AI, privacy and your business data.
Privacy is the number one concern we hear from Wellington business owners thinking about AI. It's a fair concern. The good news is that with the right tools and a few clear rules, you can use AI safely.
The Privacy Act still applies.
The Privacy Act 2020 sets out how New Zealand businesses collect, store, use and share personal information. It doesn't matter whether a person or an AI tool handles that information. The same principles apply, including keeping information secure, only using it for the purpose it was collected and being careful about sending it overseas.
The Office of the Privacy Commissioner has published guidance on generative AI. One of its key messages is to think carefully before putting personal information into AI tools and to assess the privacy risks first.
What staff should and shouldn't share.
As a starting point, we suggest these rules:
- Don't enter personal information about clients, customers or staff into free or personal AI accounts
- Remove names and identifying details where you can before using AI
- Only use approved business-grade tools for work involving client information
- Never enter passwords, bank details or health information unless your policy specifically allows it
Choosing safer tools.
Business plans from the major AI providers generally offer stronger privacy controls than free versions. Look for clear terms on whether your data is used to train models, where it's stored, how long it's kept and what admin controls you get. Check the current terms yourself, as they change.
Higher-risk information.
Health practices should also consider the Health Information Privacy Code 2020. Businesses handling financial, legal or children's information should take extra care and may need professional advice.
Talk it through with Ryan.
We help businesses across the Wellington region set up privacy-safe AI and train staff on the rules.