The University of Otago is committed to maintaining privacy of personal information and adhering to the principles of the Privacy Act 2020.
This page provides links to key University policies, external information related to privacy, and who to contact about privacy breaches.
The University's overarching policy covering staff access to, and use of, staff and student personal information.
The University's statement on how it collects, uses, stores and discloses student personal information.
Guidance and procedures for authorising staff access to student information through the University's eVision student management system.
A policy containing privacy provisions in relation to the recording of teaching activities (e.g. videoing of lectures).
Privacy considerations in relation to use of the University's website and mobile app.
A privacy breach occurs when there is unauthorised or accidental access to someone's personal information* or disclosure, alteration, loss or destruction of personal information. It can also include situations where the University is stopped either temporarily or permanently from accessing personal information.* Personal information is any information about an identifiable individual, such as their name, address, photo, opinion or viewpoint. The information does not need to name someone specifically, as long as they are identifiable in other ways.
All staff have a responsibility to report privacy breaches.
Even minor privacy breaches must be notified. Further advice will be provided on actions required, which may include completion of the Privacy Breach Notification Form:
Contact during work hours
If you become aware of a privacy breach, immediately notify both your manager and:
Contact outside work hours
For breaches identified outside normal work hours, please contact:
The University Privacy Officer
Disclosing personal information
The Privacy Act 2020 introduces new requirements around disclosing personal information overseas. Read the linked guidance if you need to disclose personal information about others overseas.
Offshore disclosure templates
The following templates can be used as necessary based on specific circumstances, as laid out in the guidance provided. The appropriate template should be selected based on the sensitivity and amount of personal information being disclosed; the nature of the relationship with the person/entity receiving the information; and the country the information is being sent to. See the guide above for more details, or seek direct advice as required.
- Template offshore disclosure consent email (DOCX)
- Template offshore disclosure consent form (DOCX)
- Template offshore disclosure email agreement (DOCX)
- Template offshore disclosure simple agreement (DOCX)
- Template offshore disclosure contract (DOCX)
Personal information posters
- What is personal information? (PDF)
- When can I access personal information? (PDF)
- When can I share personal information? (PDF)
Verifying student identity
Advice on verifying student identity when providing personal information is available to University staff on request. Please contact:
The New Zealand Privacy Commissioner website, including general privacy information and advice, and free online privacy e-learning modules.
New Zealand's main legislation on privacy of personal information, including 13 overarching information privacy principles.