New Zealand: Introduced Privacy Bill including data protection authority governance (Bill No.34-3)

On 19 March 2018, the Privacy Bill (Bill No. 34-3) was introduced to the New Zealand Parliament. The Act establishes the responsibilities of the enforcement authority, the Office of the Privacy Commissioner. The Commissioner can request agencies to provide contact details of their privacy officers for public inquiries. While lacking the power to issue fines or prosecutions, the Commissioner investigates complaints, with offences under the Act potentially incurring fines up to NZD 10’000. Unresolved complaints may be referred to the Human Rights Review Tribunal, which can award remedies up to NZD 350'000. The Commissioner may name breaching agencies, issue compliance notices, or seek injunctions to prevent misuse of breached personal information.