The Commissioner must make rules called information rules. These rules are about how the Commissioner collects, uses, and shares information. The rules must protect people's privacy and keep other information confidential. You can find more about the Commissioner's inquiry function in section 20(i). The Commissioner must make these rules to support their inquiry function and protect the privacy of children, young people, their families, and whānau.

When making information rules, the Commissioner must talk to interested or affected agencies, including hapū, iwi, and Māori organisations. The Commissioner must also talk to the Privacy Commissioner. The information rules are secondary legislation, which means they have to be published in a certain way, as explained in Part 3 of the Legislation Act 2019.

The Commissioner has to follow these rules to keep your information safe. The rules help the Commissioner do their job and keep your information private. This is an important part of the Commissioner's role.