Section 4: New Zealand Privacy Notice

1. GBG is subject to the Privacy Act 2020 including the New Zealand Information Privacy Principles (“IPPs”); 
2. The IPPs require that GBG shall ensure that any recipient of Personal Information (as defined in the Privacy Act 2020) handles such Personal Information in accordance with the IPPs;
3. Both parties must:-
4. only collect, use and disclose Personal Information strictly for the purpose for which that Personal Information was disclosed to it; 
5. only store Personal Information for the period necessary to fulfil that purpose and must destroy that information when it is no longer required;
6. protect Personal Information it holds from misuse, interference and loss, as well as maintain/implement systems and processes to ensure the security of personal information;
7. reasonably assist each other to resolve any request for access, correction or a complaint in relation to Personal Information;
8. provide individuals with the right to access and seek correction of Personal Information; 
9. promptly notify the other party if it is aware of any misuse, interference and loss, unauthorised access, modification or disclosure by itself or its personnel;
10. only disclose Personal Information to others in compliance with these requirements after obtaining the appropriate consent; 
11. Ensure where either party transfers any Personal Information outside of New Zealand, it has appropriate frameworks in place to ensure the recipient of the Personal Information is:
12. is subject to the Privacy Act because they do business in New Zealand
13. is subject to privacy laws that provide comparable safeguards to the Privacy Act

• agrees to adequately protect the information, e.g. by using model contract clauses.

1. is covered by a binding scheme or is subject to the privacy laws of a country prescribed by the New Zealand Government.
2. If none of the above criteria apply, both parties warrant that the cross-border disclosure will only occur with the permission of the person concerned. The person must be expressly informed that their information may not be given the same protection as provided by the New Zealand Privacy Act.
3. For the avoidance of doubt, Personal Information is a form of “Confidential Information” as defined in the Agreement;