Cookie 同意: New Zealand / Aotearoa

New Zealand's Privacy Act 2020 modernised the earlier 1993 law and is enforced by the Office of the Privacy Commissioner. It is built on 13 information privacy principles and emphasises notice, purpose limitation, and reasonable handling rather than blanket opt-in consent. A notable feature is mandatory notification of privacy breaches that cause serious harm and a new cross border transfer principle. Direct fines are relatively low by global standards, capped at 10,000 New Zealand dollars per offence, but the Commissioner can issue compliance notices and individuals can seek compensation through the Human Rights Review Tribunal. New Zealand holds EU adequacy. Cookies that identify users are personal information.