Document background
A Data Processing Notice is a crucial compliance document required under New Zealand's Privacy Act 2020, which organizations must provide to individuals whose personal information they collect and process. This document serves as a transparent communication tool, explaining how an organization handles personal information, the purposes for collection, and the rights of individuals regarding their data. It should be used whenever an organization collects personal information from individuals, whether directly or indirectly, and must be easily accessible and understandable. The notice needs to address the 13 privacy principles outlined in the Privacy Act 2020 and should be updated regularly to reflect any changes in data processing practices or regulatory requirements. For organizations operating internationally, the notice can also incorporate elements that align with other privacy regulations while maintaining compliance with New Zealand law.
