Section 32 — Immigration Act 2009: Department to undertake privacy impact assessment

32 Department to undertake privacy impact assessment (1) The Department must complete a privacy impact assessment in respect of the collection and handling of biometric information under this Act to— (a) identify the potential effects that the Act may have on personal privacy; and (b) examine how any detrimental effects on privacy might be lessened. (2) The Department must consult the Privacy Commissioner— (a) on the terms of reference developed for the assessment; and (b) when completing the assessment. (3) The Department must review its privacy impact assessment if changes are made to this Act, regulations made under it, or operational policy in respect of the collection or handling of biometric information and, if the review establishes that new or increased privacy impacts have resulted from the changes, must— (a) amend or replace the privacy impact assessment; and (b) consult the Privacy Commissioner on the amended or replacement assessment. (4) The Department must ensure the current privacy impact assessment is— (a) available on the Department's Internet site; and (b) available or readily obtainable for inspection, free of charge, at— (i) offices of the Department; and (ii) New Zealand government offices overseas that deal with immigration matters. (5) Nothing in subsection (4) requires the making available of information that could properly be withheld in accordance with the provisions of the Official Information Act 1982 , were a request to be made for the information under that Act.