🇳🇿
New Zealand
Privacy Act 2020
Oceania🟢 Comprehensive
Compliance Score
86%
12 Addressed
2 Partial
0 None
Authority
Office of the Privacy Commissioner (OPC)
Overview
New Zealand's Privacy Act 2020, effective December 2020, is a modern and comprehensive law. The OPC is an active regulator that enforces compliance and offers guidance to organizations.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
AddressedData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in New Zealand?+
New Zealand is governed by the Privacy Act 2020. The law is enforced by the Office of the Privacy Commissioner (OPC). According to our analysis, the country has a Comprehensive level of data protection framework.
Does New Zealand require a Data Protection Officer (DPO)?+
Yes, under the Privacy Act 2020, organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in New Zealand?+
Partially. While Privacy Act 2020 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in New Zealand?+
Under the Privacy Act 2020, organizations must notify the Office of the Privacy Commissioner (OPC) and affected individuals without undue delay in the event of a personal data breach.