The Select Committee has
played safe on the Privacy Bill, recommending only modest
changes.
While this will make for an easy transition in the short term,
it may also mean further reform is needed in a few years'
time.
In particular, the Bill falls well short of the European Union
(EU) General Data Protection Regulation (GDPR),
which sets the standard for EU engagement – an outcome that
could create compliance costs for some New Zealand businesses.
Key amendments
Raising the threshold for privacy breach
notification
An agency would only need to
notify the Privacy Commissioner and affected individuals of a
privacy breach where it is reasonable to believe the breach is
likely to cause "serious harm".
