Business
Type
Activity
Business Rules
Explanatory notes
Rule ID
BR401
SSC Model
Regulatory information All use of technology solutions for regulatory information management (for example, iBase and Infolog) must comply with:
The SSC Model Standards for
Standards
management -
information gathering and public trust
Technology solutions
- The SSC Model Standards for information gathering
apply to information collected without
- Privacy Act 1993
the subject's knowledge for regulatory,
- Official Information Act 1982
law enforcement or protective security
- Land Transport Act 1998 and Land Transport Rules
reasons.
- the relevant Privacy Threshold Assessment in al cases, and
- the relevant Privacy Impact Assessment (if any)
- All relevant Transport Agency policies relating to information management
Any use outside of these requirements, or any changes made to the use of the system since the privacy assessments, must have the prior approval of the relevant
T3 manager in consultation with the
Legal Services Team.
As requested from time to time for reporting and assurance, the relevant group(s) must report on and confirm compliance with this business rule.
BR402
SSC Model
Collecting information All covert* col ection of personal or regulatory information by Transport Agency employees, office holders, or contractors must have the prior approval of the relevant
T3 manager in consultation with *Covert collection of information
Standards
without the subject's the Legal Services Team and fully comply with:
includes:
knowledge
- Mystery shopping operations
- The SSC Model Standards for information gathering
- Covert surveil ance
- Search and Surveil ance Act 2012
- Privacy Act 1993
*Covert collection of information does
- Land Transport Act 1998 and Land Transport Rules
not include collection of information that
- NZ Bil of Rights Act 1990
the subject has consented to (eg.
- Public Records Act 2005
obtaining police vetting for licence
- Relevant Transport Agency policies and guidelines as amended from time to time
holders or applicants for licences,
authorities or appointments where
Any person receiving information from third parties, other than an official source, must take reasonable steps to verify the source and content of the information, and report to the NZ Police any
consent has been given in writing)
information that appears to have been obtained il egal y.
**Private premises includes a dwelling
No information may be collected covertly if collection requires:
house and marae, but does not include
- trespass
premises, or part of a premises, to which
- observation of private dwelling houses
members of the public are frequently
- use of an interception device to intercept private communications
permitted to have access
- use of tracking devices
- observation of private activity in private premises** or curtilage of private premises, and any recording of that observation, by means of a visual surveil ance device
No information may be col ected by any Transport Agency employee:
- because a person is considered a security threat solely because they lawfully exercise their democratic rights (including the right to freedom of expression, association, and peaceful assembly to
advocate, protest or dissent)
- for the sole purpose of managing reputational risk to the Transport Agency
As requested from time to time for reporting and assurance, the relevant group(s) must report on and confirm compliance with this business rule.
BR403
SSC Model
Use of personal
No personal information held by the Transport Agency may be used to identify security and/or health and safety threats other than for the purposes of referring the threat to the relevant
Standards
information to identify enforcement authority (usual y the NZ Police) and in compliance with:
security and/or health
and safety threats
- The SSC Model Standards for information gathering
under the Official Information Act 1982
- Privacy Act 1993
- Relevant Transport Agency policies and guidelines as amended from time to time
As requested from time to time for reporting and assurance, the relevant group(s) must report on and confirm compliance with this business rule.
Released
BR404
SSC Model
Automated collection Al collection of information for road and traffic management using technology solutions* must comply with:
* for example, use of CCTV, Bliptrack,
Standards
of road user
Araflow, Weigh Right
information
- The SSC Model Standards for information gathering
- Privacy Act 1993
- Land Transport Act 1998 and Land Transport Rules
- the relevant Privacy Threshold Assessment in al cases, and
- the relevant Privacy Impact Assessment (if any)
1982
- All relevant Transport Agency policies relating to information management
No data col ected by technology solutions which col ect anonymised data (for example, Bliptrack and Araflow) may be used to identify a person without prior
T2 manager approval in consultation with
the Legal Services Team.
Act
Any other use outside of these requirements, or any changes made to the use of the system since the privacy assessments, must have prior sign-off from the relevant
T3 manager in consultation with
the Legal Services Team.
As requested from time to time for reporting and assurance, the relevant group(s) must report on and confirm compliance with this business rule.
BR405
SSC Model
Engaging external
All engagement of external security consultants by Transport Agency employees or contractors must comply with Transport Agency procurement policies and have prior approval of the relevant
T2
Standards
security consultants
manager in consultation with the Legal Services Team.
Every engagement with an external security consultant must require the consultant to be licensed under the Private Security Personnel and Private Investigators Act 2010, and comply with:
- The SSC Model Standards for information gathering
- Private Security Personnel and Private Investigators Act 2010
- Private Security Personnel and Private Investigators (Code of Conduct—Surveil ance of Individuals) Regulations 2011
- Search and Surveil ance Act 2012
- Privacy Act 1993
- Official Information Act 1982
Information
- Land Transport Act 1998 and Land Transport Rules
- NZ Bil of Rights Act 1990
- Public Records Act 2005
- Relevant Transport Agency policies and guidelines as amended from time to time
As requested from time to time for reporting and assurance, the relevant group(s) must report on and confirm compliance with this business rule.
BR406
SSC Model
Secondary
All secondary employment or engagement of Transport Agency employees must be approved by the relevant people leader in consultation with the People Group and comply with:
*For example, secondary employment as
Official
Standards
employment
- Transport Agency Code of Conduct
an investigator in the private sector.
- Transport Agency Conflict of Interest Policy
- Other relevant Transport Agency policies and guidelines as amended from time to time.
No Transport Agency information or systems may be used in furtherance of secondary employment without the prior approval of the relevant
T2 manager in consultation with the Legal Services
the
Team.
Any secondary employment or engagement that raises a conflict of interest in relation to information gathering for regulatory purposes* must have the prior approval of the Chief Executive.
As requested from time to time for reporting and assurance, the relevant group(s) must report on and confirm compliance with this business rule.
under
Released
Document Outline
