Information Privacy Principles (Appendix I)

The current version is available from the Office of the Privacy Commissioner.

PRINCIPLE 1

Collect only the personal information that is necessary for a lawful purpose connected with the business of AUT.

PRINCIPLE 2

Where an agency collects personal information, the agency will collect it directly from the individual concerned.

PRINCIPLE 3

Ensure that the person is aware of:

  • the information being collected
  • the purpose for which it is collected
  • who will store the information
  • who will use it
  • access rights

PRINCIPLE 4

Information is not to be collected by unlawful or unfair means and is not to be an unreasonable intrusion on the personal affairs of the individual.

PRINCIPLE 5

Protect personal information with reasonable safeguards from loss, misuse, or unauthorised access.

PRINCIPLE 6

Provide access to an individual's own personal information.

PRINCIPLE 7

Correct personal information on request by the individual.

PRINCIPLE 8

Take reasonable steps to ensure that information used is accurate, up to date, relevant, and not misleading.

PRINCIPLE 9

Ensure that we do not keep personal information for longer than is required for the purpose it was gathered.

PRINCIPLE 10

Ensure that information gathered for one purpose is not then used for another.

PRINCIPLE 11

Ensure that personal information is not disclosed to any other person or agency.

PRINCIPLE 12

Only use unique identifiers if it is necessary for research purposes.  Unique identifiers may not be cross-linked for tax purposes.

Next section:

EA5 (Appendix K)

Previous section:

EA3 (Appendix H)

Contact AUT research ethics

View the contact details for faculty representatives, research ethics advisor and AUTEC.

Contact details