New Zealand Privacy Act: Updated data breach legislation

Leadership · Insight · Knowledge

Welcome to the Institute of Internal Auditors New Zealand, the professional body for internal auditing

What is internal audit?

Internal audit is a dynamic profession that provides independent assurance that an organisation's risk management, governance and internal control processes are operating effectively Essentially, Internal Auditors help organisations to succeed.

Membership benefits

Join our professional community and access a range of local and international benefits to expand your thinking, knowledge and networks.

Learn More Join Now

Events & training

Connect with other internal audit, risk and assurance professionals and grow your knowledge and skills with a range of online and local events.

Find out more

Subscribe to newsletters

Subscribe to monthly IIA NZ Newsletters here

home | News & Media | news archive | December-2020

New Zealand Privacy Act: Updated data breach legislation

New privacy laws have come into force across New Zealand as authorities tighten rules regarding data protection.

The Privacy Act 2020 will mandate that organisations must report "serious" data breaches immediately if there is a "risk of harm".

The term "risk of harm" isn't specifically defined in the Act (non-HTTPS link), however it is assumed to refer to any data that has been leaked outside of an organization or public body.

These rules apply to any data handlers based in New Zealand, as well as any overseas organisations that carry out business or collect data relating to New Zealand citizens.

The new law will replace the Privacy Act 1993.