Privacy Officer Training

The alignment between New Zealand’s Privacy Act 2020 and Roman Catholic teaching is found in the intersection of the dignity of the human person and the canonical protection of a person’s "good name" (bona fama).

While the Privacy Act is a secular instrument, its core principles—transparency, purpose-limitation, and individual access—resonate deeply with Catholic moral theology and the legal protections afforded to the faithful under the Code of Canon Law (1983).

1. Theological Justification: Human Dignity and Stewardship

Catholic social teaching (CST) argues that the human person is not merely a data point but an image of God (Imago Dei).

• The Right to Interiority: St. Thomas Aquinas and later theologians emphasize that a person has a right to a "private sphere" where they can relate to God and others without state or social intrusion. Privacy is seen as a necessary condition for the exercise of free will.

• Subsidiarity and Personal Agency: The Privacy Act grants individuals the right to access and correct their information (Principle 6). Theologically, this mirrors Subsidiarity, which holds that individuals should have control over matters that affect them most closely. By giving a person "ownership" over their data, the Act respects their agency.

• Truth and Justice: The Eighth Commandment ("Thou shalt not bear false witness") provides a moral mandate for data accuracy. If a diocese, school or parish holds incorrect data that harms a person’s reputation, it violates the theological requirement for Truth.

2. Canon Law Justification: Protection of Reputation

The Code of Canon Law (CIC) contains specific "Rights of the Faithful" that provide a legal framework strikingly similar to the New Zealand Privacy Act.

• Canon 220: The Right to Privacy and Reputation:
  "No one is permitted to harm illegitimately the good reputation which a person possesses nor to violate the right of any person to protect his or her own privacy (intimitas)."
  This is the "privacy anchor" of the Church. It explicitly forbids the disclosure of information that would damage a person's standing in the community, paralleling the Privacy Act’s focus on preventing the "misuse" of personal information.

• Canon 489 & 490: Secret Archives:
  The Church maintains strict rules on who can access information and for what purpose. This aligns with Principle 11 of the NZ Privacy Act (Limits on disclosure), ensuring that sensitive information (like internal disciplinary matters or "forum internum" issues) is not shared beyond its specific purpose.

• The Seal of the Confessional (Canon 983):
  While the NZ Privacy Act has certain "Law Enforcement" exemptions, Canon Law holds an absolute protection for the "Seal." The Church justifies this by stating that the highest law is the salvation of souls (salus animarum), which requires total privacy in the sacramental encounter.

3. Synthesis of Church and State: The Privacy Act as a Tool for the "Common Good"

The Church teaches that the state has a duty to protect the Common Good. In a digital age, the Common Good includes protection from identity theft, surveillance, and data commodification.

NZ Privacy Principle | Catholic Theological/Canonical Parallel

Principle 1 & 2 (Collection) | Stewardship: Information should only be gathered for a "just cause."

Principle 6 & 7 (Access/Correction) | Justice: The right to ensure one's "Good Name" (Bona Fama) is accurately reflected.

Principle 11 (Disclosure) | Canon 220: Protection of Intimitas (Privacy) from illegitimate harm.

The "Why" that justifies Catholic institutions (like a parish, school or Diocese) strictly following the NZ Privacy Act 2020, is twofold:

1. Civil Obedience: Following the law of the land (Rom 13:1).

2. Moral Duty: We protect data not just because the law says so, but because protecting a person’s information is an act of Charity and Justice that respects their God-given dignity.

Step 4: Choose Your Module

• Once logged in, you will see the "Course Catalogue."

• Click on the recommended module - Privacy ABC, Privacy 101 and Breach Reporting.

• Click the "Enrol me" button to start.

Step 5: Complete and Download Your Certificate

• Work through the interactive slides and the short quiz at the end.

• Once you pass the quiz, a Certificate of Completion will be generated. Please keep a record of these to varify your induction.

Tips to help with your journey:

• Save as you go: You don't have to finish the module in one sitting. The system will save your progress if you need to close the browser.

• Browser Compatibility: These modules work best in Google Chrome or Microsoft Edge. If a video doesn't play, try refreshing the page.

• Time Commitment: Privacy 101 usually takes about 30–45 minutes to complete.

"Why" we are doing this:

Under the Privacy Act 2020, our Parish , Diocese and Schools are "reporting agencies." We have a legal and moral duty to protect the personal information of our parishoners, students and their families. This training ensures we all understand how to handle data safely and respect the dignity of our community.