St Joseph's School
|
|
|
Our school respects the privacy rights of students, staff, parents/guardians, and other members of the school community under the Privacy Act 2020. We manage 
personal information in accordance with the information privacy principles of the Privacy Act, and follow the processes below for collecting, protecting, accessing and correcting, and sharing personal information.
Collecting personal information
St Joseph's School only collects personal information when necessary for the operation of the school (Principle 1).
Our purpose for collecting personal information includes:
We collect information in a fair and lawful way that respects individual privacy as much as possible, especially the privacy of children or young people. We collect personal information directly from the person concerned, or from an appropriate person if needed (e.g. parent/guardian/caregiver). If a person does not want to disclose information, we may collect it from other sources if necessary (Principles 1 and 2).
If we collect information from another source, we let the person concerned (or their parent/guardian/caregiver) know about this collection as soon as practicable, and we take reasonable steps to ensure whatever information we have collected is accurate before use (Principle 8).
To comply with Principle 3, we let people know, as appropriate:
If it is not practicable at the time then we will inform people as soon as practicable after collection. We are not required to inform people if it is not necessary under the exceptions to Principle 3.
Protecting personal information
At St Joseph's School, we protect personal information from loss; and unauthorised access, use, or disclosure (Principle 5). This may include but is not limited to:
Accessing and correcting personal information
Under the Privacy Act, anyone has the right to request access to their personal information, and ask for it to be corrected (Principles 6 and 7). Personal information may be requested by the person the information is about, or someone who represents them or is legally responsible for them (e.g. parents/guardians). They have a right to access this information unless it falls under the exceptions listed in the Privacy Act (s 49–53). See Personal Information Access and Correction.
We take reasonable steps to make sure personal information is correct, up to date, relevant, and not misleading (Principle 8). Individuals may request correction of their information. If we have a reason not to correct it, a record of the request is held with the information.
Sharing personal information
At times, St Joseph's School may need to share personal information (e.g. with parents/guardians, volunteers, third-party service providers, external agencies, the public). We comply with the information privacy principles of the Privacy Act 2020 and other relevant legislation when sharing the personal information of an individual. We only share information if sharing it is directly related to the purpose for which it was collected, if it is authorised by the person concerned, or if sharing is allowed by one of the other exceptions in the Act (Principle 11).
To support teaching, learning, and communication with our school community, we may need to share personal information about individuals within the school community (e.g. an email address or phone number) with third parties. We require third parties to maintain confidentiality.
Where appropriate and practicable, we seek authorisation/consent before sharing information. We ensure that the person is fully informed about:
If a student is not able to provide authorisation/consent, we seek it from their parent/guardian. We keep a record of any agreements to share information. We consider any request to withdraw authorisation/consent to information sharing.
Information about a person is not given to a third party without the person's authorisation/consent, unless:
We consider whether to tell a person as soon as practicable after their personal information is shared with a third party. Our decision is based on the following factors:
Specific sharing provisions
Third party providers
St Joseph's School only works with third-party service providers if we are satisfied that their privacy policy, settings, and controls are secure and managed appropriately, and that the information we provide will only be used for the purpose it was gathered. We only disclose information to third-party providers outside New Zealand if we are satisfied that they are either subject to the Privacy Act (because they do business in New Zealand) or are subject to comparable privacy laws in their own country and will ensure they adequately protect the information (Principle 12).
We consult with our school community about the introduction and use of services from third-party service providers where this is relevant to personal information and use all reasonable endeavours to accommodate those who wish to opt out of a particular service due to privacy concerns (e.g. IT software).
Others
For further details about how we share student personal information, see:
Hei mihi | Acknowledgement SchoolDocs appreciates the professional advice of Kathryn Dalziel, senior barrister specialising in privacy law and certified seminar leader for the Office of the Privacy Commissioner. |
Release history: Term 1 2024, Term 2 2021, Term 1 2021
