PrivacyTerrainStructured privacy law intelligence

apac

New Zealand

New Zealand's Privacy Act 2020 modernized the country's long-standing privacy framework and mandatory breach notification rules.

Primary lawPrivacy Act 2020
Statusin-force
Last reviewed17/04/2026
Coverage qualityseeded-expanded
Confidencemedium
Primary sources1
Secondary sources1
Last checkedUnknown
Freshnessunknown
Review prioritymedium

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Solid seeded coverage, with moderate enforcement detail still to improve.

Breach

Breach deadline (hours)
0
Breach notification required
Yes

Marketing

Cookie consent rule
Cookie compliance is shaped by transparency, fairness, and online tracking guidance rather than a dedicated cookie law.

Transfers

Cross-border transfer restricted
Yes
Data localization required
No

Governance

DPO required
No
Impact assessment required
No
Records of processing required
No

Identity

Effective date
2020-12-01
Effective status
in-force
Last amended
2020-12-01
Law status
active

Scope

Extraterritorial application
Yes
Private sector coverage
Applies to agencies in the private sector, broadly defined.
Public sector coverage
Public agencies are also covered under the Privacy Act 2020.
Territorial scope
Applies to agencies carrying on business in New Zealand, even if they do not have a physical presence there.

Legal Basis

Legal bases
authorized purpose, consent, permitted use under information privacy principles
Requires legal basis
No

Enforcement

Maximum fine
The enforcement model remains comparatively moderate, though compliance notices and reputational risk are meaningful.
Private right of action
No
Regulator or enforcement authority summary
Office of the Privacy Commissioner

Definitions

Personal data definition
Personal information means information about an identifiable individual.
Sensitive data recognized
No

Rights

Right of access
Yes
Right to appeal
Yes
Right to deletion
No
Right to erasure or delete summary
No broad standalone erasure right
Right to object
No
Right to portability
No
Right to rectification or correction summary
Correction right

Official sources

Recent change workflow