I wonder how this type of data gathering sits with the privacy act.
If you don't know that someone has data on you, how are you able to exercise your rights under the privacy act 2020?
Right to Access Personal Information:
- Individuals have the right to request access to any personal information that an agency holds about them. The agency must provide this information within a reasonable timeframe, typically within 20 working days.
- The information must be provided in a way that is understandable, and individuals can ask for a copy of the information.
Right to Request Deletion (Right to Erasure):
- Although not as extensive as the "right to be forgotten" in some jurisdictions, individuals in New Zealand can request that their personal information be deleted if it is no longer needed for the purpose it was collected, or if it is being held unlawfully.
- Agencies are generally required to comply with such requests unless there is a lawful reason to retain the information
In the context of The Privacy Act 2020, an "agency" is (relevant parts)
Private Sector Organizations:
- Companies, businesses, and non-profit organizations that collect, use, or store personal information.
Note: this is me querying ChatGPT about the privacy act, I'm not a privacy act expert.