Employee Privacy Notice Template for New Zealand

What is a Employee Privacy Notice?

The Employee Privacy Notice is a mandatory document for organizations operating in New Zealand, designed to comply with the Privacy Act 2020 and related employment legislation. It serves as a transparent communication tool between employers and employees regarding the collection, use, storage, and protection of personal information in the employment context. This document should be provided to employees at the commencement of employment and updated as necessary to reflect changes in privacy practices or legal requirements. The notice is particularly important given the increasing focus on data protection and privacy rights in the workplace, and the need for organizations to demonstrate compliance with New Zealand's privacy principles. It covers various aspects of employee data processing, from recruitment through to post-employment record keeping.

About the Employee Privacy Notice

An Employee Privacy Notice is a critical legal document that ensures your organization complies with New Zealand's Privacy Act 2020 while maintaining transparent communication with your workforce about data handling practices. This document protects both employers and employees by clearly outlining how personal information is collected, used, stored, and disclosed throughout the employment relationship.

When do you need this document?

You must provide an Employee Privacy Notice to all new employees, contractors, temporary staff, and work experience students before or at the commencement of their engagement with your organization. The notice is also required when collecting personal information from job applicants during recruitment processes, when implementing new data collection practices, or when making significant changes to existing privacy policies. Additionally, you should update and redistribute the notice whenever there are changes to your data handling procedures, when new legal requirements come into effect, or when expanding into new business areas that require additional personal information collection.

Key legal considerations

Your Employee Privacy Notice must address several critical legal elements to ensure compliance with New Zealand privacy law. The document must clearly identify what types of personal information you collect, including contact details, employment history, qualifications, health information for safety purposes, and performance data. You must specify the purposes for collecting this information, such as payroll processing, performance management, health and safety compliance, and legal obligations. The notice should explain how long you retain personal information and your procedures for secure disposal. Include details about who has access to employee data, both within your organization and any third parties such as payroll providers, insurers, or government agencies. You must also outline employees' rights under the Privacy Act 2020, including their right to access, correct, and request deletion of their personal information.

Legal requirements in New Zealand

Under the Privacy Act 2020, your Employee Privacy Notice must comply with the 13 privacy principles that govern the collection, use, and disclosure of personal information. Principle 3 requires that you collect personal information directly from the individual where possible and inform them about the collection. The Employment Relations Act 2000 mandates good faith obligations in employment relationships, including transparent communication about data handling. Your notice must address health and safety requirements under the Health and Safety at Work Act 2015, particularly regarding the collection of health-related information necessary for workplace safety. The Human Rights Act 1993 requires that your privacy practices don't enable discriminatory behavior in employment decisions. Ensure your notice includes mandatory elements such as your organization's contact details, the authority under which you're collecting information, and clear explanations of how employees can exercise their privacy rights. The notice must be written in plain language that employees can easily understand.