Data Principles & Corrections

Iwi disclosure in Aotearoa is largely discretionary: iwi and post-settlement governance entities choose to publish annual reports because doing so is the practical bargain of a Treaty settlement and the expectation of iwi members. Te Puni Kōkiri and Te Arawhiti maintain public records of iwi populations, settlement quanta, and governance arrangements. We treat all of this as the floor of what we may republish, not the ceiling.

For iwi entities that are also registered charities under the Charities Act 2005 §25, the trustee, officer, and remuneration disclosures on the Charities Register are public by statute, and we apply the same tier-aware visibility framework that governs CharityData. For iwi entities that are also NZ companies, the director and shareholder records on the Companies Act 1993 §215 register apply.

Republication of information from a publicly available publication is expressly permitted under Privacy Act 2020 sections 7 and 22 (IPP 11(e)(iii) / IPP 12(d)).

When an iwi voluntarily publishes its annual report containing named trustee or director governance fees, we treat that as a deliberate choice to disclose. We republish those fees on iwi entity pages and on the cross-platform person profile, alongside the source iwi name and financial year, with a link back to the originating annual report wherever possible.

Iwi disclosure is voluntary — there is no statutory regime equivalent to the PBE IPSAS standards that compel charity remuneration disclosure. We mirror the discretionary framing by scaling fee visibility to the iwi’s size, so the public-transparency expectation matches the iwi’s footprint. This is the same model our sister site CharityData applies to PBE tiers, calibrated for iwi balance-sheet scale.

Tier is derived from the iwi’s most recently filed total assets (preferred) or commercial revenue. Sub-$10,000 disclosures are always restricted regardless of tier — small per-meeting honoraria don’t carry public-interest weight commensurate with surfacing them next to a person’s name.

We do not infer or estimate fees that the iwi has chosen not to publish. Where an iwi publishes only an aggregate KMP figure or salary band, we publish the aggregate or band, not a calculated per-person figure.

An iwi or PSGE may request that its governance-fee disclosure on IwiData be redacted to band-only or removed entirely via the dispute & right-of-reply form, regardless of size tier— the tier framework is the floor, not the ceiling. We honour such requests where the trustees have considered the matter and recorded the decision, and publish a brief note in place of the redacted figure noting that information was previously disclosed and is now restricted at the iwi’s request.

We acknowledge the special constitutional status of iwi under Te Tiriti o Waitangi and the responsibility we hold when republishing information about iwi leaders. Where an iwi indicates that particular information is tapu, sensitive, or otherwise unsuitable for cross-platform aggregation, we will work with the iwi’s nominated representative to find an appropriate display arrangement — including, where warranted, full removal from this site even if the underlying source remains public.

We do not republish information that the iwi has indicated should remain on the marae or in private channels, and we do not repurpose iwi-published material for analysis that the iwi would reasonably regard as inconsistent with the spirit in which the material was shared.

The cross-platform person profile is excluded from search-engine indexing for individuals whose only governance role is on a single small iwi or charity board, in line with the same rule that applies on CharityData.

AI training crawlers (GPTBot, ClaudeBot, PerplexityBot, Applebot-Extended, Bytespider, cohere-ai and similar) are blocked via robots.txt from all /iwi-people/ and /people/ URLs, so iwi-officer profile material is not ingested into general-purpose AI training corpora.

The following are not statutorily-public-by-design and we will remove them within 24 hours of a verified request, no debate:

• Photographs of an individual
• Personal email addresses or direct phone numbers
• Home addresses (where these have leaked from a source we did not vet)
• Any data point about a minor or a person with a current protective order
• Data about anyone with suppressed identity grounds under Privacy Act ss 24-25

Submit a request via our public dispute & right-of-reply form. Every submission goes to our editorial review queue with a 5-business-day response target. Outcomes:

• Factual error
  We correct it within 24 hours of verifying against the underlying annual report or settlement document. We do not amend records inside the source publication itself.
• Right of reply
  You or the iwi may submit a brief contextual statement (e.g. role scope, kaupapa, comparator basis) and we will publish it on the relevant profile alongside the data point it addresses.
• Iwi-published data the iwi has reconsidered
  We will redact governance fees to band-only or remove on request from the iwi or PSGE, with a brief note in place noting that the information was previously disclosed and is now restricted at the iwi’s request.
• Truly-personal data
  Removed within 24 hours per the list in the previous section.

The dispute form accepts user-submitted content (right-of-reply statements, contextual notes from iwi or PSGE representatives) that we publish alongside the data point it addresses. Where you believe such user-submitted content, or any other content posted by another user, is harmful to a third party under the Harmful Digital Communications Act 2015, you can ask us to take it down via the dispute form by selecting “Harmful content posted by another user (HDCA takedown)” as the dispute type.

We follow the §23–24 safe-harbour process. Within 48 hours of receiving the notice we will either (a) forward the complaint to the content author with your personal details redacted (unless you tell us we can share them), or (b) remove the content if the author cannot be reached. The 48-hour clock runs from when the notice arrives, not from when it is read.

The HDCA takedown path is for content posted by other users. For corrections to information we ourselves publish (iwi annual report data, governance fees, cross-platform aggregations), use the standard editorial dispute path with its 5-business-day SLA — see the previous section.

If you believe our handling of personal information falls short of the Privacy Act 2020, you can raise a complaint with the Office of the Privacy Commissioner at privacy.org.nz. We cooperate fully with any OPC inquiry and abide by determinations.