About your organisation

What best describes your organisation?

This helps tailor guidance to your situation. Different types of organisations have different risks and obligations.

Sports or community club Health, fitness, or wellbeing practice Financial services (bookkeeper, accountant, adviser) Legal practice Charity or non-profit Community or cultural organisation (e.g. marae committee, kōhanga reo, community house, church or faith group) Real estate or property services Small business or trade (e.g. tradesperson, consultant, retailer) Other

Roughly how many people's information does your organisation hold?

Think about members, clients, patients, donors, volunteers — anyone whose personal details you store in any form, including paper records.

Fewer than 50 50 to 250 250 to 1,000 More than 1,000

What types of information do you hold about people?

Tick everything that applies. It's common to hold more types of data than you first think. Under the Privacy Act, all of this counts as personal information.

How many people access your organisation's systems or data?

Include employees, volunteers, committee members, contractors — anyone who can log in or access files.

Just me 2 to 5 people 6 to 15 people More than 15 people

If your computer or systems were unavailable, how would it affect your work?

This clarifies how critical your technology is to your day-to-day operations.

Minor inconvenience — we could manage with pen and paper for a while Significant disruption — we'd struggle to operate normally We'd have to stop operating entirely