Privacy law changes to strengthen protection
Significant improvements to our nation’s privacy laws will deliver stronger protections for New Zealanders’ personal
information, Justice Minister Judith Collins announced today.
The Government had previously signalled its intention to repeal and re-enact the Privacy Act, following a Law Commission
report that recommended overhauling and updating the law.
“It’s vital that New Zealanders have confidence in our privacy laws, and that people know their information is in safe
hands,” Ms Collins says.
“Our proposals will put strong incentives in place to ensure businesses, government departments and other organisations
take privacy seriously.”
Ms Collins says advances in technology since the Privacy Act was enacted in 1993 have dramatically changed how personal
information is collected, stored and shared by businesses and government agencies. The reforms will put the onus on
information holders to identify and address risks before they occur.
“Large amounts of personal information are now stored online and transmitted digitally – this has benefits, but also
poses potential risks. It’s now possible for huge amounts of data to be released in a single privacy breach, potentially
affecting large numbers of people,” Ms Collins says.
Key proposals in the reforms include:
Mandatory reporting: Organisations will have to report data breaches to the Privacy Commissioner, and notify affected
individuals in serious cases.
New offences and increased fines: Actions such as failing to notify the Commissioner of a privacy breach or
impersonating someone to obtain their personal information will be illegal and carry a fine of up to $10,000. Existing
maximum fines (for example, for obstructing the Commissioner) will increase from $2,000 to $10,000.
Enhanced powers: The Privacy Commissioner will have new powers, such as the ability to issue compliance notices. The
Commissioner’s current power to independently decide to investigate a privacy issue will be enhanced.
Guidance and clarity: The Office of the Privacy Commissioner will provide more guidance about how to comply with privacy
laws. Also, technical improvements to the Act will make it clearer and easier to understand.
Ms Collins says the reforms will ensure New Zealand privacy law reflects the digital age and brings us into alignment
with our major trading partners.
Recognising the importance of the Privacy Commissioner's role, the Government recently boosted the Office's funding by
$7 million over four years as part of Budget 2014.
The Government will conduct targeted technical consultation on details of the proposals before introducing a Bill to
Parliament.
ENDS