Compliance comment - Utility providers' poor ID verification processes lead to customer harm
We've had notifications of privacy breaches from utilities providers - sometimes only coming to light when the affected individual had already been harmed.
2 = Site map
3 = New on the website
4 = About OPC
5 = The Privacy Act 1993
6 = Your privacy rights
7 = Your responsibilities
8 = Data breaches
-
Privacy Act 2020
- Principle 1 - Purpose for collection of personal information
- Principle 2 - Source of personal information - collect it from the individual
- Principle 3 - Collection of information from subject - what to tell the individual
- Principle 4 - Manner of collection
- Principle 5 - Storage and security of information
- Principle 6 - Access to personal information
- Principle 7 - Correction of personal information
- Principle 8 - Accuracy of personal information
- Principle 9 - Retention of personal information
- Principle 10 - Limits on use of personal information
- Principle 11 - Disclosure of personal information
- Principle 12 - Disclosure outside New Zealand
- Principle 13 - Unique identifiers
- Codes of practice
- New Zealand - EU data protection adequacy
- Section 30 authorisations
- Comparing the Privacy Acts - 1993 and 2020
-
Your privacy rights
- Protect your personal information
- What are your privacy rights?
- Ask for your information
- AboutMe (Request My Info Tool)
- Correct your information
- Sorting out privacy problems
- Complain to another agency
- Complain to the Privacy Commissioner
- How we settle complaints
- Conciliations
- How we'll work together
- Other complaint options
- The Human Rights Review Tribunal
- Reasons we won't investigate
- Your responsibilities
- Resources and learning
- Tūhono│Connect
- About OPC
- Focus areas