OPC gets tough on mandatory privacy breach notification in New Zealand

Just over six months after requirements for mandatory notification of serious privacy breaches were introduced with the Privacy Act 2020, the Office of the Privacy Commissioner (OPC) has released further guidance in a blog post. The update makes it clear the OPC has ended the grace period for agencies to adapt to the new rules. […]

NZ Privacy Act 2020 update #3 – The serious ‘serious harm’ decision

Today New Zealand’s new privacy regime comes into effect. Arguably the most important change created by the Act is that it is now mandatory for businesses to report privacy breaches in situations likely to cause serious harm. Assessing whether a business has a reasonable belief that a breach has caused serious harm can be a […]

NZ Privacy Act 2020 update #2 – NZ medical practitioners’ obligations

On 1 December 2020, New Zealand’s new privacy regime will come into effect. The new legislation updates New Zealand’s 27-year-old privacy framework, including a new Health Information Privacy Code. Under the Code, medical practitioners continue to have an obligation to provide patients with their health information. They also continue to have an obligation to ensure […]

NZ Privacy Act 2020: Update 1 – What the new law means for insurers and their insureds

On 30 June 2020, New Zealand’s privacy regime was reformed with the royal assent of the Privacy Act 2020. The new legislation will come into effect on 1 December 2020. The new legislation introduces a range of reforms that bring New Zealand into line with international best practice for privacy and data protection. These include mandatory […]