Data Protection and Use Policy

This guidance is a good option for anyone who works directly with service users or communities.

The Data Protection and Use Policy (DPUP) describes what ‘doing the right thing’ looks like when you collect or use people’s personal information. DPUP is for all New Zealanders, particularly agencies and the people who use their services. It focuses on the people behind the information, and shows how to build respectful, trusted and transparent relationships with them.

Here are a range of helpful guides about how to best use DPUP.

• This video explains DPUP’s key concepts.
• You can find out the best way to use this guidance for your project here.
• Here is a quick checklist to check your actions align with DPUP.
• You can find key questions to think about at each step of the information life cycle here.
• Here is a guide for writing a purpose statement.
• Here are some specific guidelines you may find helpful:
  • If you’re a frontline worker who works directly with service users, whānau or communities, check out this guide.
  • If you’re a frontline leader, check out this guide.
  • If you’re working on funding, contracting or partnering, check out this guide.
  • If you’re developing policies, services or programmes, check out this guide.
  • If you’re working on data analysis, research or evaluation, check out this guide.