Ministry of Justice

If you're a third-party vendor, supplier or organisation providing services to the Ministry of Justice, you need to know how to handle and protect Ministry and/or court and judicial information. 

The Ministry has an important role in safeguarding the information of people who engage with justice services. We work proactively to ensure all information held by the Ministry is managed according to best practice. 

If you’re a new vendor supplying the Ministry of Justice, or your contract is coming up for renewal, you may be asked to complete the Ministry’s Third-Party Provider and Supplier Assurance Framework. The purpose of the Framework is to better protect the information of the Ministry, courts and judiciary, our third-party vendors, and everyone who uses our services. 

On 1 July 2025, the Public Service Commissioner released the new standard for providing non-government third-parties with access to, or collection of, government-held personal information (standard). 

The standard aims to enhance the protection of government-held personal information. It includes safeguards to protect individuals’ privacy and outlines requirements public service agencies must follow when providing access to, or collecting personal information from, a non-government third-party.  

If personal information is being shared, we will request third parties to provide additional information. Specifically, evidence of privacy practices and compliance with the Privacy Act, to support our due diligence processes and risk assessment, as required by the standard. Additionally, existing or renewing contracts may need to be updated and varied to meet the standard.  

You can read more about the standard at digital.govt.nz(external link), along with the guidance for how agencies should implement the standard(external link). More guidance is being developed and will be available on their website in the coming months. 

For more information, contact ThirdPartyAssurance@justice.govt.nz 

Updated September 2025