Check you understand DPUP — quiz

A. Government agencies

B. Any kind of non-governmental organisation (NGO) or charity in New Zealand

C. Government agencies, NGOs  and other service providers

D. Any business or organisation that collects information about people

The correct answer is C.

People have asked whether DPUP could, or should, apply more broadly than the social sector given that its core ideas are respect, transparency and trust.

The answer is ‘yes’, much of what it contains is generally useful as good practice advice.

Find more information about the social sector in DPUP terminology.

A. He Tāngata, Manaakitanga, Mana Whakahaere, Kaitiakitanga and Mahitahitanga

B. Partnership, Participation and Protection

C. Purpose Matters, Transparency and Choice, Access to Information and Sharing Value

D. Rangatiratanga, Whakapapa, Whanaungatanga, Kotahitanga, Manaakitanga and Kaitiakitanga

The correct answer is A.

Summary of each principle

• He Tāngata: Focus on improving people’s lives — individuals, children and young people, whānau, iwi and communities.
• Manaakitanga: Respect and uphold the mana and dignity of the people, whānau, communities or groups who share their data and information.
• Mana Whakahaere: Empower people by giving them choice and enabling their access to and use of their data and information.
• Kaitiakitanga: Act as a steward in a way that people understand and trust.
• Mahitahitanga: Work as equals to create and share valuable knowledge.

Read the DPUP Principles

A. Being clear about why you need data means it’s easier to collect what you need right now, as well as things that you might need at some point in the future.

B. Be clear about purpose from the start to make sure data or information collection or use is based on a clear understanding of why it is needed, and that people’s information is used in a way that improves wellbeing and builds trust.

The correct answer is B.

The Purpose Matters Guideline encourages broader thinking, focused on relationships between New Zealanders who access services, and those who provide and fund them (usually government).

Being clear about purpose and involving others in its development is a foundation to having the most relevant, useful data or information, and collecting and using it in a respectful, trusted and transparent way.

A. Aim for a ‘no surprises’ approach — service users should not be surprised about what information is held about them or how it’s used. Look for ways to provide as many choices as possible around what information people need to provide, how it’s recorded, who sees it, how it’s shared or used.

B. As long as there is no way to identify someone when their information or data is used, then they don’t need to know what it’s being used for. If people want to engage with services, then they are not able to have any choices about how or why their data or information is collected or used, or who gets to have it or see it.

The correct answer is A.

A. Under the Privacy Act 2020, people have the right to access and ask for corrections to their personal information.

The Access to Information Guideline is about Mana Whakahaere and being proactive around these rights. Explain these rights in a way people will understand, make it safe and easy to use them, or look for ways to offer access without service users even having to ask.

B. Under the Privacy Act 2020, people have the right to access and ask for corrections of their personal information. Access to information is about having processes in place to respond to people's written requests to access their information.

The correct answer is A.

Note: There is no legal requirement for people to put a request in writing for their information.

A. All data and information should be open and accessible by anyone who wants it. Sharing Value means that at the end of any work with data and information we let people know what we learned.

B. To make the most of the opportunities that come from data and information. Share the results, insights, analysis or appropriate data with those who have a legitimate interest or use for it.

Sharing Value is also about collaborating and having strong partnerships when it comes to making decisions about the collection or use of people’s data or information.

Involve others with an interest in your work, including service users if possible, from the beginning.

The correct answer is B.

A. He Tāngata: focus on improving people’s lives — individuals, children and young people, whānau, iwi and communities.

B. Manaakitanga: respect and uphold the mana and dignity of the people, whānau, communities or groups who share their data and information.

C. Mana Whakahaere: empower people by giving them choice and enabling their access to and use of their data and information.

D. Kaitiakitanga: act as a steward in a way that people understand and trust.

E. Mahitahitanga: work as equals to create and share valuable knowledge.

The correct answer is D.

The Kaitiakitanga Principle includes the advice:

• Be open and transparent, support people’s interest or need to understand.
• Building trust, being inclusive, respecting a wide range of views, and working in partnership all rely on open conversations about the collection, use and sharing of data and information and the reasons for doing these things.
• It’s important to explain things in an accessible and easy to understand way, and in a manner that matches people’s needs and interests. Different types, formats and levels of detail about data and information use will match different interests, levels of comprehension, context and needs of different groups.

Note that the advice focuses on ‘understanding’ rather than simply providing information, and stresses the importance of open conversations about collection and use of people’s information as an important mechanism for building effective and trusted partnerships.partnerships.

A. Being clear about purpose is the most important part of ensuring that the way we collect and use people’s information is trusted and transparent.

B. If we’re unclear about purpose, then we can’t be sure that a number of legal and ethical considerations have been correctly applied — for example, if we don’t know why we originally collected information, then we don’t know if, and for what, we could re-use it later on.

C. Because the He Tāngata Principle comes first, which stresses the importance of ensuring that any collection or use of people’s information is for their wellbeing, then it makes sense that Purpose Matters is also the first Guideline, so that we can be confident we’ve aligned with this Principle from the start.

D. If we’re unclear about purpose, then it’s impossible to know whether the ‘minimum information needed’ test (part of the He Tāngata Principle) is true.

E. All of the above.

The correct answer is E.

The Purpose Matters Guideline appears first because DPUP is easier to understand in a complete sense, once you have a strong understanding of the role that purpose plays in many topics that relate to a trusted approach to people’s information.

Being careful to understand, and confident in explaining, the purposes behind any collection or use of people’s information, provides a strong foundation for many other detailed activities: writing privacy statements, carrying out privacy impact assessments, and ensuring that service users experience open, transparent and trusted communication about what’s happening with their data and information, and why.