Privacy
We work to incorporate the principles of Privacy by Design, including ensuring end-to-end security, user-centricity, and privacy settings by default.
On this page I tēnei whārangi
The Business Connect platform complies with the principles of the Privacy Act 2020. The Ministry of Business, Innovation and Employment (MBIE), as the host agency, manages operations on the Business Connect platform.
A comprehensive Privacy Impact Assessment (PIA) has been carried out by an independent party. High-priority recommendations identified in the assessment have been completed, are in progress, or are planned for future implementation.
The independent PIA:
- discusses potential privacy risks
- discusses possible privacy impacts on personal information collected, stored, and used by the Business Connect platform (and by MBIE, as the host agency)
- analyses information and information flows across all 12 information privacy principles of the Privacy Act 2020.
Your organisation’s processes and rules may differ from MBIE’s, so you may need to carry out your own PIA for services delivered through the Business Connect platform.
Please consult your privacy officer and legal team to determine whether a specific PIA is required. Even if you rely on MBIE’s PIA, you remain accountable for managing information about your staff and customers and may need to demonstrate that you have undertaken your due diligence.
The full Privacy Impact Assessment is available on request. Contact us at:
Managing data
Your organisation will be responsible and liable under the Privacy Act 2020 for the collection and processing of personal information (application and case data) via the Business Connect platform.
The data an end user enters is their own and is not visible to a government organisation until it is submitted. Councils and agencies cannot access draft case data in any way.
Business Connect is not intended to be the system of record for government services, or the source of truth. For this reason, councils and agencies must ensure that they move any application data they must retain to their own backend systems.
Your organisation will need to decide on a data retention period for the information that has been submitted to you via the Business Connect platform.
For more information see our privacy statement.