Does New Zealand require breach notification?

Yes. The Privacy Act 2020 requires notification to the Commissioner and affected individuals when a privacy breach causes or is likely to cause serious harm.

Does New Zealand have EU adequacy?

Yes. New Zealand holds an EU adequacy decision, allowing personal data to flow freely from the EU to New Zealand.

Asia-Pasifik

Persetujuan kuki di New Zealand / Aotearoa

Persetujuan dan undang-undang privasi di New Zealand / Aotearoa

New Zealand's Privacy Act 2020 modernised the earlier 1993 law and is enforced by the Office of the Privacy Commissioner. It is built on 13 information privacy principles and emphasises notice, purpose limitation, and reasonable handling rather than blanket opt-in consent. A notable feature is mandatory notification of privacy breaches that cause serious harm and a new cross border transfer principle. Direct fines are relatively low by global standards, capped at 10,000 New Zealand dollars per offence, but the Commissioner can issue compliance notices and individuals can seek compensation through the Human Rights Review Tribunal. New Zealand holds EU adequacy. Cookies that identify users are personal information.

Pihak berkuasa

Office of the Privacy Commissioner

Status

Privacy Act 2020 in force since December 2020, with 13 information privacy principles

Undang-undang utama

Privacy Act 2020

Bahasa

English

Siapa yang wajib mematuhi

Agencies in New Zealand and overseas businesses that carry on business in New Zealand and handle personal information of people there.

Penalti

Fines up to 10,000 New Zealand dollars for offences, plus compensation orders

Kewajipan utama

Collect personal information only for a lawful, clear purpose
Be transparent about collection and use
Give individuals access to and correction of their information
Apply reasonable security safeguards
Notify the Commissioner and affected people of notifiable breaches

Panduan tempatan

Apply the 13 information privacy principles
Notify serious harm breaches to the Commissioner
Use the cross border transfer principle for overseas disclosures
Rely on EU adequacy for transfers

Bagaimana ConsentX membantu

Transparent purpose notice in the banner
Preference and access request intake
Consent and preference receipts
Breach-ready evidence logs
Region rule engine tuned for New Zealand

Mula secara percuma

yoursite.com

New Zealand / Aotearoa

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan New Zealand / Aotearoa dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi New Zealand / Aotearoa dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah New Zealand / Aotearoa.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki New Zealand / Aotearoa.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit New Zealand / Aotearoa.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.