{"id":625,"date":"2020-12-16T19:11:23","date_gmt":"2020-12-16T19:11:23","guid":{"rendered":"http:\/\/nz.legalvision.com.au\/?p=625"},"modified":"2021-02-10T17:46:34","modified_gmt":"2021-02-10T04:46:34","slug":"privacy-act-and-information-privacy-principles","status":"publish","type":"post","link":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/","title":{"rendered":"Information Privacy Principles: What is the Privacy Act in New Zealand?"},"content":{"rendered":"\n<p><span style=\"font-weight: 400\">The <\/span><i><span style=\"font-weight: 400\">Privacy Act<\/span><\/i><span style=\"font-weight: 400\"> regulates how businesses, governments and organisations (together, agencies) handle personal information. The <\/span><i><span style=\"font-weight: 400\">Privacy Act 2020<\/span><\/i><span style=\"font-weight: 400\"> replaced the <\/span><i><span style=\"font-weight: 400\">Privacy Act 1993<\/span><\/i><span style=\"font-weight: 400\"> on the 1st of December 2020. Therefore, there are some key differences, which include:<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><span style=\"font-weight: 400\">the introduction of a new Information Privacy Principle that sets out how you can disclose personal information outside of New Zealand;<\/span><\/li><li><span style=\"font-weight: 400\">a new privacy breach notification scheme; and<\/span><\/li><li><span style=\"font-weight: 400\">the inclusion of some overseas agencies within the scope of the <\/span><i><span style=\"font-weight: 400\">Privacy Act<\/span><\/i><span style=\"font-weight: 400\">.&nbsp;<\/span><\/li><\/ul>\n\n\n\n<p><span style=\"font-weight: 400\">This article will highlight the key features of the new Act and some of the significant changes from the 1993 Act.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span style=\"font-weight: 400\">The Information Privacy Principles<\/span><\/h2>\n\n\n\n<p><span style=\"font-weight: 400\">The New Zealand Information Privacy Principles (IPPs) are a set of 12 guiding principles that govern how <\/span>you should <a href=\"https:\/\/legalvision.co.nz\/e-commerce\/how-to-handle-personal-data-for-an-ecommerce-business-in-new-zealand\/\">use, collect and disclose<span style=\"font-weight: 400\"> personal information.<\/span><\/a><\/p>\n\n\n\n<p><span style=\"font-weight: 400\">For example, IPP 3 outlines what y<\/span>ou should notify to <span style=\"font-weight: 400\">an individual before you collect their personal information. This includes the reason why you are collecting it. Additionally, IPP 6 provides individuals with rights to access and correct their personal information.<\/span><\/p>\n\n\n\n<p><span style=\"font-weight: 400\">The <\/span><i><span style=\"font-weight: 400\">Privacy Act 2020<\/span><\/i><span style=\"font-weight: 400\"> also introduces a new Information Privacy Principle<\/span>, which<span style=\"font-weight: 400\"> has been inserted as the new IPP 12<\/span>. Therefore, this <span style=\"font-weight: 400\">mak<\/span>es<span style=\"font-weight: 400\"> the former IPP 12 (Unique Identifiers) the new IPP 13.&nbsp;<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span style=\"font-weight: 400\">IPP 12 &#8211; Transfers of Personal Information Outside of New Zealand<\/span><\/h2>\n\n\n\n<p><span style=\"font-weight: 400\">The new IPP 12 regulates how you can send personal information outside of New Zealand. As an agency, you may only disclose personal information to an entity outside of New Zealand in certain circumstances. These include, if you reasonably believe that the foreign person or entity:<\/span><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><span style=\"font-weight: 400\">is subject to the <\/span><i><span style=\"font-weight: 400\">New Zealand Privacy Act;<\/span><\/i><span style=\"font-weight: 400\"> <\/span><\/li><li><span style=\"font-weight: 400\">is subject to laws that provide comparable safeguards to the <\/span><i><span style=\"font-weight: 400\">New Zealand Privacy Act<\/span><\/i><span style=\"font-weight: 400\">;<\/span><\/li><li><span style=\"font-weight: 400\">agrees to protect the information in a way that is comparable with the <\/span><i><span style=\"font-weight: 400\">New Zealand Privacy Act<\/span><\/i><span style=\"font-weight: 400\"> (such as by agreement in a contract); or<\/span><\/li><li><span style=\"font-weight: 400\">is subject to the laws of a country or is a participant in a binding scheme that the New Zealand government has designated as having comparable safeguards to the <\/span><i><span style=\"font-weight: 400\">New Zealand Privacy Act.<\/span><\/i><span style=\"font-weight: 400\">&nbsp;<\/span><\/li><\/ol>\n\n\n\n<p>If you do not satisfy any of these requirements, <span style=\"font-weight: 400\">y<\/span>ou need to inform<span style=\"font-weight: 400\"> the individual that their personal information may not be adequately protected. The individual must then consent to the overseas disclosure.<\/span><\/p>\n\n\n\n\n\n\n\n<h3 class=\"wp-block-heading\">Will the New IPP 12 Affect Your Business?<\/h3>\n\n\n\n<p><span style=\"font-weight: 400\">The new IPP 12 requirements represent a significant departure from the current privacy landscape in New Zealand, and it will impact many businesses. For example, i<\/span>f your business transfers personal information to international teams, service providers or developers outside of New Zealand, you may be affected.<\/p>\n\n\n\n<p><span style=\"font-weight: 400\">To date, the New Zealand Government has not whitelisted any countries for having an acceptable privacy regime. However, the European GDPR (data protection law) is one of the strictest privacy regimes worldwide so that may fall within the requirements.&nbsp;<\/span><\/p>\n\n\n\n\n\n\n\n<h3 class=\"wp-block-heading\"><span style=\"font-weight: 400\">An Exception to the IPP 12 Requirements<\/span><\/h3>\n\n\n\n<p>There is one important exception to the requirements in IPP 12. This exception affects agencies that transfer personal information to an overseas recipient, for the recipient to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>hold; or&nbsp;<\/li><li>process on behalf of the sender.&nbsp;<\/li><\/ul>\n\n\n\n<p>In this case, the transfer will not constitute a disclosure, unless:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>the overseas recipient uses the personal information for its own purposes; or&nbsp;<\/li><li>discloses the information.<\/li><\/ul>\n\n\n\n<p>Therefore,<span style=\"font-weight: 400\"> the agency does not have to comply with the steps outlined above. I<\/span>n addition<span style=\"font-weight: 400\">, this exception will allow agencies to rely on overseas cloud storage providers<\/span>, f<span style=\"font-weight: 400\">or example, if they do not have data centres within New Zealand.&nbsp;<\/span><\/p>\n\n\n\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+64800005570\" class=\"not-prose\">0800 005 570<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2452' style='display:none'><div id='gf_2452' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2452' id='gform_2452' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/625#gf_2452' data-formid='2452' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2452' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2452_15\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_15'>Comments<\/label><div class='ginput_container'><input name='input_15' id='input_2452_15' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2452_15'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2452_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2452_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2452_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2452_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2452_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2452_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2452_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2452_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2452_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2452_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' ><\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2452_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2452_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2452_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2452_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.nz\/privacy-policy\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2452_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2452_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.nz\/api\/wp\/v2\/posts\/625' \/><\/div><\/div><div id=\"field_2452_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2452_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2452\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2452&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=8d907caff460821c366ed2411b0c45b3' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2452' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2452' id='gform_theme_2452' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2452' id='gform_style_settings_2452' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2452' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2452' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='AUD' value='ZKRxCe7srx\/8o1V6D7A+azlkDWx2Y4yvL0Eai4J\/sEvYN1mxT2sZ0X\/Ekp\/9r3c2sZLmTPYfLxak0oqCYNqycvJg1d94EzNh\/xDtSrfH3dGSXQc=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2452' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2452' id='gform_target_page_number_2452' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2452' id='gform_source_page_number_2452' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2452' id='gform_ajax_frame_2452' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2452, 'https:\/\/legalvision.co.nz\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2452').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2452');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2452').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2452').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2452').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2452').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2452').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2452').val();gformInitSpinner( 2452, 'https:\/\/legalvision.co.nz\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2452, current_page]);window['gf_submitting_2452'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2452').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2452').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2452]);window['gf_submitting_2452'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2452').text());}else{jQuery('#gform_2452').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2452\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2452\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2452\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2452\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2452, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\"><span style=\"font-weight: 400\">Businesses Outside of New Zealand<\/span><\/h2>\n\n\n\n<p>If your business&#8217; location is outside of New Zealand but you are \u2018carrying on a business\u2019 within New Zealand, you will still need to comply with The <em>Privacy Act 2020<\/em>. While it is not clear what \u2018carrying on a business\u2019 means, the Act does specify that organisations still need to comply, even if:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>they are located outside of New Zealand; or&nbsp;<\/li><li>do not make a profit based on their activities within New Zealand.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span style=\"font-weight: 400\">Privacy Breach Notification Scheme<\/span><\/h2>\n\n\n\n<p><span style=\"font-weight: 400\">The <\/span><i><span style=\"font-weight: 400\">Privacy Act 2020<\/span><\/i><span style=\"font-weight: 400\"> introduces a privacy breach notification scheme. <\/span>This scheme specifies what to do if you <span style=\"font-weight: 400\"><a href=\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-breaches\/\">suffer a privacy breach<\/a>. F<\/span>or instance, if<span style=\"font-weight: 400\"> you believe t<\/span>he breach <span style=\"font-weight: 400\">has caused (or is likely to cause serious harm<\/span>)<span style=\"font-weight: 400\">, then you need to notify the individuals a<\/span>ffected<span style=\"font-weight: 400\"> and the Office of the Privacy Commissioner as soon as possible. A breach could include:\u00a0<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><span style=\"font-weight: 400\">an intentional hack;&nbsp;<\/span><\/li><li><span style=\"font-weight: 400\">an employee losing a company laptop;<\/span> or<\/li><li><span style=\"font-weight: 400\">an accidental failure to bcc when sending an email to all clients.<\/span><\/li><\/ul>\n\n\n\n<p><span style=\"font-weight: 400\">However, not all privacy breaches will attract an obligation to notify<\/span>.<span style=\"font-weight: 400\"> <\/span>I<span style=\"font-weight: 400\">f you think you have experienced a privacy breach it is e<\/span>ssential<span style=\"font-weight: 400\"> to obtain immediate legal advice. <\/span>For example, your privacy lawyer can<span style=\"font-weight: 400\"> h<\/span>elp you assess<span style=\"font-weight: 400\"> if y<\/span>ou need to notify the breach<span style=\"font-weight: 400\"> o<\/span>r take <span style=\"font-weight: 400\">any steps to mitigate its impact.&nbsp;<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span style=\"font-weight: 400\">Key Takeaways<\/span><\/h2>\n\n\n\n<p>The <em>Privacy Act 2020<\/em> replaced the Privacy Act 1993 on the 1st December 2020. It includes:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>a privacy breach notification scheme;<\/li><li>greater restrictions on agencies when disclosing personal information overseas; and&nbsp;<\/li><li>it can apply to agencies located outside of New Zealand.<\/li><\/ul>\n\n\n\n<p><a href=\"https:\/\/legalvision.co.nz\/it-lawyers-lp\">LegalVision\u2019s New Zealand privacy lawyers<\/a> can assist you in developing privacy documentation and assessing the impact of a privacy breach. Call 0800 005 570 or complete the form on this page.<\/p>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1606880228344\"><strong class=\"schema-faq-question\"><strong><strong><strong>When does the Privacy Act 2020 come into effect?<\/strong><\/strong><\/strong><\/strong> <p class=\"schema-faq-answer\">The <em>Privacy Act 2020 started<\/em> on the 1st December 2020. It replaces the <em>Privacy Act 1993,<\/em><strong> <\/strong>with some<strong> <\/strong>key differences including the introduction of a new Information Privacy Principle and a new privacy breach notification scheme.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1606880258379\"><strong class=\"schema-faq-question\"><strong><strong><strong><strong>What are the Information Privacy Principles (IPPs)?<\/strong><\/strong><\/strong><\/strong><\/strong> <p class=\"schema-faq-answer\">New Zealand&#8217;s Information Privacy Principles (IPPs) are a set of 12 guiding principles that govern how personal information should be collected, used and disclosed. The IPPs cover many issues such as an individual\u2019s rights of access to personal information held about them and it sets out the types of matters that an individual should be notified about before they provide their personal information to an agency.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1606880271477\"><strong class=\"schema-faq-question\"><strong><strong><strong>What does the new Information Privacy Principle 12 regulate?<\/strong><\/strong><\/strong><\/strong> <p class=\"schema-faq-answer\">New Information Privacy Principle 12<strong> <\/strong>regulates how personal information can be sent outside of New Zealand. There are four conditions provided and one of them must be satisfied for an agency to be able to disclose personal information to an entity outside of New Zealand.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1606989773267\"><strong class=\"schema-faq-question\"><strong>What is the privacy breach notification scheme?<\/strong><\/strong> <p class=\"schema-faq-answer\">The <em>Privacy Act 2020<\/em> introduces a privacy breach notification scheme. It requires an agency who suffers a privacy breach that they believe has caused or is likely to cause serious harm to notify both the individuals impacted by the privacy breach and the Office of the Privacy Commissioner as soon as possible. Not all privacy breaches will attract an obligation to notify.\u00a0<\/p> <\/div> <\/div>\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"d2c2fab9ad\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/625\" \/>            <input value=\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"Information Privacy Principles: What is the Privacy Act in New Zealand?\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The Privacy Act regulates how businesses, governments and organisations (together, agencies) handle personal information. The Privacy Act 2020 replaced the Privacy Act 1993 on the 1st of December 2020. Therefore, there are some key differences, which include: the introduction of a new Information Privacy Principle that sets out how you can disclose personal information outside<a href=\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\">Continue reading <span class=\"sr-only\">&#8220;Information Privacy Principles: What is the Privacy Act in New Zealand?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13109,"featured_media":86,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[28],"tags":[25,38,39,40],"class_list":["post-625","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-privacy-it","tag-small-business","tag-privacy-act","tag-personal-information","tag-privacy-breach"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Information Privacy Principles: What is the Privacy Act? | LegalVision<\/title>\n<meta name=\"description\" content=\"LegalVision senior lawyer, Blythe Dingwall, explains key changes to the Privacy Act, including the introduction of a new Information Privacy Principle.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Information Privacy Principles: What is the Privacy Act? | LegalVision\" \/>\n<meta property=\"og:description\" content=\"LegalVision senior lawyer, Blythe Dingwall, explains key changes to the Privacy Act, including the introduction of a new Information Privacy Principle.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision New Zealand\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-16T19:11:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-02-10T04:46:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2121\" \/>\n\t<meta property=\"og:image:height\" content=\"1414\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Blythe Dingwall\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Blythe Dingwall\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\"},\"author\":{\"name\":\"Blythe Dingwall\",\"@id\":\"https:\/\/legalvision.co.nz\/#\/schema\/person\/32c8aa9ac5261ef80b0a0ade17188701\"},\"headline\":\"Information Privacy Principles: What is the Privacy Act in New Zealand?\",\"datePublished\":\"2020-12-16T19:11:23+00:00\",\"dateModified\":\"2021-02-10T04:46:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\"},\"wordCount\":1097,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/legalvision.co.nz\/#organization\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg\",\"keywords\":[\"small business\",\"privacy act\",\"personal information\",\"privacy breach\"],\"articleSection\":[\"Data, Privacy and IT Articles\"],\"inLanguage\":\"en-NZ\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#respond\"]}]},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\",\"url\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\",\"name\":\"Information Privacy Principles: What is the Privacy Act? | LegalVision\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.nz\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg\",\"datePublished\":\"2020-12-16T19:11:23+00:00\",\"dateModified\":\"2021-02-10T04:46:34+00:00\",\"description\":\"LegalVision senior lawyer, Blythe Dingwall, explains key changes to the Privacy Act, including the introduction of a new Information Privacy Principle.\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880228344\"},{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880258379\"},{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880271477\"},{\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606989773267\"}],\"inLanguage\":\"en-NZ\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-NZ\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage\",\"url\":\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg\",\"contentUrl\":\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg\",\"width\":2121,\"height\":1414,\"caption\":\"How Does NZ Privacy Law Protect Sensitive Information? | LegalVision NZ\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.nz\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Articles\",\"item\":\"https:\/\/legalvision.co.nz\/articles\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Data, Privacy and IT Articles\",\"item\":\"https:\/\/legalvision.co.nz\/category\/data-privacy-it\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Information Privacy Principles: What is the Privacy Act in New Zealand?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.nz\/#website\",\"url\":\"https:\/\/legalvision.co.nz\/\",\"name\":\"LegalVision New Zealand\",\"description\":\"LegalVision is a commercial law firm in NZ with a commitment to innovation\",\"publisher\":{\"@id\":\"https:\/\/legalvision.co.nz\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.nz\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-NZ\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/legalvision.co.nz\/#organization\",\"name\":\"LegalVision New Zealand\",\"url\":\"https:\/\/legalvision.co.nz\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-NZ\",\"@id\":\"https:\/\/legalvision.co.nz\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/LegalVision_square_logo.png\",\"contentUrl\":\"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/LegalVision_square_logo.png\",\"width\":400,\"height\":400,\"caption\":\"LegalVision New Zealand\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.nz\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/LegalVision\",\"https:\/\/x.com\/LegalVision_law\",\"https:\/\/www.linkedin.com\/company\/legalvision-group\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.nz\/#\/schema\/person\/32c8aa9ac5261ef80b0a0ade17188701\",\"name\":\"Blythe Dingwall\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-NZ\",\"@id\":\"https:\/\/legalvision.co.nz\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ad516503a11cd5ca435acc9bb6523536?s=96\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ad516503a11cd5ca435acc9bb6523536?s=96\",\"caption\":\"Blythe Dingwall\"},\"description\":\"Blythe is a Product Manager, working on LegalVision\u2019s market-disrupting LVCPro and Workplace Health and Safety products.\",\"sameAs\":[\"anthony.lieu@legalvision.com.au\"],\"url\":\"https:\/\/legalvision.co.nz\/author\/blythe_dingwall\/\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880228344\",\"name\":\"When does the Privacy Act 2020 come into effect?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The <em>Privacy Act 2020 started<\/em> on the 1st December 2020. It replaces the <em>Privacy Act 1993,<\/em><strong> <\/strong>with some<strong> <\/strong>key differences including the introduction of a new Information Privacy Principle and a new privacy breach notification scheme.\",\"inLanguage\":\"en-NZ\"},\"inLanguage\":\"en-NZ\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880258379\",\"name\":\"What are the Information Privacy Principles (IPPs)?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"New Zealand's Information Privacy Principles (IPPs) are a set of 12 guiding principles that govern how personal information should be collected, used and disclosed. The IPPs cover many issues such as an individual\u2019s rights of access to personal information held about them and it sets out the types of matters that an individual should be notified about before they provide their personal information to an agency.\",\"inLanguage\":\"en-NZ\"},\"inLanguage\":\"en-NZ\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880271477\",\"name\":\"What does the new Information Privacy Principle 12 regulate?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"New Information Privacy Principle 12<strong> <\/strong>regulates how personal information can be sent outside of New Zealand. There are four conditions provided and one of them must be satisfied for an agency to be able to disclose personal information to an entity outside of New Zealand.\",\"inLanguage\":\"en-NZ\"},\"inLanguage\":\"en-NZ\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606989773267\",\"name\":\"What is the privacy breach notification scheme?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The <em>Privacy Act 2020<\/em> introduces a privacy breach notification scheme. It requires an agency who suffers a privacy breach that they believe has caused or is likely to cause serious harm to notify both the individuals impacted by the privacy breach and the Office of the Privacy Commissioner as soon as possible. Not all privacy breaches will attract an obligation to notify.\u00a0\",\"inLanguage\":\"en-NZ\"},\"inLanguage\":\"en-NZ\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Information Privacy Principles: What is the Privacy Act? | LegalVision","description":"LegalVision senior lawyer, Blythe Dingwall, explains key changes to the Privacy Act, including the introduction of a new Information Privacy Principle.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/","og_locale":"en_US","og_type":"article","og_title":"Information Privacy Principles: What is the Privacy Act? | LegalVision","og_description":"LegalVision senior lawyer, Blythe Dingwall, explains key changes to the Privacy Act, including the introduction of a new Information Privacy Principle.","og_url":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/","og_site_name":"LegalVision New Zealand","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2020-12-16T19:11:23+00:00","article_modified_time":"2021-02-10T04:46:34+00:00","og_image":[{"width":2121,"height":1414,"url":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg","type":"image\/jpeg"}],"author":"Blythe Dingwall","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Blythe Dingwall","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/"},"author":{"name":"Blythe Dingwall","@id":"https:\/\/legalvision.co.nz\/#\/schema\/person\/32c8aa9ac5261ef80b0a0ade17188701"},"headline":"Information Privacy Principles: What is the Privacy Act in New Zealand?","datePublished":"2020-12-16T19:11:23+00:00","dateModified":"2021-02-10T04:46:34+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/"},"wordCount":1097,"commentCount":0,"publisher":{"@id":"https:\/\/legalvision.co.nz\/#organization"},"image":{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage"},"thumbnailUrl":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg","keywords":["small business","privacy act","personal information","privacy breach"],"articleSection":["Data, Privacy and IT Articles"],"inLanguage":"en-NZ","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#respond"]}]},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/","url":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/","name":"Information Privacy Principles: What is the Privacy Act? | LegalVision","isPartOf":{"@id":"https:\/\/legalvision.co.nz\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage"},"thumbnailUrl":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg","datePublished":"2020-12-16T19:11:23+00:00","dateModified":"2021-02-10T04:46:34+00:00","description":"LegalVision senior lawyer, Blythe Dingwall, explains key changes to the Privacy Act, including the introduction of a new Information Privacy Principle.","breadcrumb":{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880228344"},{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880258379"},{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880271477"},{"@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606989773267"}],"inLanguage":"en-NZ","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/"]}]},{"@type":"ImageObject","inLanguage":"en-NZ","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#primaryimage","url":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg","contentUrl":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/iStock-1152943618.jpg","width":2121,"height":1414,"caption":"How Does NZ Privacy Law Protect Sensitive Information? | LegalVision NZ"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.nz\/"},{"@type":"ListItem","position":2,"name":"Articles","item":"https:\/\/legalvision.co.nz\/articles\/"},{"@type":"ListItem","position":3,"name":"Data, Privacy and IT Articles","item":"https:\/\/legalvision.co.nz\/category\/data-privacy-it\/"},{"@type":"ListItem","position":4,"name":"Information Privacy Principles: What is the Privacy Act in New Zealand?"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.nz\/#website","url":"https:\/\/legalvision.co.nz\/","name":"LegalVision New Zealand","description":"LegalVision is a commercial law firm in NZ with a commitment to innovation","publisher":{"@id":"https:\/\/legalvision.co.nz\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.nz\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-NZ"},{"@type":"Organization","@id":"https:\/\/legalvision.co.nz\/#organization","name":"LegalVision New Zealand","url":"https:\/\/legalvision.co.nz\/","logo":{"@type":"ImageObject","inLanguage":"en-NZ","@id":"https:\/\/legalvision.co.nz\/#\/schema\/logo\/image\/","url":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/LegalVision_square_logo.png","contentUrl":"https:\/\/legalvision.co.nz\/wp-content\/uploads\/sites\/2\/2020\/11\/LegalVision_square_logo.png","width":400,"height":400,"caption":"LegalVision New Zealand"},"image":{"@id":"https:\/\/legalvision.co.nz\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/LegalVision","https:\/\/x.com\/LegalVision_law","https:\/\/www.linkedin.com\/company\/legalvision-group"]},{"@type":"Person","@id":"https:\/\/legalvision.co.nz\/#\/schema\/person\/32c8aa9ac5261ef80b0a0ade17188701","name":"Blythe Dingwall","image":{"@type":"ImageObject","inLanguage":"en-NZ","@id":"https:\/\/legalvision.co.nz\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ad516503a11cd5ca435acc9bb6523536?s=96","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ad516503a11cd5ca435acc9bb6523536?s=96","caption":"Blythe Dingwall"},"description":"Blythe is a Product Manager, working on LegalVision\u2019s market-disrupting LVCPro and Workplace Health and Safety products.","sameAs":["anthony.lieu@legalvision.com.au"],"url":"https:\/\/legalvision.co.nz\/author\/blythe_dingwall\/"},{"@type":"Question","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880228344","name":"When does the Privacy Act 2020 come into effect?","acceptedAnswer":{"@type":"Answer","text":"The <em>Privacy Act 2020 started<\/em> on the 1st December 2020. It replaces the <em>Privacy Act 1993,<\/em><strong> <\/strong>with some<strong> <\/strong>key differences including the introduction of a new Information Privacy Principle and a new privacy breach notification scheme.","inLanguage":"en-NZ"},"inLanguage":"en-NZ"},{"@type":"Question","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880258379","name":"What are the Information Privacy Principles (IPPs)?","acceptedAnswer":{"@type":"Answer","text":"New Zealand's Information Privacy Principles (IPPs) are a set of 12 guiding principles that govern how personal information should be collected, used and disclosed. The IPPs cover many issues such as an individual\u2019s rights of access to personal information held about them and it sets out the types of matters that an individual should be notified about before they provide their personal information to an agency.","inLanguage":"en-NZ"},"inLanguage":"en-NZ"},{"@type":"Question","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606880271477","name":"What does the new Information Privacy Principle 12 regulate?","acceptedAnswer":{"@type":"Answer","text":"New Information Privacy Principle 12<strong> <\/strong>regulates how personal information can be sent outside of New Zealand. There are four conditions provided and one of them must be satisfied for an agency to be able to disclose personal information to an entity outside of New Zealand.","inLanguage":"en-NZ"},"inLanguage":"en-NZ"},{"@type":"Question","@id":"https:\/\/legalvision.co.nz\/data-privacy-it\/privacy-act-and-information-privacy-principles\/#faq-question-1606989773267","name":"What is the privacy breach notification scheme?","acceptedAnswer":{"@type":"Answer","text":"The <em>Privacy Act 2020<\/em> introduces a privacy breach notification scheme. It requires an agency who suffers a privacy breach that they believe has caused or is likely to cause serious harm to notify both the individuals impacted by the privacy breach and the Office of the Privacy Commissioner as soon as possible. Not all privacy breaches will attract an obligation to notify.\u00a0","inLanguage":"en-NZ"},"inLanguage":"en-NZ"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/posts\/625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/users\/13109"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/comments?post=625"}],"version-history":[{"count":10,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/posts\/625\/revisions"}],"predecessor-version":[{"id":202263,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/posts\/625\/revisions\/202263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/media\/86"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/media?parent=625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/categories?post=625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.nz\/api\/wp\/v2\/tags?post=625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}