What are my privacy obligations as a health business?

If you're running a health business in New Zealand, you're likely to be collecting and managing customers' health information. Under New Zealand privacy laws, health information is considered more sensitive than standard data. As such, there are additional requirements that apply.

For instance, if your health business is collecting health information, you are legally required to have a Privacy Policy in place in accordance with the Privacy Act 2020 regardless of your business size.

The sensitive nature of health information means that your business needs to have well-drafted Privacy Policies, Cookie Policies, NDAs, and Terms and Conditions in compliance with privacy laws.

If you're conducting business in the EU, your Privacy Policy will need to comply with the GDPR.