Privacy Act 2020
Privacy Act 2020
New Zealand
In force since 2020
Asia & Africa
Who must comply
Agencies in New Zealand and overseas businesses that carry on business in New Zealand and handle personal information of people there.
Penalties
Offenses carry fines up to NZ$10,000, and the Commissioner can issue compliance notices and refer matters to the Human Rights Review Tribunal.
Key obligations
- Collect personal information only for a lawful, clear purpose
- Be transparent about collection and use
- Give individuals access to and correction of their information
- Apply reasonable security safeguards
- Notify the Commissioner and affected people of notifiable breaches
How ConsentX helps
Transparent purpose notice in the banner
Preference and access request intake
Consent and preference receipts
Breach-ready evidence logs
Region rule engine tuned for New Zealand
Get Privacy Act 2020 ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with Privacy Act 2020 using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Privacy Act 2020.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Privacy Act 2020 requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Privacy Act 2020 audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does New Zealand require cookie consent?+
There is no blanket cookie consent rule, but collection must be fair, open and for a clear purpose under the privacy principles.
Who enforces New Zealand's Privacy Act?+
The Office of the Privacy Commissioner, the OPC, administers and enforces the Act.