New Zealand Privacy Act 2020

New Zealand Privacy Act 2020 — 88% of in-scope requirements covered.

4 requirements · 4 in scope (3 enforced · 1 designed). The 88% is weighted over the in-scope base.

New Zealand Privacy Act 2020: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. ipp-5 · enforced

    Information Privacy Principle 5 — an agency must ensure personal information is protected by reasonable…

    Audit events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1 · Constitution: 12 purpose permission

  2. ipp-10 · enforced

    Information Privacy Principle 10 — personal information obtained for one purpose must not be used for another…

    Audit events: kye.purpose.request.v1, kye.purpose.admissibility.v1 · Constitution: 12 purpose permission

  3. ipp-6 · enforced

    Information Privacy Principle 6 — an individual is entitled to access personal information held about them…

    Audit events: kye.evidence.pack.v1, kye.replay.proof.v1 · Constitution: 31 data governance pack

  4. notifiable-breach · designed

    Part 6 — notifiable privacy breach: notify the Privacy Commissioner and affected individuals of a privacy…

    Audit events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1 · Constitution: 13 resilience loop

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: Privacy Act 2020 (New Zealand) — Information Privacy Principles (IPPs) + Part 6 notifiable privacy breaches.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Storage and security (IPP 5)11000100%
Limits on use (IPP 10)11000100%
Access to personal information (IPP 6)11000100%
Notifiable privacy breaches (Part 6)1010050%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
nz-privacy-act-2020.ipp-5Information Privacy Principle 5 — an agency must ensure personal information is protected by reasonable security safeguards against loss, unauthorised access, use, modification or disclosureenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.tool_call.v1
engines: internal, internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
nz-privacy-act-2020.ipp-10Information Privacy Principle 10 — personal information obtained for one purpose must not be used for another purpose without authorityenforcedaudit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1
engines: internal, internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
nz-privacy-act-2020.ipp-6Information Privacy Principle 6 — an individual is entitled to access personal information held about them, supported by a record of how that information was usedenforcedaudit_events: kye.evidence.pack.v1, kye.replay.proof.v1
engines: internal, internal
constitution_refs: constitution/31-DATA-GOVERNANCE-PACK.md
nz-privacy-act-2020.notifiable-breachPart 6 — notifiable privacy breach: notify the Privacy Commissioner and affected individuals of a privacy breach that has caused or is likely to cause serious harmdesignedaudit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1
engines: internal, internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.