The PRIS Act gives individuals new rights and protections over their personal information in the hands of IPP entities.
Once all of the privacy provisions in the PRIS Act commence, individuals will have the right to:
- Be informed how their personal information is handled.
- Make a privacy complaint to the Information Commissioner if they believe an IPP entity has interfered with their privacy.
- Be notified if their personal information was involved in a breach that could cause serious harm to them.
- Be notified if an IPP entity uses an automated decision-making process to make a significant decision about them which involves their personal information.
- Request information about the automated decision-making process and human intervention in the decision.
- Access and correct personal information an IPP entity holds about them, in some circumstances.
Print this page
