New Privacy Act comes into force in December
The Privacy Bill is on its third reading in Parliament and will now become law on 1 Decem-ber 2020. It will repeal and replace the current Privacy Act 1993, and will update the law to reflect the continually-evolving needs of the digital age.
Why new legislation?
Your personal information is stored in many places by organisations such as businesses, government agencies, healthcare providers, financial institutions, social network platforms and telecommunications companies (called ‘agencies’ in the new legislation).
Technology has enabled large quantities of personal information to be stored, retrieved, used and disclosed; the current law does not address how your personal data can be proper-ly protected. The new legislation aims to provide more protection of personal and sensitive information.
The changes relate to both agencies and individuals. Major features are:
1. Reporting data breaches: if an agency has a privacy breach posing a risk of serious harm to people, it must notify the people affected and the Privacy Commissioner
2. Compliance notices: the Privacy Commissioner will be able to issue compliance notices to an agency to require it to do something or stop doing something, to comply with pri-vacy law
3. Decisions on access requests: if a complaint is made about being unable to access cer-tain information, the Privacy Commissioner will make a decision on the complaint. However, this decision can be appealed to the Human Rights Review Tribunal
4. Strengthening overseas connections: at least one permitted category must be satisfied for an agency to disclose information to an overseas agency. In terms of cloud storage, this isn’t considered a disclosure for the purposes of the privacy principles, but the dis-closing agency is responsible for the cloud storage provider’s compliance with the Act, and
5. New criminal offences: these include misleading an agency to obtain access to another person’s information and destruction of documents by an agency which has been asked to provide information by the person entitled to it. The level of fines has been raised to a maximum of $10,000.
What is a privacy breach?
A privacy breach occurs when someone collects, uses, stores or discloses personal infor-mation contrary to the privacy principles, such as accessing personal information without permission, failing to comply with the request for specific information or not using your con-tact details for the purpose for which they were collected.
An example of a privacy breach could be when an unauthorised person accesses your per-sonal information, such as your banking details, and your credit card is used unlawfully.
In business, a breach could occur when an agency incorrectly disposes of confidential docu-ments containing personal information, and that data becomes public.
Privacy laws are important
The recent COVID requirements, where for example, information was provided to a restau-rant when dining out, have highlighted the importance of privacy laws. We, as individuals, have become more aware that we entrust others with our private data and, as a result, we have an increased awareness of compliance with privacy legislation in New Zealand.
Time for a contracting out agreement?You have had years of saving up for the overseas...
Hefty consequences for getting it wrong when company was in financial distress
Rules for both owners and rentersWith New Zealand’s borders closed and overseas travel restricted for...
All the information published on this website, or in any article herein is true and accurate to the best of the authors' knowledge. Information on this site should not be a substitute for legal advice. No liability is assumed by NZ LAW Limited, or individual NZ LAW member firms for losses suffered by any person or organisation relying directly or indirectly on information published on this site. Views expressed in any article are the views of the authors individually and do not necessarily reflect the view of NZ LAW or their member firms. Information appearing on this site may only be reproduced with prior approval from NZ LAW Limited Head Office, and credit being given to the source. © NZ LAW Limited