Business Daily Media

New data privacy rules are coming in NZ — businesses and other organisations will have to lift their games

  • Written by Anca C. Yallop, Senior Lecturer in Strategy, Auckland University of Technology
New data privacy rules are coming in NZ — businesses and other organisations will have to lift their games

Most people these days are aware that what they share online is both valuable and vulnerable. Data privacy has become a major concern for consumers and corporations alike. The issue will come to a head when New Zealand’s Privacy Act 2020[1] comes into force on December 1.

The legislation replaces and updates the 1993 act. Its key purpose is to promote people’s confidence that their personal data and information are secure and will be treated properly.

The act makes notification of privacy breaches[2] mandatory. Organisations receiving and collecting data will now have to report any privacy breach they believe has caused, or is likely to cause, serious harm.

Those organisations can also be issued with compliance notices that require them to do something, or stop doing something, in order to comply with the law.

It will be in their interests to quickly adapt to the new regulations — not just legally, but also commercially. Our research[3] suggests building consumer trust is critical for organisations that require customers to share information with them online.

However, a recent survey[4] commissioned by global technology company Masergy revealed 70% of business leaders find data security challenging.

New Zealand’s Privacy Commissioner has been publicising law changes that will enhance personal protections.

Ethics must keep pace

This is a concern in a technologically driven business environment. The collection and analysis of consumer data are now integral to many industries. The high degree of personalisation and convenience this allows gives many businesses their competitive advantage.

Because of this, data analytics will be among the most important technology investments[5] for New Zealand companies over the next 12 months. With COVID-19 driving increased e-commerce and digital activity, we can expect significant increases in consumer data being exchanged online.

Read more: Big Data is useful, but we need to protect your privacy too[6]

At the same time, the fast pace of technological transformation risks important ethical considerations about data ethics and data governance[7] being overlooked.

As the recent Netflix documentary The Social Dilemma[8] highlighted, the growth of social media, e-commerce and online data surveillance (sometimes known as “dataveillance”) has built a huge system of information accumulation.

This enables organisations to anticipate and change consumer behaviours to drive revenue and gain market control. How they responsibly govern themselves will only become more important[9].

The Social Dilemma highlights the risks inherent in using personal data to predict and influence behaviour.

New Zealand has a good record

Internationally, the European Union’s 2018 General Data Protection Regulation (GDPR[10]) has had a significant impact on international data flows well beyond the EU’s own borders.

GDPR allows the transfer of personal data between countries only if adequate data protection is guaranteed. The level of data protection has to be demonstrated at country level, and the EU has certified[11] New Zealand as “providing adequate protection” of privacy.

This is good news, but organisations will need to ensure their approach to privacy[12] shifts from “are we compliant?” to “are we compliant and doing the right thing?”

Read more: People want data privacy but don't always know what they're getting[13]

Putting customer concerns first

There are several measures we think will help organisations build this trust and comply with the law:

  • being aware of the regulations, including the GDPR and the mandatory data breach reporting provisions in New Zealand’s Privacy Act 2020, as well as other data protection laws that may apply when operating a business internationally

  • using data experts to design effective governance frameworks that ensure data security and protection

  • emphasising transparency — organisations should be able to demonstrate to consumers how their data may be used and the specific benefits they can expect from the data disclosures they make

  • empowering customers — organisations must develop data strategies that will place customers in control of the information they decide to share, while demonstrating how information may be used to benefit others

  • promoting “privacy by design” approaches that allow customers to match their data-sharing preferences with their privacy level preferences.

The Privacy Act 2020 and the GDPR framework will force organisations to recognise the value of their data and be more aware of the growing legal thresholds they need to meet.

But the penalties and reputational risks of noncompliance should not obscure the clear commercial benefits of voluntarily adopting ethical, customer-first business practices.


  1. ^ Privacy Act 2020 (
  2. ^ notification of privacy breaches (
  3. ^ Our research (
  4. ^ recent survey (
  5. ^ technology investments (
  6. ^ Big Data is useful, but we need to protect your privacy too (
  7. ^ data ethics and data governance (
  8. ^ The Social Dilemma (
  9. ^ more important (
  10. ^ GDPR (
  11. ^ certified (
  12. ^ approach to privacy (
  13. ^ People want data privacy but don't always know what they're getting (

Authors: Anca C. Yallop, Senior Lecturer in Strategy, Auckland University of Technology

Read more

Business Reports


Pristine Backdrops, Best-In-Class Offerings and Post-Event Holiday Deals Capturing Interstate and International Interest Recently crowned the tourism capital of Australia, the Sunshine State is drawing thousands of interstate...

Businesses fail the moment they stop asking why

Many business owners don’t realise it, but in business it doesn’t just matter what you do, it matters why you do it. To run a successful company - one better placed to mitigate challenges, grow post-pandemic and buil...

Companies have a simple and legal way to help their workers living in anti-abortion states – expanding paid time off

As the last abortion clinic in Mississippi closes, workers in the state may get some support from their employers. AP Photo/Rogelio V. SolisEmployers looking for ways to support their workers seeking abortions in states where it&r...

Six reasons why it pays to automate billing in your business

Harnessing the power of technology to improve the efficiency and accuracy of your billing process can supercharge productivity and profitability. Is your enterprise plagued by billing errors, or struggling to get invoices out...

How Sport4 is changing the way you watch sports

Forget about pay-per-view or checking the score at half time – Sport4 is changing the way Australians watch sports.  Fresh from their national debut at the Judo Australia National Championships, Sport4’s automated sports...

Advantages of Vacation Rental Management Software

The first vacation rental management software systems were launched in the early 1980s. At the time, they were majorly used by hotel owners to manage their properties online. The main functions included hotel reservations and ...

Content & Technology Connecting Global Audiences

More Information - Less Opinion