COVID-19 and Privacy Resources
Due to the rapidly changing situation this resource list principally provides links to other resource pages that are periodically updated rather than individual documents.
New Zealand public service resource pages:
Unite against COVID-19: https://covid19.govt.nz/
Ministry of Health: https://www.health.govt.nz/our-work/diseases-and-conditions/covid-19-novel-coronavirus
Rapid Audit of Contact Tracing for COVID-19 in New Zealand (Ministry of Health): https://www.health.govt.nz/publication/rapid-audit-contact-tracing-covid-19-new-zealand
Office of the Privacy Commissioner: https://privacy.org.nz/further-resources/privacy-and-covid-19/
NZ COVID Tracer app Privacy Impact Assessment: https://www.health.govt.nz/
Final Report on the Contact Tracing System: https://www.health.govt.nz/system/files/documents/pages/final-contact-tracing-assurance-committee-report-2020.pdf
Inquiry into Ministry of Health disclosure of Covid-19 Patient Information: https://www.privacy.org.nz/assets/Inquiry-into-Ministry-of-Health-Disclosure-of-Covid-19-Patient-Information.pdf
Response to the Health Care and Policy working group’s Official Information Request regarding the privacy implications in regards to contact tracing technology: www.privacyfoundation.nz/wp-content/uploads/2017/04/Response-to-Official-Information-Request.pdf
Overseas resources
VUB Law, Science, Technology & Society Research group – Data Protection and the Covid-19 Outbreak: https://lsts.research.vub.be/en/data-protection-law-and-the-covid-19-outbreak
Global Privacy Assembly – Data protection and Coronavirus (COVID-19) resources: https://globalprivacyassembly.org/covid19/
Privacy International – Tracking the global response to COVID-19: https://privacyinternational.org/examples/tracking-global-response-covid-19
International Association of Privacy Professionals – COVID-19 Guidance
and resources: https://iapp.org/resources/top
European Commission – Guidance on Apps supporting the fight against COVID 19 pandemic in relation to data protection: https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1587141168991&uri=CELEX:52020XC0417(08)
Suggestions by data privacy professionals and academics for drafting good legislation for contact tracing app: Good legislation to make COVIDSafe trustworthy
UN Global Pulse COVID-19 Data Protection and Privacy Resources https://www.unglobalpulse.org/
New Zealand
Agencies
The Office of the Privacy Commissioner
Netsafe (the approved agency under the Harmful Digital Communications legislation)
The Department of Internal Affairs (which administers spam legislation)
Inspector General of Intelligence and Security
Broadcasting Standards Authority
Links to legislation
Harmful Digital Communications Act 2015
Intelligence and Security Act 2017
Unsolicited Electronic Messages Act 2007
Broadcasting Standard 10 (Privacy)
Documents
Review of NZSIS use of CCTV: a report by the Inspector-General of Intelligence and Security on the New Zealand Security Intelligence Service’s access to, and use of, closed circuit television
Ministerial Policy Statement – Conducting surveillance in a public place: guidance to the GCSB and NZSIS on the conduct of surveillance in a public place
International
Global Privacy Assembly (GPA) – for information about past conferences, see globalprivacyassembly.org/document-archive/declarations-communiques
Global Privacy Enforcement Network (GPEN)
International Privacy Law Library
International Association of Privacy Professionals (IAPP)
The power of data in a pandemic: Technology in the NHS blog on GOV.UK website
The Schrems II judgment of the Court of Justice and the future of data transfer regulation
Tools used by the European Commission for safe exchanges of personal data
Data sovereignty and trade agreements: Three digital kingdoms
Guides
Digital platforms for communication and information sharing: A resource, prepared by the Children’s Privacy working group, on privacy points that should be considered when using digital technologies in education
Contact Tracing – APProaching the Future: A commentary piece, from a privacy perspective, on Dr Ayesha Verrall’s audit report on contract tracing for COVID-19 in New Zealand
Zoom: How to Keep Uninvited Guests Out of Your Zoom Event
AdTech: Information on what AdTech is and why it matters to our privacy.
Age appropriate design: A code of practice for online services.
CERT NZ Protecting your privacy online: Protecting your privacy online means you have more control over where your personal information goes and who has access to it.
Privacy Act Guidance for Landlords and Tenants: A guide to the Privacy Act for landlords and tenants.
Privacy guidelines for Kiwi landlords and tenants: A blog on privacy guidelines for both landlords and tenants.
Get Ready for Upcoming Privacy Law Changes: A guide to help you prepare for the changes to the Privacy Act that will come into effect as a result of the new Privacy Bill.
Privacy and CCTV: A guide to the Privacy Act for businesses, agencies and organisations
PFNZ Position Paper on Privacy Act 2020
Digital Crossroads: The Intersection of Competition Law and Data Privacy
Best interests of the child self-assessment: Tools, templates and guidance for performing a self-assessment into whether your online service treats the best interests of children as a primary consideration.
Books
How we became our data: a Genealogy of the Informational Person by Colin Koopman
Buying your Self on the Internet: Wrap Contracts and Personal Genomics by Andelka M. Phillips
Privacy Online: Law and the Effective Regulation of Online Services by Marcin Betkier
Presentations
Patient Privacy & Information Sharing: this presentation was given by Paul Holmes, on behalf of the Privacy Foundation, at the Medico-Legal Congress 2021 held in Wellington on 26th and 27th July.
Paul is a member of the Privacy Foundation and Managing Director of INFO by Design.
The topic for the presentation was:
Patient Privacy and Information Sharing
- Updating the Health and Information Privacy Code 2020 to align with the Privacy Act 2020
- Orienting privacy legislation to accommodate for developments in technology
- How these changes influence medical information governance and practices
The presentation was developed in collaboration with the Privacy Foundation’s Health Care and Policy Working Group.
Māori Data Sovereignty: Aotearoa’s contribution to global data privacy?:
Privacy Foundation committee member, Gehan Gunasekara, gave this presentation, which examines Māori Data Sovereignty from the standpoint of data privacy. The presentation was held at the University of Auckland’s Sir Owen G Glenn Building on 10 May 2022. Please see the link above to view a recording of the presentation and for details about the topics covered.
Podcasts
Runaway Technology: Can law keep up?: an interview on RNZ’s Nine To Noon podcast with Joshua Fairfield, a Washington and Lee University School of Law professor and author of “Runaway Technology: Can Law keep up?”, about how and why the law should keep pace with innovation in the age of Big Tech.
Microsoft gets tough on AI [16.05]: a discussion on RNZ’s Nine To Noon podcast about companies, such as Microsoft, reigning in their AI ethics policies and restricting usage of their AI-based services in an attempt to self-regulate.
Facial recognition’s creep into commercial spaces – are we ready?: interviews on RNZ’s Nine to Noon podcast with Madeline Newman, executive director of the AI Forum NZ, and Dr Dennis Desmond, a lecturer at the University of the Sunshine Coast, regarding the use of facial recognition for retail loss prevention.
