Description

Adopted Privacy Bill including data protection authority governance (Bill No.34-3)

On 23 June 2020, the New Zealand Parliament adopted the Privacy Bill (No. 34-3). The Act establishes the responsibilities of the enforcement authority, the Office of the Privacy Commissioner. The Commissioner can request agencies to provide contact details of their privacy officers for public inquiries. While lacking the power to issue fines or prosecutions, the Commissioner investigates complaints, with offences under the Act potentially incurring fines up to NZD 10’000. Unresolved complaints may be referred to the Human Rights Review Tribunal, which can award remedies up to NZD 350,000. The Commissioner may name breaching agencies, issue compliance notices, or seek injunctions to prevent misuse of breached personal information.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection authority governance
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2018-03-19
under deliberation

On 19 March 2018, the Privacy Bill (Bill No. 34-3) was introduced to the New Zealand Parliament. Th…

2020-06-23
adopted

On 23 June 2020, the New Zealand Parliament adopted the Privacy Bill (No. 34-3). The Act establishe…

2020-12-01
adopted

On 1 December 2020, the Privacy Act (Act No. 31) entered into force. The Act established the resp…