act 2020

The Privacy Act 2020 provides principles that guide the collection, storage and disclosure of personal information.  If you collect information about your clients then this Act applies to you.

  • Collection – Information cannot be collected unless it is relevant to the reason for collection.  For example, if a driver’s licence is not required, questions relating to a client having a driver’s licence should not be asked.

  • Direct request – Information should always be asked directly of the applicant unless the applicant gives permission otherwise. It is not appropriate to ask for information about a client from third party sources without the client’s consent.

  • Storage – Information must be stored in such a way that it is secure and will not be disclosed to third parties.

  • Disclosure – Information about a client cannot be disclosed to third parties without the client’s permission unless legislative exception applies, i e., the Police.