Data protection: legal requirements for businesses

In Short

• The Privacy Act 2020 governs data protection in New Zealand, setting out 13 principles for how businesses must handle personal information.
• You must report any serious data breaches to the Privacy Commissioner and affected individuals as soon as possible.
• Compliance with sector-specific regulations may apply to businesses in finance, health and telecommunications.

Tips for Businesses

Regularly audit the personal data you collect, how it is used and who has access to it. Keep your privacy policy clear and accessible to customers. Ensure your team understands data protection responsibilities and be prepared with a plan to handle data breaches effectively.