Implementing Technology - Privacy Toolkit

When implementing technology into your agency’s projects or practices, it's crucial to prioritise the protection of citizens' personal information and build in privacy from the outset. In today's digital landscape, where data is increasingly interconnected, safeguarding privacy is critical. 

Agencies hold a wealth of information including sensitive data entrusted by citizens, from medical records to personal and financial information. Any technological deployment must prioritise the security, protection and access to this information to maintain public trust and confidence in both government and in the services delivered.

Your agency must consider how the technology functions and ensures it complies with the Privacy and Personal Information Protection Act 1998 (PPIP Act) and the Health Records and Information Privacy Act 2002 (HRIP Act). Non-compliance can lead to consequences, including data breaches and loss of trust and confidence. 

A positive commitment to privacy enables a culture of transparency and accountability within your agency. Citizens have the right to understand how their personal information is collected, stored, used, and disclosed by government. Agencies can build trust by being transparent about the practices in place for the handling of personal information. Addressing privacy concerns proactively and engaging in transparent communication with the public about how you use technology, cultivates trust and enhances the relationship between government and citizens. 

Understanding how the technology within your organisation works is key to transparency, accountability, and security. By placing privacy at the forefront when implementing or using new technologies, agencies uphold citizens' rights and demonstrate responsible governance in their personal information handling practices.

The Privacy Commissioner has collated the following key pieces of guidance into a Privacy Toolkit to assist agencies when using, implementing and commencing projects involving technology.

• Privacy by design
• Digital projects
• Digital Restart Fund: assessing information access and privacy impacts
• Privacy Governance Framework
• Guide to Privacy Impact Assessments
• Privacy Impact Assessment Questionnaire for Assessing Websites
• Transition to the cloud: Managing your agency's privacy risks
• The Role of the Privacy Commissioner: Consulting the IPC on Initiatives and Projects
• Privacy Self-assessment Tool

The IPC has more resources available for agencies at privacy resources for agencies.