Pursuant to section 241 of the Land Transport Act 1998 ("the Act"), I authorise the following person, for the purpose and the term, and on the conditions stated below, to have access to the names and addresses of persons:
- who are currently registered in respect of a motor vehicle(s); and
- who have not instructed the Registrar of Motor Vehicles to withhold their details.
Person Purpose Term
DS Online Limited
For a customer who is authorised under section 241 of the Land Transport Act 1998, information may be provided for the purposes for which the authorised customer is allowed access. For a period of five years commencing on 1 November 2012 until
12.00 midnight on 30 October 2017.
(a) The names and addresses are accessed only by the company, or customers of the company whose use of the information is regulated by contract with the company, on the customer’s own behalf and solely for the customer’s own use;
(b) The names and addresses are accessed only for a specified purpose;
(c) The fees charged for the provision of names and addresses from the Motor Vehicle Register are duly paid;
(d) The company must require and enforce, as a team of its contractual agreement with its customers, that its customers only access personal information from the Motor Vehicle Register for a specified purpose, or for a purpose set out in section 235 of the Act, and must inform its customers of this condition;
(e) Any identified instances of unauthorised access are immediately notified to NZ Transport Agency (NZTA) and the Privacy Commissioner;
(f) Before being permitted to access the Motor Vehicle Register under section 241 or the terms of a relevant class authorisation, all the company’s staff and the customer’s staff (through an on-line training module or other appropriate means) must receive training that emphasises that such access must only be for a specified purpose, and refresher training that emphasises that such access must only be for a specified purpose, and refresher training of all staff must also be undertaken at appropriate intervals;
(g) Access by the company’s staff, and those of the customer, must be restricted solely to those members of staff for whom authorised access is essential;
(h) The names and addresses obtained by the company or its customers under this authorisation shall not be disclosed to any third party;
(i) The company must provide an annual report to the NZTA on compliance with these access conditions, the first such report being due on 1 October 2013 (this requirement may be incorporated into the company’s usual audit practices);
(j) The terms and conditions, if any, imposed by NZTA for access to Motor Vehicle Register information; and
(k) The company must maintain a record of access to DS Online Limited including the date and time of access, specific user and IP addresses and the nature of the information disclosed, for a rolling period of 24 months - that is, the information in relation to each time DS Online Limited is accessed, is accessible for a minimum of 24 months.
Dated this 18th day of April 2013.
DAVE WHITERIDGE, Chief Legal Counsel.