This page is about a bill. That means that it's not the law yet, but some people want it to be the law. It could change quickly, and some of the information is just a draft.

Customer and Product Data Bill

Regulated data services - Additional obligations - Requirements for requests, providing services, making information available, and dealing with data

34: Requirements for accredited requestors in regulations or standards

You could also call this:

“Rules for people who can ask for customer information”

The new law might say that there will be rules about how people who are allowed to ask for data (called accredited requestors) should handle it. These rules could be about a few things:

When it comes to dealing with data, the rules might say how you can use, change, or share information about customers. For example, you might need to remove details that could identify a specific person.

The rules might also talk about telling people things. They could say what information you need to share, when you need to share it, and how you should share it. This could include details on how to present, work out, or prepare the information.

Remember, these are just ideas for what the rules might include. The actual rules will be decided later.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=LMS936845.


Previous

33: Accredited requestors must comply with requirements for dealing with data and making information available, or

“Approved information handlers must follow special rules for using and sharing data”


Next

35: Contravention of specified disclosure requirement is infringement offence, or

“Breaking rules about sharing information can lead to fines”

Part 2 Regulated data services
Additional obligations: Requirements for requests, providing services, making information available, and dealing with data

34Requirements for accredited requestors in regulations or standards

  1. Regulations or standards made for the purposes of section 33 may (without limitation) relate to any of the following:

    Dealing with data

  2. requirements, or restrictions, relating to how designated customer data and derived data is used, modified, or disclosed (for example, requirements to de-identify data so that it no longer relates to an identifiable person):
    1. Notifying or otherwise making available information

    2. the information that must be notified or otherwise made available to any person referred to in section 33(2), the times at which, or the events on the occurrence of which, information must be notified or made available, and the manner of notifying or making available the information (including prescribing the manner in which the information is to be presented, calculated, or prepared).