Data Protection and Use Policy (DPUP) v1.2

Status: ✅ Approved    Version: 1.0

Field	Value
ID	GUARD-GOV-007
Category	Governance
Subcategory	data-protection
Type	policy
Owner	Data Governance or Privacy Team
Approved by	—
Approved date	—
Review due	—

Description

A comprehensive policy framework for the respectful, trusted, and transparent use of personal information in the social sector. Establishes five principles (He Tāngata, Manaakitanga, Mana Whakahaere, Kaitiakitanga, Mahitahitanga) and four guidelines (Purpose Matters, Transparency and Choice, Access to Information, Sharing Value) to guide agencies in data collection, use, and sharing practices.

Source document

Data-Protection-and-Use-Policy-DPUP-January-2022-Version-1.2.pdf

Last modified: 2026-04-02

Related guardrails

• GUARD-GOV-005 — Privacy Principles Quick Tour — NZ Privacy Act 2020
• GUARD-GOV-006 — Data and Statistics Act 2022 (New Zealand Public Act)
• GUARD-GOV-003 — Principles and Protocols for Producers of Tier 1 Statistics

Change history

Version	Date	Author	Summary
1.0	2026-04-02	auto-generated	Initial guardrail created from OneDrive source. Policy framework for data protection and use in social sector with Māori-informed principles.