Rights and responsibilities: various

How should a school manage privacy issues including disclosure or correction of personal information?

Privacy is an important responsibility for school boards and staff members. Complying with the Privacy Act 2020 is not usually a complicated issue for schools. 

Schools must appoint a privacy officer to encourage and perform compliance with the requirements of the Privacy Act 1993.

Privacy officers – Legislation website

Privacy officers – Privacy Commissioner

Handling requests from individuals

The Privacy Act provides procedures for individuals to request access and correction to their personal information under privacy principles 6 and 7.

Privacy principles – Privacy Commissioner

Privacy Act 2020, part 4 – Legislation website

When a request is made for personal information under the Privacy Act the school must make a decision and give notice of the decision within 20 working days.

The school must take precautions to verify the identity of the individual making the request and ensure only the individual concerned receives the information.

Usually personal information is provided in full to the person it is about, for example, in the case of a student requesting access to their achievement results.

Information can be withheld in limited circumstances.

If a problem arises, contact NZSTA.

See also:

Sharing information – Ministry of Education

Back to school FAQs – Office of the Privacy Commissioner

Updated: December 2020

Tell a colleague | Back to top