Personal Information Confidentiality Agreement Template for New Zealand

1. International Data Transfers: Required when personal information may be transferred outside New Zealand, ensuring compliance with Privacy Act 2020 requirements for overseas information transfers

2. Industry-Specific Requirements: Added when the agreement relates to specific industries with additional regulatory requirements (e.g., healthcare, financial services)

3. Subcontractor Obligations: Included when the recipient may need to share information with subcontractors or third-party service providers

4. Insurance Requirements: Details specific insurance requirements for data protection, particularly relevant for high-risk or large-scale data processing

5. Audit Rights: Grants rights to audit compliance with the agreement, typically included for more complex or high-risk arrangements

1. Schedule 1 - Categories of Personal Information: Lists and describes all categories of personal information covered by the agreement

2. Schedule 2 - Security Protocols: Detailed technical and organizational security measures required for protecting the personal information

3. Schedule 3 - Authorized Personnel: Lists individuals or roles authorized to access the personal information

4. Appendix A - Data Breach Response Plan: Detailed procedures for identifying, reporting, and managing data breaches

5. Appendix B - Privacy Impact Assessment: Assessment of privacy risks and mitigation measures, particularly relevant for high-risk processing activities