ºÚÁÏÊÓƵ

1. International Transfer: Required when data will be transferred outside New Zealand, addressing compliance with Privacy Act 2020 cross-border requirements

2. Data Breach Notification: Detailed procedures for handling and reporting data breaches, recommended for sensitive data

3. Audit Rights: Rights and procedures for auditing data use compliance, recommended for sensitive data or regulatory requirements

4. Research Publication: Terms for publishing research results based on the data, needed for academic or research use

5. Cost and Payment: Include when there are fees associated with data sharing or processing

6. Sub-processors: Required when the data recipient will use third-party processors to handle the data

7. Insurance Requirements: Specific insurance obligations, recommended for high-risk or valuable data

1. Schedule 1 - Data Specification: Detailed technical specifications of the data, including field descriptions, format, and structure

2. Schedule 2 - Security Standards: Specific security requirements and standards that must be maintained

3. Schedule 3 - Authorized Users: List of authorized users or roles permitted to access the data

4. Schedule 4 - Processing Activities: Detailed description of permitted processing activities and purposes

5. Schedule 5 - Fee Schedule: If applicable, breakdown of fees and payment terms

6. Appendix A - Data Privacy Impact Assessment: Assessment of privacy risks and mitigation measures

7. Appendix B - Technical Safeguards: Detailed description of required technical security measures