security of information
security of information
The minimum standards of physical, personnel, network and communications security you are expected to maintain should be consistent with the standards outlined in the New Zealand Information Security Manual located in the following link.
NZ Information Security Manual
No information is to be disclosed to other agencies, bodies or persons unless specifically authorised by the Ministry.Further support
If you require further clarification at any stage regarding the collection, storage, use, and disposal of information relating to the Youth Service it is important you contact YSSU.
privacy act 2020
The Privacy Act controls how agencies and organisations are allowed to collect, use, store and give access to personal information.
The sharing of information for the purposes of the Youth Service overrides Principles 10 and 11 of the Privacy Act. This has been authorised under the Social Security Act.
Any information collection, storage, use or disclosure not specifically authorised by that Act will comply with the Privacy Act 2020 (“Privacy Act”) and any other Code of Practice made under the Privacy Act.
public records act 2005
The Public Records Act 2005 sets the framework for creating and managing information in government. Its purpose is to promote government accountability through reliable recordkeeping, enhance public confidence in the integrity of government records and protect New Zealand’s documentary heritage.
As a provider of a government service you are required to manage information relating to Youth Service clients in a manner consistent with the Public Records Act.
This means that you need to keep accurate records of your dealings with young people and not destroy any business records without authorisation.
complaints
Should a young person want to make a complaint about a breach of privacy you must ensure they are aware of their legal rights and where to go in order to seek redress. In the first instance this is you as their Service Provider. However, if the client is not satisfied with the action you take as a result of the complaint, you must ensure they are aware that they can make a complaint to the Privacy Commissioner.
If you do receive a complaint about the service you are providing you must notify YSSU immediately.