New Zealand - Data Protection Overview

October 2024 1. Governing Texts This Guidance Note was last updated on September 25, 2024. New Zealand's key piece of data protection legislation is the Privacy Act 2020 (the Act), which came into effect on December 1, 2020. The Act regulates the collection, use, storage, retention, transfer, and other means of processing personal data (in New Zealand, 'personal information') about an individual. In New Zealand, data protection is typically referred to as 'privacy', and unless specifically mentioned, our comments in relation to privacy (such as privacy breach) shall be construed to mean data protection. The Act sets out 13 Information Privacy Principles (the IPPs). The Act's principles-based