Recruitment Privacy Notice Template for New Zealand
Generate a bespoke document
What is a Recruitment Privacy Notice?
The Recruitment Privacy Notice is a mandatory document for organizations hiring in New Zealand, designed to comply with the Privacy Act 2020 and related privacy legislation. It should be provided to job applicants before or at the time their personal information is collected. The notice explains how the organization handles candidate data throughout the recruitment process, from application to final decision, including any automated processing, background checks, or third-party involvement. This document is essential for maintaining transparency and building trust with candidates while ensuring legal compliance. Organizations should customize the notice to reflect their specific recruitment practices while maintaining compliance with New Zealand privacy principles.
Frequently Asked Questions
Is a Recruitment Privacy Notice legally required in New Zealand?
Yes, under New Zealand's Privacy Act 2020, employers must provide a privacy notice to job candidates before collecting their personal information. This is mandatory for all recruitment activities and failure to provide proper notice can result in privacy complaints to the Privacy Commissioner and potential penalties.
Can I be fined for not having a proper Recruitment Privacy Notice in New Zealand?
Yes, the Privacy Commissioner can impose penalties up to $10,000 for individuals or $15,000 for organizations that breach privacy principles under the Privacy Act 2020. Candidates can also file complaints, and you may face additional consequences if discrimination occurs during recruitment without proper privacy protections.
How is a Recruitment Privacy Notice different from a general Privacy Policy in New Zealand?
A Recruitment Privacy Notice is specifically designed for job applicants and covers candidate data collection, while a general Privacy Policy covers all personal information handling by your organization. The recruitment notice must be provided before collecting any candidate information and focuses on hiring-specific data uses, retention periods, and candidate rights.
How long should I keep recruitment records under New Zealand privacy law?
New Zealand's Privacy Act 2020 requires you to only retain personal information as long as necessary for the purpose collected. For unsuccessful candidates, this is typically 6-12 months after the recruitment process ends, unless you have their consent to keep information longer for future opportunities.
How quickly can I create a compliant Recruitment Privacy Notice for New Zealand?
Using a template, you can create a basic notice in 1-2 hours by customizing it with your organization's specific details. However, allow 2-3 days for proper review and legal consultation if needed, especially for organizations with complex data handling or international operations subject to additional privacy laws.
Can I collect criminal record information during recruitment in New Zealand?
Yes, but only if it's relevant to the position and you've disclosed this in your Recruitment Privacy Notice. Under the Privacy Act 2020 and Human Rights Act 1993, criminal record checks must be justified by the role's requirements and conducted through proper channels with candidate consent.
Must I tell candidates about background checks in my Recruitment Privacy Notice?
Absolutely. New Zealand's Privacy Act 2020 requires you to inform candidates about all personal information collection, including background checks, reference checks, and social media screening. Your notice must specify what checks you'll conduct, why they're necessary, and how the information will be used in your hiring decision.
About the Recruitment Privacy Notice
When you're hiring employees in New Zealand, you need to provide candidates with clear information about how you'll handle their personal data. A Recruitment Privacy Notice is your legal obligation under the Privacy Act 2020, ensuring transparency throughout your hiring process and protecting both your organization and job applicants.
When do you need this document?
You must provide this notice before collecting any personal information from job candidates. This includes when candidates submit applications, attend interviews, undergo background checks, or participate in any assessment processes. The notice is required whether you're hiring directly or using recruitment agencies, and applies to all positions from entry-level to executive roles. You'll also need this document when collecting reference information, conducting pre-employment medical assessments, or using automated screening tools. If you're a recruitment agency working on behalf of employers, you need this notice to clarify your role in data processing and how candidate information will be shared.
Key legal considerations
Your notice must clearly explain what personal information you collect, including CV details, interview notes, reference checks, background screening results, and any assessment scores. You need to specify all purposes for using this data, from initial screening through to onboarding successful candidates. The document must identify your legal basis for processing under the Privacy Act 2020, whether it's legitimate business interests, contractual necessity, or candidate consent. You must disclose any third parties who will access candidate data, such as background check providers, recruitment agencies, or applicant tracking system vendors. The notice should explain data retention periods, candidates' rights to access or correct their information, and your security measures for protecting personal data.
Legal requirements in New Zealand
Under the Privacy Act 2020, you must collect personal information directly from candidates unless there are specific exceptions, such as reference checks or background screening. Your notice must comply with Information Privacy Principle 3, ensuring you only collect information that's necessary for recruitment purposes. You cannot collect information about protected characteristics under the Human Rights Act 1993 unless it's genuinely relevant to the role. If you're conducting criminal background checks, you must follow the Criminal Records (Clean Slate) Act 2004, which limits disclosure of certain historical convictions. Your recruitment practices must demonstrate good faith under the Employment Relations Act 2000, including transparent communication about your selection process. The notice must be written in plain language that candidates can easily understand, and you must provide it in accessible formats when requested.
GOVERNING LAW
Applicable law
This Recruitment Privacy Notice is drafted to comply with New Zealand law. Key legislation includes:
Human Rights Act 1993: Prohibits discrimination in employment and ensures that information collection during recruitment doesn't lead to discriminatory practices based on protected characteristics.
Employment Relations Act 2000: Contains provisions about good faith dealings between employers and potential employees, including requirements for fair and transparent recruitment processes.
Criminal Records (Clean Slate) Act 2004: Relevant for recruitment processes that involve criminal background checks, establishing when and how criminal history information can be requested and used.
Credit Reporting Privacy Code 2004: Applies if credit checks are part of the recruitment process, governing how credit information can be collected and used for employment purposes.
Protected Disclosures (Protection of Whistleblowers) Act 2022: Relevant for protecting job applicants who have made protected disclosures (whistleblowing) in previous employment and ensuring this information is handled appropriately during recruitment.
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it