The Government Chief Privacy Officer (GCPO) developed the Privacy Maturity Assessment Framework (PMAF) for agencies to annually self-assess their privacy capability and maturity.

Details about the PMAF and self-assessment process can be found at https://www.digital.govt.nz/standards-and-guidance/privacy-security-and-risk/privacy/privacy-maturity-assessment-framework-pmaf-and-self-assessments/.

The report shows Police’s results in the context of other ‘Category 1’ agencies (those with large holdings of personal information and/or use personal information for multiple purposes).

The 2024 report does not provide specific feedback from the GCPO on Police’s results (compared to previous reports) because of the disestablishment of the GCPO function in June 2024.

The PMAF assessment aligns with the Data Protection and Use Policy (DPUP), which focuses on best practices to implement people-centred privacy.