This document provides a legal perspective on data security and privacy from Janet Anderson-Bidois, Legal Advisor of Waitemata DHB. It discusses the key responsibilities of DHBs under the Privacy Act and outlines best practices for collecting, storing, using and sharing personal health information. Key points include obtaining informed consent from individuals, only collecting information for the purposes it is needed, keeping information secure and up to date, and permitting access to and correction of personal records.

1. Data Security and
Privacy:
A DHB Legal Perspective
Janet Anderson-Bidois
Legal Advisor Waitemata DHB

3. ! "# $ %

4. &'
( ) #
&( # #
( $ # #
%( * # # #
+( # #
,( ) #

5. &' -
.( $ # #
/( # #
( ' # #
0 1
( # #
(1 # #
& 2
( 3 #

6. 4 5 )
$ $
6 6
* 6 # #
6
) 6# ! '
' 6

7. ! ' ' 6
$ 6 #
)
$ # #
) #
$
$ #
#
$ # 6 7
#

9. *
## 8 ") 9
" 9 *

10. *
6
9 " )

11. *
"
# ")
) ) 6

12. " ) 6
#8 # ) 9
) (
)
#
: :
) ) ($
) 6 6(

13. -
" #
#
6 7 ## (
6
#
) )
) )
) (

14. ; <

15. '# ='
:( > # ? )
) <
@ 6 ( ( (AB
") ! 6 7 #
: # #
$
(
) ( (A
( ( (A