Our website uses cookies to give you the best experience and for us to analyse our site usage. If you continue to use our site, we will take it you are OK about this. Click on More for information about the cookies on our site and what you can do to opt out.

We respect your Do Not Track preference.

On this section of the site, you'll find our publications and collections of research material. Look at the links on the left hand side of this page for the different categories of information. If you want to look for material on a particular topic, use the general search button or advanced search link (both available at the top of this page).

Latest in News and publications

Displaying 1161 - 1170 of 1173

Privacy Impact Assessment Handbook

Use of privacy impact assessments is an effective way to better privacy risks and is increasingly being used here and internationally.

Effective website privacy notices

Giving notice to website visitors about how your agency collects and uses personal information is good practice. An effective approach to this task is to use a layered privacy notice, and we have recommended '10 Steps to develop a multilayered privacy notice' as a source of detailed information.

Now, based upon continuing collaboration with a small group of NZ agencies who are piloting the layered notice approach, the Office of the Privacy Commissioner has published 'Questions & An...

Health Information Privacy Fact Sheet 1 : Overview

Health Information Privacy Code 1994

The code regulates how health agencies (such as doctors, nurses, pharmacists, health insurers, Primary Health Organisations and District Health Boards) collect, hold, use and disclose health information about identifiable individuals.

Key concepts in the code

The two key concepts in the code are:

  • Purpose: Agencies must know why they are collecting health information and co...

Health Information Privacy Fact Sheet 2 : Collection of health information

Health Information Privacy Code 1994

The code regulates how health agencies (such as doctors, nurses, pharmacists, health insurers, Primary Health Organisations and District Health Boards) collect, hold, use and disclose health information about identifiable individuals.

Key concepts in the code

The two key concepts in the code are:

  • Purpose: Agencies must know why they are collecting health information and co...

Health Information Privacy Fact Sheet 3 : Disclosure of health information - the basics

Health Information Privacy Code 1994

The code regulates how health agencies (such as doctors, nurses, pharmacists, health insurers, Primary Health Organisations and District Health Boards) collect, hold, use and disclose health information about identifiable individuals.

Rule 11

Rule 11 of the code prohibits disclosure except where one or more of its exceptions apply. The rule is quite detailed, and this...

Health Information Privacy Fact Sheet 4 : Dealing with requests for health information

Health Information Privacy Code 1994

The code regulates how health agencies (such as doctors, nurses, pharmacists, health insurers, Primary Health Organisations and District Health Boards) collect, hold, use and disclose health information about identifiable individuals.

Dealing with requests

Health agencies are often asked to disclose health information. The code always allows anonymised or statistical i...

Health Information Privacy Fact Sheet 5 : Storage, security, retention and disposal of health information

Health Information Privacy Code 1994

The code regulates how health agencies (such as doctors, nurses, pharmacists, health insurers, Primary Health Organisations and District Health Boards) collect, hold, use and disclose health information about identifiable individuals.

Storage and security

One of the obligations that health agencies take on when they hold health information is to keep that information secure.

Rul...

Privacy Live Forum presentations

How we define personal information - 29 March 2017 (Wellington)  Former Assistant Privacy Commissioner Katrine Evans will be exploring some recent developments in how we define personal information when we kick off our PrivacyLive speaker series this month.

Katrine, who joined Hayman Lawyers in 2015, notes the definition of personal information keeps on expanding and expanding. Is browser-generated information personal information? What about metadata produced as part...