New Zealand's highly anticipated Privacy Act will commence
on 1 December 2020, replacing the Privacy Act 1993.
The new Act aims to modernise New Zealand's privacy law
framework, in accordance with international laws such as the
European General Data Protection Regulation (GDPR) 2018. While much
of the content of the current Act will remain, there are some
significant changes that you and your organisation should be aware
of.
A key change is the mandatory requirement to notify the New
Zealand Privacy Commissioner and the individual affected where a
privacy breach poses a risk of serious harm to that individual. A
privacy breach is:
- Any unauthorised or accidental access to, or disclosure,
alteration, loss, or destruction of, personal information; or
